SentinelOne Erfahrungen

EDR is changing the face of Malware

Kommentare: EDR technology have completely changed the way we look at Malware today. SentinelOne has verty small but powerful agent that gets deployed to your endpoints. From there you can literally see everything that's happening on a device. And that makes it possible for such a small program to perform miracles. Such as 1 click roll back when or if you got infected by Ransomware. I have been a loyal Kaspersky fan for many years but Nothing close to what SentinelOne can do.

Vorteile:

The agent is small and lightweight. Does not require constant web updating. If perhaps you do get infected by Ransomware or a malicious malware. Worry not because the agent can perform a quick Rollk-Back event, Basically doing a System Restore to the last safe state. And Ransomware can't even overwrite or Damage system restore as SentinelOne takes over that service and space

Nachteile:

They still haven't completely consolidated their Dashboards. So depending on the SentinelOne product or packages you purchase you will unfortunately have to navigate multiple Dashboard. Other than that I have no things i can think of on SentinelOne

Honest Sentinel One insight after 6 months

Kommentare: The ratings for Sentinel One are primarily based on their exceptional threat detection and response capabilities and their support system.
Quite impressive detections of logs and new AI technology in modern worls.

Vorteile:

1. Its autonomous endpoint protection, powered by AI, offers unparalleled detection and response capabilities. 2. Reduces the manual working of the organization security team.

Nachteile:

1. Sentinel One doesn't have any uninstaller tools, if in case any endpoint is not connected to the portal then you don't have the option to uninstall. In the above case, the only option left is formatting the endpoint if you want to remove it from your endpoint. 2. Send what I want to highlight is that they don't have any knowledgebase available on google, how to configure, manage, etc. 3. The support team will take so long to resolve the issue.

SentinelOne - good protection but can be flaky

Kommentare: Confidence in the product now (in May 2021) is nowhere near as high as it was a year ago. Recent upgrades have introduced issues for us - we have had to deal with a lot of them manually user-by-user. Current build seems a lot more stable but this was a lot of pain to go through to get to this point.

Vorteile:

Agent install - deployed to a PC - reboot and it's working. Web console filtering allows identification of incidents and configuration in a fairly simple manner.

Nachteile:

Some upgrades of the product have introduced major issues. eg One release broke some OS upgrades on certain models of laptop leaving them unable to boot. Another version introduced crippling speed issues with Adobe products. To their credit they do eventually fix these issues, but not quickly enough.

SentinelOne: the best EDR

Kommentare: Our experience with SentinelOne is great, in my opinion is the best EDR now available.

Vorteile:

Easy to deploy and install. Easy to make exclusions and other configurations.

Nachteile:

Sometimes agent does not connect to cloud.

S1 SOC is Top Notch

Kommentare: I have a great experience with S1 and their SOC was always helpful and attentive to my needs and kept me informed throughout any issues I had.

Vorteile:

Sentinel One is a top notch Cyber security product that saved one of our customers from a large wide Malware/virus threat. All machines that had S1 enabled were virus free and the other computers that were in transition were infected.

Nachteile:

I the major con that I had issues with the S1 portal was deleting or uninstalling an endpoint or updating endpoints. I had to manually update agents and they weren’t updating on their own.

Best AI Antivirus

Kommentare: Overall, its best antivirus and we can rely on it up to certain point.

Vorteile:

It stops almost all malwares and also we can remote in into the device. We can send broadcast messages which I really like.

Nachteile:

It gives many false positives which sometimes are annoying.

Powerful AI-Driven Protection

Vorteile:

Its a very good product and provides overall security. I like most about behavior analysis using AI to detect and respond. Agent installation is easy and light on devices. Integration with our other tools is very good and was setup with no complications.

Nachteile:

Some settings are complex and need extensive knowledge to understand and operate. Overall a good product.

Great Product - Sometimes too good

Vorteile:

I like the detection response and the way it behaves. It doesn't just scan for malicious files, it looks for malicious behavior. It has protected clients/users from actual attacks.

Nachteile:

Sometimes it does it's job too well, such as if you are just clearing out shadow copy data. But...things like that can be done in a malicious attack, so it's worth having to temporarily disable it from time to time. The updates fail sometimes and require a complete reinstall of SentinelOne and it can get a little difficult, sometimes requiring to use the cleaner tool and get into safe mode.

SentinelOne Security computers

Kommentare: Since we install SentinelOne in our systems, we see an improvement, we are monitoring every computer knowing we are safe

Vorteile:

Automatic deploy, automatic update, control panel easy to use

Nachteile:

activation codes, are so long, easy to put wrong code

actively monitors and protects against malicious threats

Vorteile:

actively monitors and protects against malicious theats; protected my computer from installing a malicious code editor.

Nachteile:

Sometimes sentinelone does too good a job: it blocked me from installing iterm2 which is the standard macos terminal application. However, I was able to create a IT ticket and point them to the SentinelOne's quarantined folder and get the rules updated to allow for iterm2 installation.

Powerful, smart, constantly developing new features

Kommentare: Very positive, love the product, enables us to have high degree of confidence in the protection of network assets

Vorteile:

Ease of deployment, comprehensive visibility into threats and threat lifecycles, amazingly versatile exclusion functionality.

