Trellix Endpoint Detection and Response (EDR) Reviews

Name: Trellix Endpoint Detection and Response (EDR)
Brand: Trellix
Rating: 3.7 (22 reviews)

3.7 out of 5

22 reviews
88% willing to recommend

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trellix Endpoint Detection and Response (EDR) is the #24 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Based on the analysis of the 22 most recent Trellix Endpoint Detection and Response (EDR) reviews, the overall sentiment is positive, with a sentiment score of 7.6. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 66% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 14% of all views.

Buyer's Guide

Trellix Endpoint Detection and Response (EDR)

November 2024

Get the report

Helped 824,067 peers since 2012

Featured reviews

Juan Muriel

IT Management Specialist at a computer software company with 10,001+ employees

The antivirus and DLP features are valuable. Now, we have a campaign to encrypt all the drives of the company. We have a solution for network access control from Fortinet. When Trellix detects some threats, the device is isolated in a quarantine zone for examination. We integrate Trellix Endpoint Detection and Response with other solutions to perform such isolations. We also use products for log monitoring and correlation and create use cases for automatic response.

Read full review

Moizuddin Sayed

Senior IT Systems Administrator at IndusInd Bank ltd

It is a scalable solution and very easy to use in terms of hardware or sizing. In terms of the number of users, because we are a banking environment, the IT department, bankers and people on the business side use this solution. Therefore, a minimum of five people is required to manage the environment. We currently use it to its full extent but plan to replace it.

Read full review

ObaseunAwoyinfa

Security Consultant at Trinexia

Trellix EDR is designed to scale seamlessly, leveraging cloud infrastructure that eliminates traditional hardware limitations. This allows scalability up to fifteen thousand nodes or even two hundred thousand nodes, depending on the licensing. The cloud-based architecture enables centralized management from anywhere globally, facilitating comprehensive coverage across different geographical locations. In essence, it offers robust scalability and management capabilities. For SMBs and enterprises, Trellix EDR typically recommends environments with more than fifty computers. The rationale is that the more computers there are, the greater the likelihood of being targeted by malicious actors. With an EDR solution, there's a better chance of detecting and mitigating malicious activities on your systems.

Read full review

Trellix Endpoint Detection and Response (EDR) mindshare

As of December 2024, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 0.9%, up from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

PeerAnalyst reports

Type	Title	Date
Category	Endpoint Detection and Response (EDR)	Dec 22, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 22, 2024	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon	Dec 22, 2024	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs Microsoft Defender for Endpoint	Dec 22, 2024	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete	Dec 22, 2024	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	16.7%	97%	122 interviews Add to research
Microsoft Defender for Endpoint	4.0	12.5%	94%	190 interviews Add to research

Valuable Features

Guided investigation, scalability, isolation and quarantine, ransomware detection, Web Control, Advanced Threat Protection, Threat Prevention, cyberattack visualization, ease of management, automatic incident response, high response and coverage, one-click recovery, threat hunting, antivirus integration, real-time monitoring and alerts, user-friendly interface, investigative capabilities, real-time search, comprehensive detection, behavior monitoring, DLP, access control, automation improvement.

"The most valuable feature of the solution is its area for threat detection."
"The dashboard makes it easier and more effective to analyze data."
"The most useful features are behavior monitoring, DLP, and access control. The automation has gotten much better in the last two years than when it was McAfee. It works better now and integrates more smoothly."

Room for Improvement

Trellix Endpoint Detection and Response (EDR) requires optimization of resource usage and processing time, enhancement of the alert system and technical support, and a more user-friendly dashboard. It also needs better integration capabilities, historical search and automation features, improved reporting, compatibility with macOS, a consolidated platform for different functions, and support for modern operating systems. Additionally, improvements in scalability, ease of use, and administrative capabilities are necessary.

"When it comes to some unknown fileless attacks, the tool is not able to detect them properly, making it an area where improvements are required."
"The dashboard is split across different platforms. For example, if you want information on Incident Detection, you have to access one dashboard, and for DLP reporting, there's a separate platform. This fragmentation means you can't access everything from a single dashboard."
"I'd like the tool to become more like an XDR, with one management system and endpoint activation."

ROI

Users observed improvements from Trellix Endpoint Detection and Response (EDR), noting it provides substantial visibility of environments and endpoints. Organizations embedded it in their services due to its value. Users praised its AI-like capabilities, aiding IT teams in swift root cause analysis and breach prevention, enhancing data protection and regulatory compliance. Operational challenges included needing technical expertise. Some rated ROI at four out of ten, while others confirmed ROI with McAfee MVISION Endpoint Detection and Response.

Pricing

Trellix Endpoint Detection and Response (EDR) offers a transparent pricing structure with no setup costs, streamlining the implementation process for users. Pricing methods typically involve subscription-based models, accommodating per-endpoint licensing options. The pricing range caters to businesses of all sizes, providing scalable EDR solutions tailored to specific security needs.

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
"The price is reasonable."
"The pricing is always high."

Popular Use Cases

The primary use case of Trellix Endpoint Detection and Response (EDR) includes threat hunting, endpoint protection, detecting and reacting to attacks, scanning devices, identifying unknown threats, consolidating threat intelligence, investigating malicious files, supporting incident response, and managing threat events. Organizations utilize it for server security, integrating it with SIEM, and forensic investigations. It assists in identifying critical management activities and monitoring the network environment with detailed insights.

Service and Support

Customer service and support for Trellix Endpoint Detection and Response (EDR) receive mixed feedback. Some rate it highly, praising its responsiveness and effectiveness; others report issues with delays, language barriers, and knowledge gaps. Some find it mandatory to have OEM support, which might still struggle with installation and implementation. Users note a decline in support quality following a company merger, and some encounter frustrations due to slow responses. However, options for support include creating cases through partners or the portal.

Deployment

Many found setting up Trellix Endpoint Detection and Response (EDR) to be easy and straightforward, especially with cloud deployment. Some organizations experienced complexity in implementation and policy enforcement. Deployment time varied, typically taking days to months depending on the size. Challenges included linking to on-premises systems and resources usage. A few encountered difficulties requiring external tools or support. Those with extensive experience in cybersecurity found the process simpler.

Scalability

Trellix Endpoint Detection and Response (EDR) is generally seen as scalable, leveraging cloud infrastructure for seamless expansion. Users report varied experiences, some noting excellent scalability in both small and large environments. Others highlight specific challenges, such as functionality issues and occasional slowness, especially with larger user bases. Most comments favor its cloud-based nature, suggesting it meets scalability needs from small businesses to large enterprises, accommodating thousands of users and vast geographical coverage.

Stability

Trellix Endpoint Detection and Response (EDR) is generally stable, with some users rating its stability as high as nine out of ten. Performance issues were noted in earlier versions but have improved with newer updates. Some stability concerns arise from improper partner deployments. Users highlight good performance without requiring hardware, assuming proper internet connectivity. Some encountered browser-specific issues, and a few needed experienced users for optimal performance. Stability is strong across most feedback.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

12%

Manufacturing Company

11%

Government

10%

Comms Service Provider

Insurance Company

Educational Organization

Energy/Utilities Company

Transportation Company

University

Real Estate/Law Firm

Performing Arts

Healthcare Company

Outsourcing Company

Construction Company

Wholesaler/Distributor

Retailer

Aerospace/Defense Firm

Media Company

Non Profit

Pharma/Biotech Company

Consumer Goods Company

Hospitality Company

Marketing Services Firm

International Affairs Institute

Legal Firm

Logistics Company

Recreational Facilities/Services Company

Leisure / Travel Company

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.