Avoid Symantec appliances, says Gartner

Companies should avoid investing in Symantec's network security appliances, and should evaluate offerings from other vendors, Gartner has warned.

The analyst firm said that it issued the warning because it believes that Symantec is moving away from selling network security appliances as it concentrates on "new business directions".

Gartner's advice comes after Symantec told some customers on 23 June that it is winding down development of the Symantec Gateway Security (SGS) and Symantec Network Security (SNS) products.

"Avoid investing in SGS and SNS products. Move to other solutions at the next refresh point," a Gartner advisory written by analysts Greg Young and John Pescatore warned.

"Symantec is terminating its investments in the SGS multifunction appliance and SNS intrusion prevention system products. Symantec also recently ended support for the Symantec Enterprise Firewall product."

However, the Gartner report goes on to note that Symantec will retain the Network Access Control Enforcer and Symantec Mail Security products, as they are key to supporting the endpoint security products.

"Gartner analysis for Symantec network security offerings has consistently shown that Symantec has not had network security as a core focus, and that Symantec's offerings in this market have been 'niche' products," the analyst firm stated.

Gartner issued a 'caution' rating for Symantec's network security products, and said that the vendor's managed network security services offerings would be stronger if it did not have a channel conflict in selling firewall and intrusion prevention products.

"The absence of emphasis and limited success in network security means that exiting this market is a good tactical decision for Symantec, demonstrating a long-term focus on host-based security and security management products and services," Gartner reported.

"Strategically, the decision means that Symantec will not be able to offer integrated host and network-based intrusion prevention offerings that competitors such as Cisco Systems, Internet Security Systems and McAfee offer.

"While Gartner believes that network intrusion prevention can greatly benefit from increased endpoint intelligence, a vendor proprietary approach is not the only way to achieve this."

In May 2006, a joint product was announced for Nortel Application Switches with Symantec Intelligent Network Protection. Gartner believes it is likely that Symantec will pursue similar OEM arrangements with other appliance and infrastructure vendors.

"However, the most likely long-term outcome for the Symantec firewall and intrusion prevention appliance technology is outright purchase by a switch vendor or other network vendor that wants to increase its installed base or jump-start entry into the network security market. Competing OEMs using the same Symantec technology are not likely to last," Gartner stated.

As a result of this market analysis Gartner advises enterprises not to make any new purchases of Symantec SGS or SNS products, other than filling out "very recent implementations".

It further advises organisations with SGS and SNS to plan now for replacements. Although the analyst firm observed that replacing these devices should not be an immediate requirement as the technology will continue to be supported by Symantec, it warned that users should expect no significant improvements to the products.