Trellix Endpoint Detection and Response (EDR) Reviews

Name: Trellix Endpoint Detection and Response (EDR)
Brand: Trellix
Rating: 4 (22 reviews)

3.7 out of 5

22 reviews
88% willing to recommend

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), Microsoft Defender for Endpoint, CrowdStrike Falcon and more!

Trellix Endpoint Detection and Response (EDR) is the #22 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to Microsoft Defender for Endpoint: Trellix Endpoint Detection and Response (EDR) vs Microsoft Defender for Endpoint. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 70% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Buyer's Guide

Trellix Endpoint Detection and Response (EDR)

September 2024

Get the report

Helped 813,418 peers since 2012

Featured reviews

Moizuddin Sayed

Senior IT Systems Administrator at IndusInd Bank ltd

It has been helpful in terms of identifying unknown threats. The file is available on the endpoint, and the information is retrieved to identify any unknown or malicious file and then converted to a known file The endpoints and utilization are too high, which impacts the production activity.…

Read full review

Juan Muriel

IT Management Specialist at a computer software company with 10,001+ employees

We use the tool for threat hunting. It detects a lot of threats daily We do not need to monitor the network all the time because the solution is completely automated. The administrators’ time can be dedicated to improving other projects. The antivirus and DLP features are valuable. Now, we have…

Read full review

Hung-LE

Group IT Manager at Discova

Trellix purchased McAfee two years ago. At this moment, it may seem a bit difficult if I explain Trellix and McAfee separately. Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint provide endpoint protection. In the future, if Trellix can compile both the products, Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint, into one solution, our company need not install multiple agents, which can reduce the workload for IT and make the tool easy to manage. The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution. If both tools are combined into a single solution, it will become easier for a user to manage and deploy such a product.

Read full review

Trellix Endpoint Detection and Response (EDR) mindshare

As of October 2024, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 0.8%, up from 0.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Key learnings from peers

Last updated Sep 9, 2024

Valuable Features

Guided investigation, scalability, isolation and quarantine, ransomware detection, Web Control, Advanced Threat Protection, Threat Prevention, cyberattack visualization, ease of management, automatic incident response, high response and coverage, one-click recovery, threat hunting, antivirus integration, real-time monitoring and alerts, user-friendly interface, investigative capabilities, real-time search, comprehensive detection, behavior monitoring, DLP, access control, automation improvement.

"The most valuable feature of the solution is its area for threat detection."
"The dashboard makes it easier and more effective to analyze data."
"The most useful features are behavior monitoring, DLP, and access control. The automation has gotten much better in the last two years than when it was McAfee. It works better now and integrates more smoothly."

Room for Improvement

Trellix Endpoint Detection and Response (EDR) requires optimization of resource usage and processing time, enhancement of the alert system and technical support, and a more user-friendly dashboard. It also needs better integration capabilities, historical search and automation features, improved reporting, compatibility with macOS, a consolidated platform for different functions, and support for modern operating systems. Additionally, improvements in scalability, ease of use, and administrative capabilities are necessary.

"When it comes to some unknown fileless attacks, the tool is not able to detect them properly, making it an area where improvements are required."
"The dashboard is split across different platforms. For example, if you want information on Incident Detection, you have to access one dashboard, and for DLP reporting, there's a separate platform. This fragmentation means you can't access everything from a single dashboard."
"I'd like the tool to become more like an XDR, with one management system and endpoint activation."

ROI

Users observed improvements from Trellix Endpoint Detection and Response (EDR), noting it provides substantial visibility of environments and endpoints. Organizations embedded it in their services due to its value. Users praised its AI-like capabilities, aiding IT teams in swift root cause analysis and breach prevention, enhancing data protection and regulatory compliance. Operational challenges included needing technical expertise. Some rated ROI at four out of ten, while others confirmed ROI with McAfee MVISION Endpoint Detection and Response.

Pricing

Trellix Endpoint Detection and Response (EDR) offers a transparent pricing structure with no setup costs, streamlining the implementation process for users. Pricing methods typically involve subscription-based models, accommodating per-endpoint licensing options. The pricing range caters to businesses of all sizes, providing scalable EDR solutions tailored to specific security needs.

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
"The price is reasonable."
"The pricing is always high."

Popular Use Cases

The primary use case of Trellix Endpoint Detection and Response (EDR) includes threat hunting, endpoint protection, detecting and reacting to attacks, scanning devices, identifying unknown threats, consolidating threat intelligence, investigating malicious files, supporting incident response, and managing threat events. Organizations utilize it for server security, integrating it with SIEM, and forensic investigations. It assists in identifying critical management activities and monitoring the network environment with detailed insights.

Service and Support

Customer service and support for Trellix Endpoint Detection and Response (EDR) receive mixed feedback. Some rate it highly, praising its responsiveness and effectiveness; others report issues with delays, language barriers, and knowledge gaps. Some find it mandatory to have OEM support, which might still struggle with installation and implementation. Users note a decline in support quality following a company merger, and some encounter frustrations due to slow responses. However, options for support include creating cases through partners or the portal.

Deployment

Many found setting up Trellix Endpoint Detection and Response (EDR) to be easy and straightforward, especially with cloud deployment. Some organizations experienced complexity in implementation and policy enforcement. Deployment time varied, typically taking days to months depending on the size. Challenges included linking to on-premises systems and resources usage. A few encountered difficulties requiring external tools or support. Those with extensive experience in cybersecurity found the process simpler.

Scalability

Trellix Endpoint Detection and Response (EDR) is generally seen as scalable, leveraging cloud infrastructure for seamless expansion. Users report varied experiences, some noting excellent scalability in both small and large environments. Others highlight specific challenges, such as functionality issues and occasional slowness, especially with larger user bases. Most comments favor its cloud-based nature, suggesting it meets scalability needs from small businesses to large enterprises, accommodating thousands of users and vast geographical coverage.

Stability

Trellix Endpoint Detection and Response (EDR) is generally stable, with some users rating its stability as high as nine out of ten. Performance issues were noted in earlier versions but have improved with newer updates. Some stability concerns arise from improper partner deployments. Users highlight good performance without requiring hardware, assuming proper internet connectivity. Some encountered browser-specific issues, and a few needed experienced users for optimal performance. Stability is strong across most feedback.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Manufacturing Company

12%

Financial Services Firm

11%

Government

10%

Insurance Company

Comms Service Provider

Energy/Utilities Company

University

Educational Organization

Transportation Company

Performing Arts

Retailer

Real Estate/Law Firm

Healthcare Company

Non Profit

Outsourcing Company

Wholesaler/Distributor

Construction Company

Aerospace/Defense Firm

Media Company

Consumer Goods Company

Pharma/Biotech Company

International Affairs Institute

Hospitality Company

Logistics Company

Marketing Services Firm

Legal Firm

Leisure / Travel Company

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.