Cisco Secure Endpoint vs Symantec Endpoint Detection and Response comparison

Cisco and Broadcom are both solutions in the Endpoint Detection and Response (EDR) category. Cisco is ranked #13 with an average rating of 8.3, while Broadcom is ranked #25 with an average rating of 7.7. Cisco holds a 1.9% mindshare in EDR, compared to Broadcom’s 0.6% mindshare. Additionally, 96% of Cisco users are willing to recommend the solution, compared to 86% of Broadcom users who would recommend it.

Cisco Secure Endpoint

Read 48 Cisco Secure Endpoint reviews

4,994 Views
3,054 Comparison Views

96% willing to recommend

Symantec Endpoint Detection...

Read 30 Symantec Endpoint Detection and Response reviews

1,344 Views
803 Comparison Views

86% willing to recommend

Cisco Secure Endpoint

Symantec Endpoint Detection...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cisco Secure Endpoint and Symantec Endpoint Detection and Response are two leading products in the endpoint protection market. User reviews indicate that Cisco Secure Endpoint has the upper hand in pricing and support, while Symantec Endpoint Detection and Response is favored for its comprehensive features.

Features: Cisco Secure Endpoint is valued for its effective threat detection, real-time monitoring, and user-friendly integrations. Symantec Endpoint Detection and Response is highlighted for its deep forensic capabilities, robust threat intelligence, and comprehensive monitoring tools. Symantec's feature set is more extensive, making it a preferred choice for users prioritizing advanced features.

Room for Improvement: Users suggest Cisco Secure Endpoint could enhance its reporting functionality and reduce false positives. Additionally, improving user documentation would benefit Cisco. Symantec Endpoint Detection and Response could streamline update processes, reduce resource consumption, and improve integration with other tools. Symantec's impact on system performance is a significant concern for users.

Ease of Deployment and Customer Service: Cisco Secure Endpoint is praised for its straightforward deployment process and responsive customer support. Symantec Endpoint Detection and Response receives positive feedback for its deployment, though some users find it more complex. Symantec's customer service is well-regarded but not as highly as Cisco's. Thus, Cisco has the edge in deployment ease and customer service.

Pricing and ROI: Cisco Secure Endpoint offers competitive pricing with a strong ROI, appealing to budget-conscious users. Symantec Endpoint Detection and Response is seen as more expensive, but users deem its extensive features worth the higher cost. While Cisco is better for cost efficiency, Symantec provides greater value through its advanced functionalities.

To learn more, read our detailed Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response Report (Updated: January 2025).

Buyer's Guide

Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Endpoint

Ranking in Endpoint Detection and Response (EDR)

13th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (13th), Cisco Security Portfolio (6th)

Symantec Endpoint Detection...

Ranking in Endpoint Detection and Response (EDR)

25th

Average Rating

7.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of January 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cisco Secure Endpoint is 1.9%, down from 2.4% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.6%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Mark Broughton

Level 2 tech at a tech services company with 11-50 employees

Tighter integration with Umbrella and Firepower gave us eye-opening information

We were using a third-party help desk. One of the ways that they were fixing problems was to delete the client and then add the client back if there was an issue where the client had stopped communicating. Any improvement in the client communicating back to the server would be good, particularly for machines that are offline for a couple of weeks. A lot of our guys were working on a rotation where the machine might be offline for that long. They were also terrible about rebooting their machines, so those network connections didn't necessarily get refreshed. So, anything that could improve that communication would be good. Also, an easier way to do deduplication of machines, or be alerted to the fact that there's more than one instance of a machine, would be useful. If you could say, "Okay, we've got these two machines. This one says it's not reporting and this one says it's been reporting. Obviously, somebody did a reinstall," it would help. That way you could get a more accurate device count, so you're not having an inflated number. Not that Cisco was going to come down on you and say, "Oh, you're using too many licenses," right away. But to have a much more accurate license usage count by being able to better dedupe the records would be good. I also sent over a couple of other ideas to our technical rep. A lot of that had to do with the reporting options. It would be really nice to be able to do a lot more in the reporting. You can't really drill down into the reports that are there. The reporting and the need for the documentation to be updated and current would be my two biggest areas of complaint. Also, there was one section when I was playing with the automation where it was asking for the endpoint type rather than the machine name. If I could have just put in the machine name, that would have been great. So there are some opportunities, when it comes to searching, to have more options. If I wanted to search, for example, by a Mac address because, for some reason, I thought there was a duplication and I didn't have the machine name, how could I pull it up with the Mac address? When you're getting to that level, you're really starting to get into the ticky tacky. I would definitely put the reporting and documentation way ahead of that.

