Symantec

Overview

Symantec was founded in 1982 and headquartered in Mountain View, California, making it one of the longest-standing enterprise security companies globally. In 2019, Broadcom acquired Symantec's enterprise security business for $10.7 billion, and the Symantec brand now operates as Broadcom's enterprise security division. Its endpoint protection platform secures over 175 million endpoints, with security products spanning endpoint detection and response (EDR), data loss prevention (DLP), web security gateway, SSL/TLS certificates, and PKI solutions.

With over 40 years of technology accumulation in enterprise security, Symantec's DLP products have been consistently recognized as a leader by Gartner. Leveraging Broadcom's resource integration, Symantec is transitioning from a traditional security vendor into a comprehensive enterprise security platform.

Key Strengths

• Broad endpoint protection coverage: Over 175 million endpoints run Symantec Endpoint Protection. The AI-driven threat detection engine automatically identifies known and unknown malware, combining behavioral analysis to block ransomware, fileless attacks, and advanced threats.
• Enterprise DLP leadership: Symantec DLP monitors network, storage, and endpoint layers, automatically identifying PII, PCI, and intellectual property. Policies use content fingerprinting, keyword regex, and exact data matching—violations trigger automatic blocking and compliance reporting.
• Deep SSL/TLS certificate heritage: As one of the most recognized CA brands globally, Symantec (CA operations now run by DigiCert) has long-standing trust roots in EV certificates and enterprise PKI. Suitable for SSL certificate enterprise deployments.

Product Ecosystem

Endpoint Protection (SEP)

Symantec Endpoint Protection (SEP) provides a unified endpoint security platform including antivirus, anti-malware, firewall, intrusion prevention (IPS), device control, and application control. SEP supports Windows, macOS, Linux, and mobile platforms, with centralized policy management and event analysis via the cloud management console.

Data Loss Prevention (DLP)

Symantec DLP is one of the most widely deployed DLP solutions, covering network DLP (monitoring outbound traffic), endpoint DLP (monitoring file operations and USB copying), and storage DLP (scanning sensitive data in data warehouses). It supports 200+ predefined compliance policy templates for GDPR, HIPAA, PCI DSS, and more.

Secure Web Gateway (WSS)

Symantec Web Security Service (WSS) provides a cloud-delivered secure web gateway, filtering malicious URLs, blocking malware downloads, and enforcing acceptable use policies through a global proxy network. It processes billions of daily web requests, protecting remote and multi-cloud user access.

Cloud Workload Protection (CWP)

Symantec Cloud Workload Protection (CWP) provides unified security management for workloads on AWS, Azure, and Google Cloud, including vulnerability assessment, compliance checking, and runtime protection.

SSL Certificates & PKI

Symantec-branded SSL certificates (now operated by DigiCert) offer DV, OV, EV, and Wildcard certificates trusted by 99% of browsers and operating systems. PKI solutions support code signing, document signing, email certificates, and IoT device identity authentication.

Limitations

• Post-acquisition integration uncertainty: Since Broadcom's acquisition of Symantec's enterprise security business, development and updates for some non-core products have slowed. Customers may face unclear upgrade and migration roadmaps.
• High licensing costs: Enterprise endpoint and DLP suite per-endpoint licensing costs are significant, presenting budget challenges for teams under 500 endpoints. Consider cloud-native alternatives like CrowdStrike.
• Uneven support quality: Symantec technical support varies by region; free support channels have average response times, and premium SLA requires additional purchase.
• Product line complexity: From endpoint to DLP, Web gateway to cloud protection, the broad product line means organizations may need to manage multiple consoles and policy systems.

Use Cases

• Large enterprise endpoint protection (★★★★★): SEP is mature and stable, ideal for large-scale deployments covering thousands to tens of thousands of endpoints.
• Data loss prevention compliance (★★★★★): Symantec DLP is the industry standard, especially suitable for finance, healthcare, and government agencies needing GDPR/HIPAA compliance.
• Enterprise SSL certificate bulk management (★★★★): Leveraging DigiCert-operated PKI trust roots, suitable for large-scale certificate procurement and management.
• Multi-cloud workload protection (★★★): CWP is feature-rich but complex to deploy, suitable for organizations already deep in the Broadcom ecosystem.
• Small-to-medium businesses (★★): Due to high licensing costs and deployment complexity, cloud-native security solutions may be preferable.

Pricing

Note: Actual prices vary by region, channel, and volume. The above are public reference ranges.

FAQ

• What is the relationship between Symantec and Broadcom? In 2019, Broadcom acquired Symantec's enterprise security business for $10.7 billion. Symantec endpoint protection, DLP, web security gateway, and other products are now operated and sold by Broadcom. Consumer security products (Norton) remain an independent brand; see the cybersecurity threat landscape.
• Can I still buy Symantec SSL certificates? Yes. Symantec-branded SSL certificates are now issued and operated by DigiCert, with trust roots consistent with DigiCert. However, the Symantec CA brand is gradually transitioning to unified DigiCert management; see CDN and SSL/TLS configuration best practices.
• How long does Symantec DLP deployment take? A mid-size organization (2,000–5,000 endpoints) DLP deployment typically takes 2–4 months, including policy design, network sensor deployment, and endpoint agent installation. Partnering with an experienced Symantec DLP implementer is recommended; see website security best practices.
• Symantec vs CrowdStrike — how to choose? Symantec excels in traditional antivirus and DLP, ideal for large enterprise compliance-driven procurement. CrowdStrike Falcon offers more flexible cloud-native EDR/XDR and threat hunting with faster deployment, better suited for teams pursuing modern security operations; see the cybersecurity threat landscape.