CylanceENDPOINT

Avantages

In the three years we've been protecting our endpoints with CylancePROTECT, we have had ZERO incidents across ~250 endpoints. I have tested the Cylance client against true zero day attacks, not recognized on VirusTotal, shared with me by an MSP friend. He has had many clients compromised by ransomware, several more than once, with nuke/pave/restore for the entire organization being the typical response. When I throw attacks against old-build agents, and those attacks are obliterated, it helps me sleep better at night. I don't see these attacks in my environment, hence the testing. The endpoint is the focus of the last line of defense, so PROTECT is critical in my security posture.

Inconvénients

In comparison to traditional signature-based (useless) AV, CylancePROTECT and CylanceOPTICS seems expensive. That's why my MSP pal doesn't have his SMB clients on this product, they can't comprehend the value proposition of something so different to what they're familiar with. I guess that's why the marketing initiatives can seem a little over the top, it's hard to get the idea across when some hater says "doesn't detect EICAR!"

Avantages

-AI based detection.
-Respectable/reputable Canadian company.
-Set and forget protection.

Inconvénients

-Occasional false positive on more obscure software. But it is easy to set global policies to remedy this.

Avantages

CylanceProtect was by all accounts, the best endpoint protection on the market. It provided outstanding protection for all our Windows and Mac endpoints.

Inconvénients

Since Blackberry bought them in 2019, the "merging" of the two companies has been clumsy. The Cylance website dashboard was clean and somewhat easy to use. The Blackberry website looks like it was designed by someone who still uses a Blackberry mobile phone. Mac OS Big Sur is being released this week, and the endpoint client for it (that really should have been released with Catalina) is still not available. False positives for Adobe CS updates seem endless. I'll be looking at alternative options when our licensing expires next summer.

Alternatives envisagées 

Pourquoi choisir CylanceENDPOINT 

Pourquoi passer à CylanceENDPOINT

Avantages

Blackberry Cylance Protect is very light weight and very powerful.

Inconvénients

does not offer any enhanced firewall settings

Avantages

Easy to deploy and manage policies across 1000s of assets in the corporate network. Has coverage for various OS platforms, including Windows, Linux, and macOS. Can perform bulk quarantine across all hosts for a known threat. Whitelist or exclusion is easy to setup.

A user friendly console for reporting and oversight dashboard for threat trends and malware families.

Inconvénients

Some times results in false positive for the script module and could get tricky to manage exceptions if one is not fully aware of the gaps they can introduce by simply whitelisting system paths where most malware run.

Could include real-time sandbox capabilities like other competing products in the market

Alternatives envisagées 

Pourquoi choisir CylanceENDPOINT 

Logiciel antérieur 

Pourquoi passer à CylanceENDPOINT

Avantages

Very easy to deploy the application to endpoints, cloud management is easy to use and mange deployment. The product is very configurable to customize to your needs. Malware detection and removal is outstanding.

Inconvénients

Trying to configure the policies on your own can be a challenge, be sure to acquire the product from a MSSP to ensure you set it up right and have ongoing support.

Alternatives envisagées 

Pourquoi choisir CylanceENDPOINT 

Logiciel antérieur 

Pourquoi passer à CylanceENDPOINT

Avantages

With Cylance I feel that my organization is safely protected against all threats and we have never had an issue in three plus years using this. It is very easy to install and has a very small footprint which makes it nice for our PCs.

Inconvénients

Creating policies and exclusions is a bit clunky but once you figure it out it's okay. It can also have many false positives which are easily maintained through the portal.

Avantages

I feel our systems are well protected with BlackBerry (formerly Cylance) Protect (and Optics).

Inconvénients

The setup is a little complex (policies, zones, rules, etc.), but is not really unlike other similar products.

Alternatives envisagées 

Pourquoi passer à CylanceENDPOINT

Avantages

Cylance is very effective to block any type of virus and spam. Cylance is ideal to keep the devices free of threats. It has a very fast and simple installation. We had no delay at the time of installing CylancePROTECT. In general, Cylance is a very fast, safe and effective product that works in multiple operating systems.