Read full review

YusufAhmed

Information Security Specialist at IHV-Nigeria

Easy to use and competitively priced

Honestly, the product needs to continue the way it is, and I feel that everything will be fine. I haven't had any reasons to complain about the product. The product doesn’t offer MDM functionality under its current licensing model. In the future, I want the product to offer MDM. It can allow me to manage my mobile device more efficiently and effectively. Currently, there is a need for a separate license to be added to Symantec Endpoint Detection and Response to be able to use the MDM part. If both are bundled up under the same license, the administration part can be made easier.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is easy to deploy and applies multi-factor authentication."

"The product's initial setup phase was very simple."

"The tool's most valuable feature is its integration with other Cisco products, such as switches and routers. This integration allows comprehensive coverage of security parameters across the customer's entire network. Customers find it easier to manage because they already know Cisco products. The cloud-based management is another valuable feature, enabling customers to manage their security from anywhere with an internet connection."

"It's quite simple, and the advantage I see is that I get the trajectory of what happened inside the network, how a file has been transmitted to the workstation, and which files have got corrupted."

"Device Trajectory is one of the most valuable features. We're able to dig in and really understand how things came to be and where to focus our efforts."

"The console feature gives a centralized management of what's going on, and if something happens, it gives you an alert. So, that's the most important feature for me."

"The most valuable features of this solution are the IPS and the integration with ISE."

"Secure Endpoint has decreased our time to remediate by providing the tools and the integrations we need so we can quickly look across our entire network, look for those threats, and actually make good decisions."

More Cisco Secure Endpoint pros

"The solution is stable."

"I've mainly found the antivirus and antispyware features valuable. The documentation is okay as well."

"It is mostly used for malware detection and antivirus purposes."

"The most valuable feature of Symantec Endpoint Detection and Response is its ability to conduct large scans on the endpoints without affecting the network."

"The most valuable features of the solution are that it is easy to use and has good support."

"The setup is quite easy."

"I have had absolutely no problem with using this solution, it really works well."

"There are times when Symantec Endpoint Detection and Response tags an executable as malicious when it is trying to get executed on the machine. In this case, it prevents the execution and it gives you a process view of things where you can look into what has happened and whether it is a genuine process trying to access some system activities, or it's a malicious one. Depending upon the process, it gives you a clear identification, and we can do the containment from the interface itself and isolate the machine from the network. The process review on network isolation is good."

More Symantec Endpoint Detection and Response pros

Cons

"In Orbital, there are tons of prebuilt queries, but there is not a lot of information in lay terms. There isn't enough information to help us with what we're looking for and why we are looking for it with this query. There are probably a dozen queries in there that really focus on what I need to focus on, but they are not always easy to find the first time through."

"In the next version of this solution, I would like to see the addition of local authentication."

"Cisco is good in terms of threat intelligence plus machine learning-based solutions, but we feel Cisco is lagging behind in using artificial intelligence in its systems."

"The pricing policy could be more competitive, similar to Cisco's offerings."

"We have had some problems with updates not playing nice with our environment. This is important, because if there is a new version, we need to test it thoroughly before it goes into production. We cannot just say, "There's a new version. It's not going to give us any problems." With the complexity of the solution using multiple engines for multiple tasks, it can sometimes cause performance issues on our endpoints. Therefore, we need to test it before we deploy. That takes one to three days before we can be certain that the new version plays nice with our environment."

"In the next release, I would for it to have back up abilities. I would like the ability to go back to a point in time to when my PC was uninfected and to the moment of when the infection happened."

"Integration and dashboard are areas with certain shortcomings in Cisco Secure Endpoint."

"Due to the complexity of the technology that is used and its advanced threat detection capabilities, it is possible to encounter many delays in operation."

More Cisco Secure Endpoint cons

"In the future, it would be nice to have playbooks in the tool, to allow for some of the common activities to be automated. For example, some of the scannings of the malware can be too manual for a specific device. Additionally, a vulnerability manager would be beneficial."

"They do need to minimize the number of agents installed on a server."

"I would like to see better scanning capabilities."

"The solution’s scalability and stability could be improved."

"I think we have experienced some technical issues because the company focuses mainly on bigger clients. Also, sometimes the solution fails to detect zero-day attacks, so that feature needs some enhancement because it is lacking compared to other solutions."

"Reporting is a major issue, as it is not user friendly."

"It would be good if it can anticipate zero-day attacks. I don't know how it can be done and if it is even a feature of this product."

"The solution needs to provide better integration."

More Symantec Endpoint Detection and Response cons

Pricing and Cost Advice

"We had faced some license issues, but it has been improved. At the beginning of the implementation, we faced a lot of licensing issues, but now, we have EA licensing, which gives us an opportunity to grow."

"It is an expensive solution."

"We can know if something bad is potentially happening instantaneously and prevent it from happening. We can go to a device and isolate it before it infects other devices. In our environment, that's millions of dollars saved in a matter of seconds."

"There are a couple of different consumption models: Pay up front, or if you have an enterprise agreement, you can do a monthly thing. Check your licensing possibilities and see what's best for your organization."

