Trellix Collaboration Security Reviews

Ideally, I don't manage the installation, but I do manage the security part. I am responsible for defining security-based best practices and implementing them in our company's environment.

I know about Trellix (formerly FireEye) Endpoint Security HX. I use Trellix Network Security (NX) for network security and devices, while Trellix (formerly FireEye) Endpoint Security HX is used for email security requirements.

My experience with the product is good. One of the valuable features of the product stems from the fact that it is easy to implement the tool in our environment.

I primarily use it to monitor database access, particularly in banking and similar environments. It ensures that IT personnel and others do not create unauthorized accounts or users. Collaboration security assists in tracking database access and alerts in case of suspicious activity.

One of the most valuable features is the protection against vulnerabilities, particularly through virtual patching. This ensures that I am safe from potential threats affecting database security. 

Another significant feature is the vulnerability assessment, which is effective for overall data protection.

The solution is used for email security. It streamlines our team’s collaboration and file-sharing efforts.

It is a good product. The product protects my email. It prevents APT attacks. It is easy to integrate the solution with other tools. My emails used to have some viruses or malicious threats. Now, I do not face such issues.

Our primary use case for this solution is as a layer of advanced security for emails. FireEye Email Security helps us prevent spam and phishing emails and all other business-compromised email attacks.

FireEye ETB offers a good dashboard thanks to which we can see which emails are coming into the organization and which are going out. The solution also allows us to block emails as per the domain and email addresses. This is the most beneficial aspect of the solution in my opinion. Lastly, the solution not only protects us from phishing, it also secures us from advanced malware and phishing attacks.

We get inbound emails via MS 365. It directs those emails to our ETP product, the cloud product. Then messages that it's been analyzed as clean and will be sent back to MS 365 for us to receive. Right now we are using the solution for EPT analysis purposes.

Our business is based on our customer client sites. We can control this solution from the cloud and are able to access it from wherever we are.

I like FireEye's filtering, spam digests, and its advanced threat review of email flow. It also has a broad range of riskware rules you can deploy.

FireEye needs single sign-on. They say it's on their roadmap. They should also implement support for Microsoft Authenticator app for 2FA.

The solution offers almost every feature that customers need in one solution. For example, spam filtering, antivirus, et cetera.

There are almost zero false positives. One of my biggest customers said that after they had used the solution for almost one year or one and a half years, we didn't release any email regarding any false positive feedback. Other products, most of the time create false post followups or blocks some emails that shouldn't be blocked, et cetera. Here, there are almost zero false post rates.

There is a marketing engine on the product coming from FireEye. It's a completely in-house solution on the vendor side. That's why hackers or attackers can't resolve or can't understand the sandbox as easily as other sandbox solutions. It has very advanced features for catching malware, advanced attacks, ATPs, et cetera. It can also be very helpful for the customers.

The initial setup is simple.

I've been using the solution for three years. I'm using it almost every day.