TrustRadius: an HG Insights company

Symantec Critical System Protection

Score10 out of 10

7 Reviews and Ratings

What is Symantec Critical System Protection?

Symantec Critical System Protection is a lightweight behavioral hardening engine purpose-built to protect legacy, EOL systems and embedded devices, by adding layers of defense at the kernel level to prevent unhygenic operations on IoT devices and machines.

Read more details.

Categories & Use Cases

Product Demos

Who Buys & Uses Symantec Critical System Protection

Symantec Critical System Protection Review

Pros

  • Prevents exploits, unwanted executables, registry changes, and system file changes
  • Can allow exceptions for software vendors such as Microsoft or Adobe
  • Prevents lateral movement with certain network rules configured
  • Can record file changes

Cons

  • Tuning takes a very long time
  • Turning the product on or off can take time
  • When an action is prevented by CSP, there is no pop up or notification, making this a burden for server administrators

Return on Investment

  • Great protection for unchanging systems
  • We have comfort that the protected systems are safe from intrusion
  • Excellent price

Other Software Used

Palo Alto Networks PA-3000 Series, Qualysguard, Symantec Endpoint Protection

Critical System Protection Helps us Meet PCI Requirements

Pros

  • Data Center Security 6.0 and higher allows you to easily build out policies to deploy to monitor/block what is required/needed.
  • The agent that is installed on the hosts has a small footprint in terms of CPU and memory usage.
  • The ability to customize it anyway you need to as well as utilize out of the box policies to monitor critical OS functionality.

Cons

  • Symantec sometimes lacks when it comes to the interface. I hope they keep the software GUI based and do not strictly go to a web interface as they do with other products.
  • Wish the policy packs were released separately via LiveUpdate instead of having to download new software versions.
  • Wish agents could be updated via the console similar to SEP.

Return on Investment

  • It is flexible and provides various functions where we would not need to purchase additional products.
  • We do not have to monitor it 24/7 as long as the alerts are configured properly.
  • It makes the various audits less painful since a majority of the information is at your fingertips when needed with the reports and queries you can run.

Other Software Used

Symantec Endpoint Protection, LogRhythm, DbProtect