Inconvénients

Some users report problems with support. They have problems because it is necessary for the support to have more information (more technical notes are missing).

Avantages

I like the fact that is does antivirus different from all of the rest. It makes you feel so much more protected than with other solutions. Because of this our computers are the most protected things in the office and it has prevented an unlimited number of attacks for us

Inconvénients

There isnt anything I dislike about it this product

Avantages

- No se basa en actualizaciones de virus, en vez de eso tiene un agente con Inteligencia Artificial que supervisa procesos y protege los endpoints.
- El producto es liviano y no utiliza casi procesos de los equipos, es tan liviano que ni se siente que lo tienes instalado y protegiendo.
- El producto tiene muchas integraciones con virustotal.com, en el cual desde la propia consola de administración se pueden ver reportes y consultas de virustotal.

Inconvénients

- CylanceProtect (antivirus) y CylanceOptics (el modulo EDR) se deben instalar con 2 instaladores por separado, cosa que no tiene sentido y perfectamente pudieran estar ambos módulos en 1 mismo instalador.
- El programa no puede despliegarse directamente desde la consola, por lo que debe instalarse localmente, o hacer un despliegue desde herramientas externas como una GPO, en otros productos de seguridad se pueden desplegar desde la consola directamente, creo puede mejorar Cylance en este punto.

Avantages

High grade detection for Zero day Threats, Easy to deploy and User, Support Team very good.

Inconvénients

The support team only use enlish language, this can be hard for some teams.

Alternatives envisagées 

Pourquoi choisir CylanceENDPOINT 

Logiciel antérieur 

Avantages

Previously our organization used Trend Micro for our AV solution. The problem with signature based solutions is they can be easily defeated. We suffered from infections that were detected after it was too late, such as ransomware, since there is a lag between the release of malware and the updated signatures to detect them. Upon installing Cylance, we have not had a single infection.. ever. It can dissect what a program is going to do based on an AI algorithm and determine before it runs if it is malicious. Another big bonus is you don't run background scans, Cylance runs one initial background scan and then only scans realtime items when they open.. it's ram/processor footprint is incredibly small and is very easy to install.

Inconvénients

It is more expensive than traditional AV, but it's the most important security function on any system. You pay for what you get. The initial setup is different than traditional AV, you must run it in test mode to catch false positives and whitelist scripting folders. It has certain restrictions to folders or files with full control from the "everyone" security group.

Avantages

* It is an excellent application because it is based on an artificial intelligence system, which makes it a predictive, fast and efficient unit when detecting an intrusion before reaching its final point.

* Warns, evaluates and saves an exact description of the point of origin, expanding the ability to isolate the affected or involved teams during the attack.

* Its compact and user-friendly system can be integrated with third-party applications for the administration or maintenance of network units.

* It offers practicality, stability and fidelity by keeping tasks in constant execution and pre-programmed, which helps the user to increase their efficiency in time and evaluation of reports to maintain an accurate control in the company and to be able to handle better security routines.

* It is possible to use this versatile tool in different devices separately for the protection of memory, control of scripts, control applications and review of sites with possible threats.

* The artificial intelligence system for detection is changing the way attacks are predicted.

Avantages

CylanceProtect performs its work so silently you almost forget it is there. I have been using it for a year and have only got two warnings so far: one for an old file from a temp folder that had not been picked up by the previous antivirus, and a false positive (CCleaner.exe, oddly).

CylanceProtect features a "proactive defense" model, as opposed to the reactive one of other solutions, that pretty much "clean up the mess" once the damage is done.

With a proactive model, when it is working as intended, you just don't notice anything as threats are eliminated before they hit you. A welcome change of method after having used so many bloated, hit-or-miss antivirus solutions before.

So, in a nutshell, main pros: ease-of-use and efficacy.

Inconvénients

Not much to dislike, except for the fact that it detected CCleaner as a threat by mistake. Guess it has to do with the way CCleaner works, with its far-reaching system tools. Perhaps Cylance does not want to share space with another system protection tool? Let's pretend it was just a false positive and nothing else.

Also, being an endpoint solution, some users might be put off by the way it installs over your corporate network. But I am sure that would be a small demographic anyway.

