ManageEngine Endpoint DLP Plus vs Symantec IT Management Suite

ManageEngine Endpoint DLP Plus helps IT administrators and security leaders find, monitor, and protect sensitive endpoint data. It scans devices for personal and financial records and classifies information by sensitivity. Policies can be set by user, role, device, or location and deployed across endpoints. The software monitors data movement through USB devices, browsers, cloud apps, and email, and can block unauthorized transfers. File inspection can track sensitive information after files are renamed, compressed, or moved; OCR detects data in images and scans. Listed capabilities also include insider threat controls, cloud protection, email security, device control, false-positive remediation, data containerization, and reports. Email DLP policies cover Outlook desktop, including Outlook 2013, 2019, 2021, and Microsoft 365, but not web-based email clients. Active Directory integration supports domain-based computers and directory resources. The on-premises version keeps customer data in the customer's environment. Deployment includes an on-site server, endpoint agents, a web console, and Active Directory. The Free Edition covers up to 25 devices; the Professional Edition costs $795 per year for 100 workstations and one technician.

Symantec IT Management Suite manages application and operating-system configurations across desktops, laptops, and servers. It combines Asset Management Suite, Client Management Suite, and Server Management Suite, which can be licensed together or separately. Management features include automated patching, on-demand assessments, Patch Now actions, and CVE-based reporting. Deployment supports operating-system rollout, bare-metal provisioning, hardware-independent imaging, and software distribution. CMDB-backed discovery tracks hardware, software, virtual assets, contracts, warranties, and license usage. Cloud-Enabled Management collects inventory and delivers patches or software updates to Windows and Mac devices outside the corporate network without VPN. Users can request approved software through a self-service portal. The suite supports Microsoft, Red Hat, CentOS, and SUSE updates, plus Windows and Mac workstations. ITMS 8.8.1 and later provide REST API data exchange. Microsoft SQL Server is required for ITMS 8.7.x and 8.8.x; other listed database platforms are unsupported. Pricing is on request.