with my overall experience i can say is the best tool for protecting legacy machines

To my knowledge this is the only tool which is best in protecting legacy machines i.e the machines which are no longer supported by Microsoft. We lock-down the machines with required policy and it dcs do its work

Building the policies for the different servers are hard and if it automate that would save lot of time for administrators

We never got it installed so we never received any benefit from it. they billed us and refused to refund. So there was no benefit ever received.

the security it is supposed to provide is supposed to be good. overall product is decent and what it does is supposed to be good

We never got it up and running and they refused to credit us and refund the amount paid, even though they billed us three months later. We fought for months with people in India because no one in the USA would ever call us back. We had to go to the credit card company over and over again to get our refund. And we only got it because they never responded.

Working on this tool from last two years and my experience about this tool is good.

I can restrict the super user from accessing the system resources and simultaneously I can allow normal application user to access system resources. FIM is one more good thing to monitor each and every activity happen on OS critical files.

It generate more number of events that are little bit difficult to manage. In FIM, limitation on monitoring and if we increase the monitoring limit then challenges in system resource utilisation is difficult to balance.