It is easy to customize rulesets with all security products we use in our network environment (including Cisco ASA). Sometimes an alert can take up to 30 minutes before it gets picked up by other tools which causes some issues when you want quick results! We are solving problems related to endpoint protection since about 3 years now using this product from start until today without major incidents or significant downtime - just minor ones where sometimes there were small delays while applying new settings but not enought serious issue so far.