"Whenever you are doing the licensing process, I would highly advise to look at what other Cisco solutions you have in your organization, then evaluate if an Enterprise Agreement is the best way to go. In our case, it was the best way to go. Since we had so many other Cisco products, we were able to tie those in. We were actually able to get several Cisco security solutions for less than if we had bought three or four Cisco security solutions independently or ad hoc."

"I rate the pricing a five or six on a scale of one to ten, where one is expensive, and ten is cheap."

"The Enterprise Agreement is like an all-you-can-eat buffet of Cisco products. In that vein, it was very affordable."

"In our case, it is a straightforward annual payment through our Enterprise Agreement."

More Cisco Secure Endpoint pricing and cost advice

"Of late, because of the Broadcom purchase, its price has been increasing."

"The price is reasonable."

"The price is really high and it should be lower."

"It is an expensive solution."

"The product is cheap."

"The more devices we have the more expensive it becomes, which is where the challenge is."

"The price is okay, but it really depends on the customer's requirements."

"We are satisfied with the pricing."

More Symantec Endpoint Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Government

Financial Services Firm

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

13%

Manufacturing Company

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Cisco Secure Endpoint?

The product's initial setup phase was very simple.

See all answers

What is your experience regarding pricing and costs for Cisco Secure Endpoint?

I am not entirely sure about the exact licensing cost. It ranges from 2,000 to 2,500 INR annually.

See all answers

What needs improvement with Cisco Secure Endpoint?

Previously, there were options to uninstall the agent without a password if you had admin access, and this could be improved. It may require a password for uninstalling clients, which would be help...

See all answers

What do you like most about Symantec Endpoint Detection and Response?

The security is good.

See all answers

What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?

I am not aware of the pricing details, as that falls under the management's responsibility.

See all answers

What needs improvement with Symantec Endpoint Detection and Response?

There are several areas where Symantec Endpoint Detection and Response can improve, including shell features, web control, asset management, and device control. Specifically, the application contro...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cisco Secure Endpoint

Compared 15% of the time

CrowdStrike Falcon vs Cisco Secure Endpoint

Compared 12% of the time

Check Point Harmony Endpoint vs Cisco Secure Endpoint

Compared 6% of the time

Cortex XDR by Palo Alto Networks vs Cisco Secure Endpoint

Compared 6% of the time

SentinelOne Singularity Complete vs Cisco Secure Endpoint

Compared 4% of the time

More Cisco Secure Endpoint Competitors

Kaspersky Endpoint Detection and Response Expert vs Symantec Endpoint Detection and Response

Compared 24% of the time

Trend Vision One vs Symantec Endpoint Detection and Response

Compared 15% of the time

Microsoft Defender for Endpoint vs Symantec Endpoint Detection and Response

Compared 10% of the time

Trellix Endpoint Security (ENS) vs Symantec Endpoint Detection and Response

Compared 9% of the time

Sangfor Endpoint Secure vs Symantec Endpoint Detection and Response

Compared 9% of the time

More Symantec Endpoint Detection and Response Competitors

Product Reports

Buyer's Guide

Cisco Secure Endpoint

January 2025

Download Cisco Secure Endpoint product report

Buyer's Guide

Symantec Endpoint Detection and Response

December 2024

Symantec Endpoint Detection and Response report

Download Symantec Endpoint Detection and Response product report

Also Known As

Cisco AMP for Endpoints

No data available

Learn More

Video not available

Cisco

Broadcom

Overview

Cisco Secure Endpoint is a comprehensive endpoint security solution that natively includes open and extensible extended detection and response (XDR) and advanced endpoint detection and response (EDR) capabilities. Secure Endpoint offers relentless breach protection that enables you to be confident, be bold, and be fearless with one of the industry’s most trusted endpoint security solutions. It protects your hybrid workforce, helps you stay resilient, and secures what’s next with simple, comprehensive endpoint security powered by unique insights from 300,000 security customers and deep visibility from the networking leader.

Cisco Secure Endpoint was formerly known as Cisco AMP for Endpoints.

Reviews from Real Users

Cisco Secure Endpoint stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to easily secure their endpoints with one single operation using its management console and its advanced alerting techniques.

Tim C., an IT manager at Van Der Meer Consulting, writes, "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. This is good. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. You don't want to be spending time working out how to block something. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems."

Wouter H., a technical team lead network & security at Missing Piece BV, notes, "Any alert that we get is an actionable alert. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. We can then choose to take any manual actions, if we want, or start our investigation. We're no longer looking at digging into information or wading through hundreds of incidents. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. That is all in the console. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us."

Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.

Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.

Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.

With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.

Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.

Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.

Sample Customers

Heritage Bank, Mobile County Schools, NHL University, Thunder Bay Regional, Yokogawa Electric, Sam Houston State University, First Financial Bank

Information Not Available

Buyer's Guide

Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response

January 2025

Free Report: Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response

Find out what your peers are saying about Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our Cisco Secure Endpoint vs. Symantec Endpoint Detection and Response report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.