Trend Micro Deep Discovery Reviews

As a security product, managing threats is crucial for my clients. 

According to feedback from my client base, Trend Micro has good threat detection capabilities and offers flexibility for hosting options. It also includes features like an advanced scan engine – those are definitely strong benefits. Additionally, its virtual analysis feature is quite useful.

Sometimes, our customers face challenges like console management and report generation. Also, some of their end users may not be technically proficient, so they occasionally face problems due to a lack of knowledge. 

Beyond these issues, we've had positive experiences with Apex One, Deep Discovery, and even Vision One. 

We usually create new entries and copy traffic to the Discovery appliance for analysis in order to detect low-level attacks, viruses, and hacking attempts. We assess competitive products by deploying the solution to analyze the effectiveness and capabilities.

With Trend Micro Deep Discovery, our enterprise clients can identify forgotten or unmanaged network segments, thereby mitigating unexpected network actions such as outdated antivirus software operations. When under attack, such as with ransomware, it allows us to identify the attack vector and disable it. It also assists in security audits required to prove certain network security measures.

Our primary use case for Deep Discovery revolves around its ability to manage Windows updates and maintain security without necessitating frequent reboots of our servers. One of the standout features we leverage is virtual patching, which significantly minimizes downtime by eliminating the need for immediate updates and reboots.

The solution has substantially improved our organization by providing robust security measures accepted by various audit teams, including those from the IT and financial sectors. Previously, we faced observations related to outdated Windows servers during audits. However, these concerns have been alleviated with Deep Discovery's virtual patching, as the servers are deemed secure without needing constant updates.

I use the solution in my company, but there is nothing to work on the tool. In our company, we just installed Trend Micro Deep Discovery on our servers, and that is it, after which we forgot about it.

The slow nature of the product and the tool's detection area is of concern, as there are a lot of configurations that should be configured by default when you install it at your endpoint. Ultimately, my company had to seek help from an official from Trend Micro to resolve the issue, but unfortunately, the problem couldn't be resolved.

In the future, the product should include some DLP features. There is a device block feature in it, but it is only for a single device, like a USB. With Trend Micro Deep Discovery in place, there shouldn't be any need to buy another DLP solution and install another agent on the endpoint, as it should be consolidated in one agent.

The product's scalability feature needs to be improved, as it is an area in the product with certain shortcomings.

The solution can scan the virtual environment and give reports.

The solution has extension-based features that help it to analyze the environment. The environment can have different platforms like Windows, Linux, and Mac. The tool will give a report which can confirm the analysis of the issues. You can also get clear information on threats or suspicious files.

The solution is used for server protection. 

It is basically a combination of antivirus, intrusion prevention, host-based firewalls, and a lot of other features. There is no downtime or server vulnerability with this solution.

In addition, we can patch the operating system OEM. We can also reboot the server and evaluate scheduled downtime for the same, which is very valuable.

It's a good fit for organizations that follow strict data regulations and need to keep sensitive data on-premises. In Sri Lanka, for example, financial data cannot be used in the cloud. So, Deep Discovery is a good solution because it's an on-premises device. We can do the sandboxing on-site. This is a strong selling point.

We are distributors. A couple of our customers use this product. There are three customer references in Sri Lanka that use Deep Discovery.

There are some zero-day attacks that we cannot block with regular firewall rules. We need to execute the file to see whether it is truly an attack or not. Sandboxing helps to identify this by safely executing and analyzing suspicious files in an isolated environment.

Moreover, it has some features that stand out compared to other products. For example, we can get live snapshots and instant reports, and we can submit files manually for free.

It is effective at protecting against various threats.