Question SentinelOne can not set multiple policy?

[ShenguiTurmi]

When I click on the policy option, I can only edit the settings directly. I don't find the option to create a new policy and associate it to some of the devices.
For example, I want device A to have only Static AI turned on and device B to have all protection turned on, which doesn't look like it can be done?
Has anyone tried this? This is a bit strange in an enterprise product.

 

[Trident]

I have a question about SentinelOne (I am not familiar with its capabilities as I couldn’t find a reseller till recently). Apart from all wonderful NGAV capabilities, what else is included? Does it offer web filtering and anti-phishing as well?

@ShenguiTurmi on top it says “Revert to default inherited policy”. This suggests that there is another place for managing policies as well. Did you check everywhere?

Edit:
Watch this video from the 4th minute onwards to learn about policy and asset management.

 

[ShenguiTurmi]

I have a question about SentinelOne (I am not familiar with its capabilities as I couldn’t find a reseller till recently). Apart from all wonderful NGAV capabilities, what else is included? Does it offer web filtering and anti-phishing as well?

@ShenguiTurmi on top it says “Revert to default inherited policy”. This suggests that there is another place for managing policies as well. Did you check everywhere?

Edit:
Watch this video from the 4th minute onwards to learn about policy and asset management.

I can't access youtube because of regional restrictions, but I just got help from another S1 user. Editing the policy directly won't work, but you can create a device group and then set the policy for the device group.
Anyway thanks for the help.
S1 has nothing good on NGAV and no anti-phishing. But they can rolling back the behaviour of malicious programs (not just for ransomware). As well as EDR which is second only to Cybereason for visibility in the MITRE 2022 test.

 

[likeastar20]

I have a question about SentinelOne (I am not familiar with its capabilities as I couldn’t find a reseller till recently). Apart from all wonderful NGAV capabilities, what else is included? Does it offer web filtering and anti-phishing as well?

@ShenguiTurmi on top it says “Revert to default inherited policy”. This suggests that there is another place for managing policies as well. Did you check everywhere?

Edit:
Watch this video from the 4th minute onwards to learn about policy and asset management.

I assume it does not have features like antiphising and web filtering, Harmony is a more complete solution.

 

[Trident]

Rolling back the behaviour is something many do, even McAfee and Webroot. SentinelOne uses a lot of fancy terms and trademarks across their website but nothing really explains the capabilities well, it’s just a lot of marketing fluff.
The rollback seems to refer only to ransomware recovery and automatic group remediation as Symantec calls it.

SentinelOne - How does Rollback Work?

Rollback, SentinelOne's rewind for ransomware. This feature boasts the ability to restore, with a single click, files that have been maliciously encrypted/deleted, to their previous state. What's more, this functionality is provided in a single agent EPP/EDR solution that has an average CPU...

www.cybervigilance.uk

I think I will pass on SentinelOne, nothing to see and learn there.

 

[ShenguiTurmi]

Rolling back the behaviour is something many do, even McAfee and Webroot. SentinelOne uses a lot of fancy terms and trademarks across their website but nothing really explains the capabilities well, it’s just a lot of marketing fluff.
The rollback seems to refer only to ransomware recovery and automatic group remediation as Symantec calls it.

SentinelOne - How does Rollback Work?

Rollback, SentinelOne's rewind for ransomware. This feature boasts the ability to restore, with a single click, files that have been maliciously encrypted/deleted, to their previous state. What's more, this functionality is provided in a single agent EPP/EDR solution that has an average CPU...

www.cybervigilance.uk

I think I will pass on SentinelOne, nothing to see and learn there.

In addition to SentinelOne, I provided WithSecure for @Shadowra to test, and WithSecure seems to do less than SentinelOne.

 

[Trident]

In addition to SentinelOne, I provided WithSecure for @Shadowra to test, and WithSecure seems to do less than SentinelOne.

Can I give it a try as well somehow?

 

[ShenguiTurmi]

Can I give it a try as well somehow?

Sure. PM me a email address for login?

 

[likeastar20]

@Trident so how is s1?