CylanceENDPOINT Reviews

-AI based detection.
-Respectable/reputable Canadian company.
-Set and forget protection.

-Occasional false positive on more obscure software. But it is easy to set global policies to remedy this.

CylanceProtect was by all accounts, the best endpoint protection on the market. It provided outstanding protection for all our Windows and Mac endpoints.

Since Blackberry bought them in 2019, the "merging" of the two companies has been clumsy. The Cylance website dashboard was clean and somewhat easy to use. The Blackberry website looks like it was designed by someone who still uses a Blackberry mobile phone. Mac OS Big Sur is being released this week, and the endpoint client for it (that really should have been released with Catalina) is still not available. False positives for Adobe CS updates seem endless. I'll be looking at alternative options when our licensing expires next summer.

I feel our systems are well protected with BlackBerry (formerly Cylance) Protect (and Optics).

The setup is a little complex (policies, zones, rules, etc.), but is not really unlike other similar products.

High grade detection for Zero day Threats, Easy to deploy and User, Support Team very good.

The support team only use enlish language, this can be hard for some teams.

Previously our organization used Trend Micro for our AV solution. The problem with signature based solutions is they can be easily defeated. We suffered from infections that were detected after it was too late, such as ransomware, since there is a lag between the release of malware and the updated signatures to detect them. Upon installing Cylance, we have not had a single infection.. ever. It can dissect what a program is going to do based on an AI algorithm and determine before it runs if it is malicious. Another big bonus is you don't run background scans, Cylance runs one initial background scan and then only scans realtime items when they open.. it's ram/processor footprint is incredibly small and is very easy to install.

It is more expensive than traditional AV, but it's the most important security function on any system. You pay for what you get. The initial setup is different than traditional AV, you must run it in test mode to catch false positives and whitelist scripting folders. It has certain restrictions to folders or files with full control from the "everyone" security group.

* It is an excellent application because it is based on an artificial intelligence system, which makes it a predictive, fast and efficient unit when detecting an intrusion before reaching its final point.

* Warns, evaluates and saves an exact description of the point of origin, expanding the ability to isolate the affected or involved teams during the attack.

* Its compact and user-friendly system can be integrated with third-party applications for the administration or maintenance of network units.

* It offers practicality, stability and fidelity by keeping tasks in constant execution and pre-programmed, which helps the user to increase their efficiency in time and evaluation of reports to maintain an accurate control in the company and to be able to handle better security routines.

* It is possible to use this versatile tool in different devices separately for the protection of memory, control of scripts, control applications and review of sites with possible threats.

* The artificial intelligence system for detection is changing the way attacks are predicted.

CylanceProtect performs its work so silently you almost forget it is there. I have been using it for a year and have only got two warnings so far: one for an old file from a temp folder that had not been picked up by the previous antivirus, and a false positive (CCleaner.exe, oddly).

CylanceProtect features a "proactive defense" model, as opposed to the reactive one of other solutions, that pretty much "clean up the mess" once the damage is done.

With a proactive model, when it is working as intended, you just don't notice anything as threats are eliminated before they hit you. A welcome change of method after having used so many bloated, hit-or-miss antivirus solutions before.

So, in a nutshell, main pros: ease-of-use and efficacy.

Not much to dislike, except for the fact that it detected CCleaner as a threat by mistake. Guess it has to do with the way CCleaner works, with its far-reaching system tools. Perhaps Cylance does not want to share space with another system protection tool? Let's pretend it was just a false positive and nothing else.

Also, being an endpoint solution, some users might be put off by the way it installs over your corporate network. But I am sure that would be a small demographic anyway.

being based on AI, there is not much to configure, which makes the setup quite easy and fast. THe endpoint client can be installed in visible or invisible mode. before implementing the product we did run a comparison test against another product we are using, one traditional signature-based antivirus scanner. we all know that AI as an advantage against traditonal antivirus, but i wanted to see it action. the results were excellent! Cylance stoppes all malware as expected. the other client only did stop a high percentage of it, but a few were left running.
Another thing I like: the product will need an update from time to time, but not as often as a traditional AV.

some features could be improved, e.g. notifications when actions are taken. I have been informed that Cylance is working on it.

Goodbye signatures, hello AI. We are no longer constantly downloading the latest A/V signatures that are merely responding to yesterday’s threats. CylancePROTECT uses AI (Artificial Intelligence) to scan for malicious traits that are common to all malware. This is a game-changer. They claim a 99.5% success rate, and after a year of using their product we have no reason to doubt them. Leaving our previous A/V software was a bit of a risk, but we’re so glad we took the plunge!

There are quite a few initial false positives, and it can take some time to develop your whitelists & tweak your configurations. But once that’s done, administration is quite simple.

Easy to install and manage from the cloud. Does not interfere with Internet connection like other antivirus program since they hook into the network. Is not overly bloated. Also, does not require constant updates in order to fight the latest viruses. Direct integration with SIEMs such as Splunk and Logrhythm.

Reported were recently revamped and a good degree of the filtering was removed. Reports are less userful. There is built in mechanism to deploy client software to all platforms. Silent install on Mac or Linux require writing a bash script in order to set enviroment variables for the installer instead of a packaged install. Would be nice if home product was included in the corporate license.

It is one of the best AV product in the market. i like its detection capabilities and functionalities. previously we see many false positives but not it has improved a lot

it should improve its threat detection technology.

The client app is simple and unobtrusive. The Admin GUI is a breeze to navigate through and get reports along with quarantining anything new.

You can't quarantine the actual device if it gets hit by a nasty; you need to rely on your network infrastructure hw and/or sw to block the device/user.

Cylance is super easy and hands off. Once installed it does its thing and you don't have to worry about scans running or certificates updating. It does one basic scan over the computer than scans any file it comes in contact with. It runs super light on the computer which is a big plus to keep our users running at full speed.

I can't think of any complaints about this product, It has been super great all around.

Prevention is utilized rather than reaction (which is what the AntiVirus applications are doing). This a welcome alternative.

Not a simple way to uses your own policy to become the default policy for new devices added to the network.

CylancePROTECT is cloud managed and eases the administration tasks when having hundreds or thousands of assets to configure/check.

There is nothing remarkable to say here at this moment. Maybe the notifications might be improved when something happens and needs your attention.