Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Micro ScanMail [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
137
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Trend Micro ScanMail [EOL]
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Sabbir Rubayat - PeerSpot reviewer
Sr. Manager (Technology) at Contessabd
Has struggled with poor documentation and limited tuning options but supports basic protection needs
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor. Their support is very poor for this product, and the solution is average. To be honest, it's not that effective. Their Threat Scan Engine has features that don't work properly; they have features that really don't work properly. Their solution provides writing style verification, but this solution comes with false positives 60% of the time. There is no way from their portal to fix it; you can either turn it off or turn it on. The solution has many bugs. I will recommend Microsoft first for replacing Trend Micro ScanMail, then Barracuda, but the problem with Barracuda is that for impersonation solutions, it doesn't work well. There are many features, but you cannot tune the product. Being able to tune a product is really important; such as adjusting settings to be aggressive, minimal, or to exclude certain things. These are the most important considerations when purchasing a product. When impersonation is needed, but there are false positives, there should be an option to tune the product. Barracuda and Trend Micro Deep Security lack this feature, which is pathetic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR by Palo Alto Networks should be a stable solution."
"This software helps us understand any issues that may arise when someone is not at work."
"Its interface and pricing are most valuable. It is better than other vendors in terms of security."
"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."
"Palo Alto is the core of the security infrastructure in the environment."
"It collects and caches and the knowledge of machine learning from different customers to take to the cloud. It makes it better to use for everybody. It allows for quick learning and updates and can, therefore, offer zero-day malware security. This sharing of metadata helps make the solution very safe."
"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"Overall, what I found most valuable in CrowdStrike Falcon is its good mechanism. It also has a good reporting feature. CrowdStrike Falcon is an invaluable tool because, through it, you can take quick action, for example, when an OS is missing specific patches."
"The endpoint and server management are the most valuable features of CrowdStrike Falcon."
"The managed services are distinguished, responsive, dynamic, flexible, and assertive when taking action."
"The stability is very good."
"The features I like the most are the response time and the dashboard are both excellent."
"CrowdStrike enables the infrastructure managers to visualize all the events and get information about the network."
"The solution's most valuable feature is that it is robust and can detect almost every malicious activity that occurs within the endpoint."
"CrowdStrike Falcon offers a comprehensive dashboard that is highly effective in protecting against and blocking external infiltration attempts."
"What I like the most about Trend Micro ScanMail is its easiness."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"Its integration with mail platforms is valuable."
"I like that Trend Micro ScanMail is very effective and quite strong."
"It does the job. Even when our clients have a very high rate of emails per second, there has been no problem."
"I find Trend Micro ScanMail to be a stable solution, and I would rate its stability as nine out of ten."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"The pricing of Trend Micro ScanMail is average, which is fine."
 

Cons

"The product's pricing could be better."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"Cortex XDR could be improved with more GUI features."
"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."
"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."
"The skillsets needed to run CrowdStrike Falcon are extensive if you want to get the most value out of the tool."
"Technical support could be better than what is currently offered."
"For CrowdStrike to work, all the machines need to have an internet connection. This makes it challenging to assist customers without an internet connection. We would like to have a mechanism or relay to make this possible."
"I would like them to improve the correlation of data in the search algorithms. When we run an investigation, malware, phishing, etc., I want to look at multiple endpoints at once to correlate that data to see the likenesses, e.g., how are they not alike or what systems and processes are running across those systems? I don't want to have to run the same search in their Spotlight module five, 10, 15, or 100 times to get 100 different results, copy that data out, and then correlate it on my own. In a very simple way, I want to be able to load up a comma-delimited list giving me the spotlight data on these X amount of hosts, letting me search for it quickly. We have had to go back to CrowdStrike, and say, "Our search are taking far too long for even one host." They did bump up the cores and that did improve performance, but it is still kind of slow to get that Spotlight data. That is probably our biggest pain point. I think that needs some help. I understand this kind of information access is probably not the easiest thing to do. It is probably a big ask depending on how their back-end is setup."
"In a future release, I would like to see more integrations for data breaches and security features."
"The technical support could improve because I am in India and the support I receive is from the UK or Australia. It is difficult to manage the time difference. The service could be faster. However, when we do have the support they are knowledgeable."
"The tool is more expensive than other products in the market."
"I want more ability to customize how you summarize the data. The default views are fine, but it would be interesting to be able to customize them based on the kind of data you want to see immediately. This can help the administrator gain an immediate overview and reduce the investigation time."
"Its user interface is pretty old-fashioned, and sometimes, it's hard to find the features that you are looking for. The user interface definitely needs some improvement."
"Even Trend Micro ScanMail support staff are not familiar with this product."
"I believe there is room for improvement in better signatures, better reporting features, and more insight into the spam emails database."
"ScanMail was one of the best solutions a few years ago, but it is no longer the best solution because of its old-fashioned management console. Customers associate it with something that is old because there is no change in the management console. It has old icons, and it is not fresh enough. It is also not easy to use or play with. The report engine is also old-fashioned. Customers want something easier, quicker, and cleaner."
"The price could be better. I think it's pretty good compared to other solutions as far as the features are concerned. It basically covers most of the stuff which we require for email security. But it would be better if they made it a little cheaper and more cost-effective. That would make it easier for us to sell it."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
"The weaknesses of Trend Micro ScanMail are that it doesn't fully protect ad-based web access and lacks proper security for Outlook, iOS, and web browser access."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
 

Pricing and Cost Advice

"This is an expensive solution."
"I don't recall what the cost was, but it wasn't really that expensive."
"I don't like that they have different types of licenses."
"I am using the Community edition."
"The price of the product is not very economical."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"Cortex XDR’s pricing is very reasonable."
"When comparing to Microsoft, CrowdStrike Falcon is more expensive."
"The price is fixed with no room for negotiation."
"CrowdStrike Falcon is one of the more expensive endpoint solutions on the market."
"Our company pays approximately US$ 65,000 annually for 900 machines."
"The other administrator and I can log in to check the exact details of what happened, what was running, and what caused the detection. We know exactly what was happening on the end users PC and we can tell if it's something that we actually need or something that's malicious."
"All I can say about the licensing cost is that it's negotiable."
"CrowdStrike Falcon is more expensive than other EDR solutions with similar features."
"We bought a very small number of licenses, then ran it for a year. We bought a 100 licenses for a year, so we didn't actually do a proof of concept. We just bought them. Then, the next year, we bought 10,000 licenses."
"Its price is okay. It is not too high."
"It is an expensive solution. I rate the pricing a seven out of ten."
"It's a yearly subscription, but the price could be better."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
883,619 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
9%
Government
7%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise33
Large Enterprise62
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for Trend Micro ScanMail?
The pricing of Trend Micro ScanMail is average, which is fine. Pricing doesn't have anything to do with this; their p...
What needs improvement with Trend Micro ScanMail?
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor....
What advice do you have for others considering Trend Micro ScanMail?
I work as a security consultant in Bangladesh Election Commission, a government organization. I have limited experien...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
ScanMail
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
L&T Chiyoda, Assaf Harofeh Medical Center, Atlanta Gastroenterology Associates, Atma Jaya Catholic University of Indonesia, Bishop Luffa School, Brooks Rehabilitation, CHR de la Citadelle, CHRU de Nancy
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Micro ScanMail [EOL] and other solutions. Updated: January 2023.
883,619 professionals have used our research since 2012.