Trellix Endpoint Detection and Response (EDR) Reviews

Name: Trellix Endpoint Detection and Response (EDR)
Brand: Trellix
Rating: 3.7 (23 reviews)

3.7 out of 5

23 reviews
83% willing to recommend

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trellix Endpoint Detection and Response (EDR) is the #24 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 67% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 13% of all views.

Buyer's Guide

Trellix Endpoint Detection and Response (EDR)

January 2025

Get the report

Helped 831,997 peers since 2012

Featured reviews

Juan Muriel

IT Management Specialist at a computer software company with 10,001+ employees

The antivirus and DLP features are valuable. Now, we have a campaign to encrypt all the drives of the company. We have a solution for network access control from Fortinet. When Trellix detects some threats, the device is isolated in a quarantine zone for examination. We integrate Trellix Endpoint Detection and Response with other solutions to perform such isolations. We also use products for log monitoring and correlation and create use cases for automatic response.

Read full review

Moizuddin Sayed

Senior IT Systems Administrator at IndusInd Bank ltd

It is a scalable solution and very easy to use in terms of hardware or sizing. In terms of the number of users, because we are a banking environment, the IT department, bankers and people on the business side use this solution. Therefore, a minimum of five people is required to manage the environment. We currently use it to its full extent but plan to replace it.

Read full review

Hung-LE

Group IT Manager at Discova

Trellix purchased McAfee two years ago. At this moment, it may seem a bit difficult if I explain Trellix and McAfee separately. Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint provide endpoint protection. In the future, if Trellix can compile both the products, Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint, into one solution, our company need not install multiple agents, which can reduce the workload for IT and make the tool easy to manage. The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution. If both tools are combined into a single solution, it will become easier for a user to manage and deploy such a product.

Read full review

Trellix Endpoint Detection and Response (EDR) mindshare

As of January 2025, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 1.0%, up from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

PeerAnalyst reports

Type	Title	Date
Category	Endpoint Detection and Response (EDR)	Jan 30, 2025	Download
Product	Reviews, tips, and advice from real users	Jan 30, 2025	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon	Jan 30, 2025	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs Microsoft Defender for Endpoint	Jan 30, 2025	Download
Comparison	Trellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete	Jan 30, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	16.9%	96%	123 interviews Add to research
Microsoft Defender for Endpoint	4.0	12.3%	94%	190 interviews Add to research

Valuable Features

Trellix Endpoint Detection and Response features user-friendly interface, guided analytics, threat detection, and real-time monitoring. It integrates seamlessly with antivirus, offers strong threat prevention with auto isolation, and visualizes cyberattacks. It scales easily, offering ransomware blocking, detailed IOC reports, and automatic response. Trellix provides advanced threat protection and integrates external detection systems for comprehensive response. Features like dashboard analytics, DLP, and behavior monitoring increase effectiveness, while its one-click recovery simplifies encrypted file handling.

"Trellix has done a good job reducing threats."
"The product and the services we have are quite good."
"The most valuable feature of the solution is its area for threat detection."

Room for Improvement

Trellix Endpoint Detection and Response needs reduced CPU and RAM usage, an improved alert system, and better technical support. The dashboard requires a more user-friendly design. Enhancements in centralized policy enforcement and integration capabilities are essential. It must be better compatible with diverse operating systems and less dependent on a signature base. Combining it into a single solution with McAfee MVISION could simplify management. The reporting and search features also demand improvement.

"I remember doing many tickets for Trellix support, and my EDR was not properly functioning. I didn't feel the detection or the real protection."
"I need some protection, possibly multi-factor authentication improvements."
"When it comes to some unknown fileless attacks, the tool is not able to detect them properly, making it an area where improvements are required."

ROI

Organizations rated their ROI from Trellix Endpoint Detection and Response (EDR) variedly, noting its capability in quick investigation through AI-like features and improved visibility over environments. They observed protection and compliance assistance, especially in regions prone to unnoticed breaches. Significant advantages included data safeguarding and regulatory ease, enhancing operational credibility. However, user feedback indicated the need for technical management, while some noted cost-effectiveness despite numerous installation requirements, though not all witnessed direct returns.

Pricing

Trellix Endpoint Detection and Response (EDR) generally offers reasonable pricing suited for midsized businesses rather than startups. Costs can range between $25,000 to $30,000 for 600 users, with added expenses for data retention beyond 30 days. Reviewers consider it cost-effective but note higher prices compared to competitors, particularly in markets like South Africa. Licensing is usually bundled with a minimal three-year contract, and advanced features may come at premium pricing.

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
"The price is reasonable."
"The pricing is always high."

Popular Use Cases

Trellix Endpoint Detection and Response (EDR) is utilized for endpoint protection, threat hunting, and incident response. It helps identify unknown threats, provides threat intelligence, and consolidates data into MVISION Insights. Users leverage EDR for safeguarding workstations, detecting early attack stages, and managing network security. It offers detailed information, supports malware detection, and integrates with Trellix SIEM. The tool is clientless, cloud-based, and aids in forensic investigations and critical management activities.

Service and Support

Users express mixed experiences with Trellix Endpoint Detection and Response customer service and support. Some describe slow response times and insufficient issue resolution, creating frustration and considering alternatives. Others praise support as prompt and knowledgeable, rating it highly. Language barriers and ineffective problem-solving are noted by some, particularly after the McAfee merge. Access to top-level staff provides different experiences, but general opinion varies widely regarding efficiency and effectiveness. OEM support is deemed necessary by several users.

Deployment

Trellix Endpoint Detection and Response (EDR)'s initial setup varies in complexity. Some find it straightforward, while others experience challenges. It's often cloud-based with various deployment models. Time frames range from days to months, influenced by deployment size and approach. Users highlight challenges in policy aggregation and enforcement during upgrades. Some leverage third-party tools to streamline the process, while others mention administrative complexities. Training and documentation can ease the setup for new users.

Scalability

Trellix Endpoint Detection and Response (EDR) is scalable, benefiting from a cloud-based architecture that supports centralized management and removes traditional hardware limits. It accommodates various enterprise sizes, easily scaling from small to large environments. Users report satisfactory scalability performance, though some experience challenges requiring support. EDR's adaptability allows extensive deployment across diverse sectors like banking and telecom, and it is effective for organizations with multiple users and varied resource needs.

Stability

Trellix Endpoint Detection and Response (EDR) is widely perceived as stable, with many users rating its stability highly, often 8 or 9 out of 10. Some have faced issues on specific browsers or with older architecture changes, but newer versions have improved performance and resource efficiency. Users note the necessity of skillful handling to maximize its capabilities. Stability depends partly on correct deployment by partners rather than EDR itself.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

11%

Manufacturing Company

11%

Government

10%

Insurance Company

Comms Service Provider

Energy/Utilities Company

Educational Organization

University

Transportation Company

Real Estate/Law Firm

Healthcare Company

Construction Company

Wholesaler/Distributor

Aerospace/Defense Firm

Outsourcing Company

Retailer

Non Profit

Media Company

Consumer Goods Company

Hospitality Company

Performing Arts

Pharma/Biotech Company

Logistics Company

Legal Firm

International Affairs Institute

Recreational Facilities/Services Company

Marketing Services Firm

Leisure / Travel Company

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.