Trellix ESM Reviews

Name: Trellix ESM
Brand: Trellix
Rating: 3.7 (36 reviews)

3.7 out of 5

36 reviews
75% willing to recommend

1,710 followers

What is Trellix ESM?

Make your organization more resilient and confident with Trellix Security Operations. Filter out the noise and cut complexity to deliver faster, more effective SecOps. Integrate your existing security tools and connect with over 650 Trellix solutions and third-party products.

Get the Trellix ESM Buyer's Guide and find out what your peers are saying about Trellix ESM, Splunk Enterprise Security, Microsoft Sentinel and more!

Trellix ESM is the #22 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Trellix ESM an average rating of 7.4 out of 10. Based on the analysis of the 36 most recent Trellix ESM reviews, the overall sentiment is positive, with a sentiment score of 7.4. Trellix ESM is most commonly compared to Splunk Enterprise Security: Trellix ESM vs Splunk Enterprise Security. Trellix ESM is popular among the midsize enterprise segment, accounting for 78% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 75% of all views.

Helped 816,406 peers since 2012

Featured reviews

Daniel Durian

Senior Information Security Manager at a real estate/law firm with 10,001+ employees

The tool's effectiveness depends on how you define your log sources. To build visibility of incoming and outgoing traffic, you need logs from perimeter defense, firewalls, web application firewalls, and endpoint protection. With good traffic visibility, incident response time is really quick. Trellix ESM provides situation awareness. On the dashboard, I can see outbound and inbound communications to known threat hosts, IPS/IDS activity, and threat intelligence of the perimeter defense in the firewall. This information helps preempt attacks.

Read full review

Daniel Durian

Senior Information Security Manager at a real estate/law firm with 10,001+ employees

There are no areas to be improved as this solution is well thought of. However, any technology solution even it is well thought of, might not work effectively if the users will not know how to fully optimize its usage and functionality. Knowledge transfer will be great in the areas of administration and maintenance up to command line interface.

Read full review

Usman Ali

Principal Engineer at Emerson

The initial setup is easy, and two executives work on it. However, the complexity depends on the number of nodes. We encounter challenges related to ESM's interface. Its licensing model for allowing listing configurations needs enhancement as well. It is easy to maintain and can be managed by one executive.

Read full review

Trellix ESM mindshare

As of November 2024, the mindshare of Trellix ESM in the Security Information and Event Management (SIEM) category stands at 0.8%, down from 1.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

The most valuable features of Trellix ESM include robust security, user-friendly interface, effective correlation rules and reporting, ease of use and deployment, log monitoring, threat detection, and rapid incident response. It integrates easily with other systems, providing comprehensive visibility of traffic and threat activity. Trellix ESM enhances security and visibility while requiring fewer human resources. Users appreciate the support from the vendor and the tool's effectiveness compared to other market options.

"Trellix ESM utilizes fewer human resources and improves security and visibility."
"The tool's effectiveness depends on how you define your log sources. To build visibility of incoming and outgoing traffic, you need logs from perimeter defense, firewalls, web application firewalls, and endpoint protection. With good traffic visibility, incident response time is really quick."
"It can be easily deployed with the other solutions."

Room for Improvement

Trellix ESM requires a more user-friendly interface and faster technical support. Enhancements are needed in AI integration, network behavior analysis, and packet capturing. There's a need for improved performance, stability, and integration with SaaS and network applications. Users note issues with data collection accuracy and outdated data storage. Improvements in threat intelligence, case management, automation, multitenancy support, and cloud integration would benefit users. Resource consumption and response features also need optimization.

"It is more difficult to operate Trellix ESM than other solutions."
"The product is mature and needs little improvement, but we could enhance the customized dashboarding based on use cases."
"Customized reports and alerting functionality could be included in the dashboard."

ROI

Trellix ESM significantly improved operational efficiency and cost savings by streamlining security management. Quick threat identification and reduced incident response times contributed towards minimizing potential financial losses. Enhanced data visualization capabilities enabled more informed decision-making, ultimately fostering a stronger security posture.

Pricing

The pricing for Trellix ESM is considered reasonable and less expensive compared to IBM Security QRadar and similar platforms. The licensing cost is determined based on EPS, and it is considered reasonable as it includes dashboarding features that would otherwise require additional development costs. However, some reviewers mention that the price of Trellix ESM is higher than some other solutions, with additional features available at an extra fee.

"Regarding pricing, Trellix ESM is not that expensive. It's less than half the cost of IBM QRadar."
"The product is slightly expensive."
"It is an inexpensive product. We purchase its yearly license."

Popular Use Cases

Trellix ESM is primarily used for log management, correlation, alerting, and investigating applications, files, and network devices. It is implemented by service providers, hospitals, and financial institutions to enhance IT security operations, gather logs, detect malware, and monitor traffic. Integrators and MSSPs use it for log storage, audit purposes, and to serve as a Security Operations Center (SOC). Companies utilize Trellix ESM to manage endpoint security and detect cyber threats.

Service and Support

Customer service and support of Trellix ESM are mixed. Some users report prompt and helpful assistance, while others experience delays and lack of knowledge from support staff. Recent changes with McAfee have led to inconsistencies. Technical support is available during working hours, and some users engage with support outside regular hours. Issues with accessing support through chat and online portal are noted. Ticket handling varies, and some users face difficulties in resolving problems promptly.

Deployment

Users generally find Trellix ESM's initial setup straightforward and uncomplicated. Some mention a degree of complexity, particularly with integration and hybrid deployments. Implementation typically takes a week or less, although it can vary depending on specific requirements and configurations. Multiple engineers and technicians are often involved in the process, with roles spanning from deployments to ongoing maintenance. The setup can be influenced by hardware availability, licensing, and node quantity.

Scalability

Most find the scalability of Trellix ESM satisfactory, allowing for both horizontal and vertical expansion. Users appreciate its ability to adapt to network changes and various deployment sizes. However, some note issues with scalability specific to McAfee ESM. On-premises and cloud deployments cater to both large enterprises and medium-sized businesses. Ratings for scalability range between seven to ten out of ten, reflecting positive experiences with managing user and data expansion.

Stability

Many users find Trellix ESM very stable, rating it highly, with some giving it a perfect ten. They report no significant issues, especially within data centers. Others have had occasional shutdown problems caused by power interruptions. Some rate stability lower, noting that it has degraded over time. Despite mixed experiences, stability is mostly considered positive.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trellix ESM Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

75%

Financial Services Firm

Computer Software Company

Government

Comms Service Provider

Manufacturing Company

Energy/Utilities Company

Real Estate/Law Firm

University

Insurance Company

Healthcare Company

Consumer Goods Company

Construction Company

Retailer

Compare Trellix ESM with alternative products

Learn more about Trellix ESM

Trellix ESM was previously known as McAfee ESM, NitroSecurity, McAfee Enterprise Security Manager.

Trellix ESM customers

San Francisco Police Credit Union, Wªstenrot Gruppe, Volusion, California Department of Corrections & Rehabilitation, Government of New Brunswick, State of Colorado, Macquarie Telecom, Texas Tech University Health Sciences Center, Cologne Bonn Airport