Nachteile:

Some of the desired features are not available in the Core SKU

Great product - it’s too good sometimes but not too annoying

Vorteile:

It monitors behavior, it thinks some legitimate software and commands are malicious, but also easy to reverse and continue on. Lots of options for whitelisting. Not easy to be removed, so it’s not easy to get around.

Nachteile:

Sometimes I wish I could do VSS maintenance without having to disable the agent, but viruses and malware can attack VSS so I’m fine with it. Have had some issues with duplicating agents in the management side and trouble with updates.

SentinelOne does great job for protection and remediation

Kommentare: It does a great job protecting, containing and remediation but could be a little easier to administer.

Vorteile:

Ease of deployment, reporting and containment.

Nachteile:

As an administrator the web interface could be a little easier to remediate and disable agents when necessary.

SentinelOne is a great product

Kommentare: Overall, I would totally recommend SentinelOne as a product. there are a few things I would love for them to fix. but overall I believe they are one of the best.

Vorteile:

I am generally more technical. so, using SentinelOne's visibility feature you are able to hunt down events on your endpoints. and create alerts based off custom queries. this was very flexible, and I was able to find multiple issues on endpoints just experimenting with their query language.

Nachteile:

Helpdesk support sometimes was hard to deal with. alerting for custom rules was not very good.

A great endpoint solution for our MSP.

Kommentare: We use it for all of our clients . A must have for our clients where time is of the essence when a potential attack could be imminent.

Vorteile:

The ability to see what machines are protected over a period and their infection during said period is great.

Nachteile:

Sometimes making changes and resolutions regarding infections is cumbersome and not always obvious. Also self-resolving could be easier to review and implement.

Protect your Devices with SentinelOne

Vorteile:

1. It is one of the best XDR, EDR cloud-based tools in the market.2. The feature of providing Core, Control, and Complete License according to the need of the user is amazing.3. Process the details of the incident very fast.4. The feature of deep visibility is amazing.

Nachteile:

1. Other tools providing similar features in the market at low cost.2. A bit difficult UI experience according to beginners.3. least level Blacklisting is at the group level only.

Great Product

Kommentare: Positive.

Vorteile:

Very intuitive to use, not a big learning curve when configuring or rolling out new features. SentinelOne is always making product enhancements and overall just happy with the product.

Nachteile:

There were some initial limitations with the firewall and blacklisting, but the enhancements have made up for this.

Excellent Product with Outstanding Capability for Endpoint Detection and Response

Vorteile:

The SentinelOne Deep Visibility is the most impactful feature of the software. It makes for an excellent threat-hunting exercise.

Nachteile:

SentinelOne requires users to encrypt a threat file with a complex password before it can be downloaded. The complex password introduces a minor problem when assessing the malicious file locally. For instance, one might be tempted to use a browser-generated password to meet the password criteria, but this is difficult to remember and would always require one to check their saved passwords to enter correctly before one can commence an analysis of the threat file in a lab environment. It will be much easier if threat files are encrypted with a standard password of "infected" or at least allow users to use passwords like this instead of a complex one.

User Friendly Security

Vorteile:

I'm able to easily manage and customize our dashboard, pull reports and view analytics.

Nachteile:

I wish we could create team dashboards for other users.

Sleep easy knowing you're using the best tools

Kommentare: Not much to say, which is a good thing.

Vorteile:

Industry leader in the real-time behavior monitoring. Very few false positives, and easy mitigation when they do arrive.

Nachteile:

Hard to find VARs in Canada to purchase from

Ease of use

Vorteile:

Easy to setup and S1 automatically puts the device that is suspects is infected in network quarantine. Also like the rollback feature.

Nachteile:

Would like for it to have more days/months in history for threat hunting

Great product, setup straight forward, and effective

Kommentare: Overall happy with our choice to go with S1

Vorteile:

The responsiveness of the product to threats and ease of setup.

Nachteile:

Abnormal deployment for a particular server was an issue and support was lacking.

Excellent NGAV Software!

Vorteile:

Simple to use, great detection rates, feature parity client for macOS and Windows.

Nachteile:

Can be a bit resource intensive on the endpoints.

The best in Advanced Threat Protection

Vorteile:

Truly a gem, this is an advanced threat protection software that gives you all the details on what? when? why? where? and can restore your system back to its original state.

Nachteile:

It can be a memory hog sometimes if it is trying to calm down a malicious piece of software. Not much else is wrong.

"Goodbye, Ransomware... SentinelOne is here to stay!

Kommentare: This is clearly THE BEST, Endpoints protection solutions I've seen. User-friendly, efficient, and more importantly, no need to pay after a ransomware attack; a rollback and you're all good.

Vorteile:

1. Ransomware Rollback, SentinelOne is the only product in this category that can do so: That makes a Very Big Difference; That makes All THE DIFFERENCE! 2. Active Security for any kind of endpoints: SentinelOne agents can be deployed to Windows, Linux, POS devices, and IoT devices. The choice is Yours! 3. Very Easy to deploy: We were able to deploy smoothly and efficiently agents to hundreds of endpoints from the very first day! 4. Respond to threats and ransomware in real-time.

Nachteile:

Really? These guys know exactly what they're doing. it literally blew us away. From our end, we have nothing to report.