The most valuable features of Trellix ESM include robust security, user-friendly interface, effective correlation rules and reporting, ease of use and deployment, log monitoring, threat detection, and rapid incident response. It integrates easily with other systems, providing comprehensive visibility of traffic and threat activity. Trellix ESM enhances security and visibility while requiring fewer human resources. Users appreciate the support from the vendor and the tool's effectiveness compared to other market options.
- "Trellix ESM utilizes fewer human resources and improves security and visibility."
- "The tool's effectiveness depends on how you define your log sources. To build visibility of incoming and outgoing traffic, you need logs from perimeter defense, firewalls, web application firewalls, and endpoint protection. With good traffic visibility, incident response time is really quick."
- "It can be easily deployed with the other solutions."
Trellix ESM requires a more user-friendly interface and faster technical support. Enhancements are needed in AI integration, network behavior analysis, and packet capturing. There's a need for improved performance, stability, and integration with SaaS and network applications. Users note issues with data collection accuracy and outdated data storage. Improvements in threat intelligence, case management, automation, multitenancy support, and cloud integration would benefit users. Resource consumption and response features also need optimization.
- "It is more difficult to operate Trellix ESM than other solutions."
- "The product is mature and needs little improvement, but we could enhance the customized dashboarding based on use cases."
- "Customized reports and alerting functionality could be included in the dashboard."