Avantages

being based on AI, there is not much to configure, which makes the setup quite easy and fast. THe endpoint client can be installed in visible or invisible mode. before implementing the product we did run a comparison test against another product we are using, one traditional signature-based antivirus scanner. we all know that AI as an advantage against traditonal antivirus, but i wanted to see it action. the results were excellent! Cylance stoppes all malware as expected. the other client only did stop a high percentage of it, but a few were left running.
Another thing I like: the product will need an update from time to time, but not as often as a traditional AV.

Inconvénients

some features could be improved, e.g. notifications when actions are taken. I have been informed that Cylance is working on it.

Avantages

Goodbye signatures, hello AI. We are no longer constantly downloading the latest A/V signatures that are merely responding to yesterday’s threats. CylancePROTECT uses AI (Artificial Intelligence) to scan for malicious traits that are common to all malware. This is a game-changer. They claim a 99.5% success rate, and after a year of using their product we have no reason to doubt them. Leaving our previous A/V software was a bit of a risk, but we’re so glad we took the plunge!

Inconvénients

There are quite a few initial false positives, and it can take some time to develop your whitelists & tweak your configurations. But once that’s done, administration is quite simple.

Avantages

The fact that it just works. I have evaluated several other products and ran into all sorts of issues. For the price, simplicity and performance of Cylance, I can't say enough good about this product. Cylance has a team of dedicated and knowledgeable employees who truly care about securing your network. If you are hesitant about giving them a try or you feel like your current vendor is adequate, please give Cylance a call and give them a chance. You will not be disappointed.

Inconvénients

This isn't a complaint but a feature I would love to see implemented. I wish there was the ability to force agent updates when new agents are released. It's not a huge deal since the agents update on their own in a timely manner, but having the ability to do so would be beneficial. That said, I have only run into one situation where I truly wish this feature existed.

Avantages

Easy to install and manage from the cloud. Does not interfere with Internet connection like other antivirus program since they hook into the network. Is not overly bloated. Also, does not require constant updates in order to fight the latest viruses. Direct integration with SIEMs such as Splunk and Logrhythm.

Inconvénients

Reported were recently revamped and a good degree of the filtering was removed. Reports are less userful. There is built in mechanism to deploy client software to all platforms. Silent install on Mac or Linux require writing a bash script in order to set enviroment variables for the installer instead of a packaged install. Would be nice if home product was included in the corporate license.

Avantages

It is one of the best AV product in the market. i like its detection capabilities and functionalities. previously we see many false positives but not it has improved a lot

Inconvénients

it should improve its threat detection technology.

Alternatives envisagées 

Pourquoi passer à CylanceENDPOINT

Avantages

The client app is simple and unobtrusive. The Admin GUI is a breeze to navigate through and get reports along with quarantining anything new.

Inconvénients

You can't quarantine the actual device if it gets hit by a nasty; you need to rely on your network infrastructure hw and/or sw to block the device/user.

Avantages

Cylance is super easy and hands off. Once installed it does its thing and you don't have to worry about scans running or certificates updating. It does one basic scan over the computer than scans any file it comes in contact with. It runs super light on the computer which is a big plus to keep our users running at full speed.

Inconvénients

I can't think of any complaints about this product, It has been super great all around.

Avantages

Works incredibly well
minuscule resource consumption on end-points
no definition files
great administrator visibility

Inconvénients

higher priced than some competitors
end-users can't initiate a scan

Avantages

Cylance is simple to use and does a fantastic job of protecting our endpoints! The behavior-based engine is much more accurate and responsive than traditional signature-based antivirus. By taking a look at how an application acts, it can stop it from running without the need of a diffinition. The interface is easy to see what's going on on your endpoints. As well as make changes such as whitelisting applications or globally blocking a file.

Inconvénients

WHen you first set it up in your environment you will need to whitelist many of your requred applications as they can get blocked at first run.

Avantages

Prevention is utilized rather than reaction (which is what the AntiVirus applications are doing). This a welcome alternative.

Inconvénients

Not a simple way to uses your own policy to become the default policy for new devices added to the network.