Hi All

Ive been given the task of finding an Endpoint Protection platform as we are moving away from ESET.

Does anyone have any immediate shouts in terms of recommendations or any ones to avoid?

I'm leaning towards Sophos, but also think I lack experience in AVS to accurately decide for myself what the best solution is, thus asking the community! We also looked at SentinelOne, but. I found the demo incredibly confusing, but that might be a 'me' issue.

500 pcs roughly, all Windows :)

My organization uses Sophos MDR with Intercept X. Since we implemented this service about a year ago, our endpoint performance has been abysmal. Every department in the company is constantly complaining about how slow or difficult it is to do their day-to-day tasks. We're facing performance issues with even simple activities, like working in Excel spreadsheets or taking video calls while having more than three PowerPoint files open.

Unfortunately, our IT leadership isn’t very technically savvy. I've been asking them to at least work with the vendor to verify if the service is configured correctly or optimally, but so far, I haven’t received a convincing response. It seems like they don't know how to resolve the issue or even what to ask the vendor.

Their suggested fix was to accelerate our hardware refresh cycles and upgrade select departments to premium gaming laptops with i9 processors and discrete GPUs. Think accounting / finance, not like graphic designers or engineers that might need that much horsepower. In retrospect, no idea why we agreed to that because 1) that (obviously) didn’t work, and 2) it’s extremely costly to scale across the enterprise.

Is this normal in a Sophos environment? If not, do you have any suggestions on what I can communicate to my IT leader in a way that I can understand as a non-IT member, and that I can communicate to IT?

I'm not in an IT role and don’t fully grasp the technical details, so I'm getting increasingly frustrated with how long this issue is dragging on. Honestly, at this point, I’m considering letting this guy go, RIFing his entire team, and switching to a managed services provider.

Now, they’re asking to bring in Sophos for NDR, I’m honestly at a loss. Any advice would be greatly appreciated.