Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Micro ScanMail [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
137
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Trend Micro ScanMail [EOL]
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Sabbir Rubayat - PeerSpot reviewer
Sr. Manager (Technology) at Contessabd
Has struggled with poor documentation and limited tuning options but supports basic protection needs
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor. Their support is very poor for this product, and the solution is average. To be honest, it's not that effective. Their Threat Scan Engine has features that don't work properly; they have features that really don't work properly. Their solution provides writing style verification, but this solution comes with false positives 60% of the time. There is no way from their portal to fix it; you can either turn it off or turn it on. The solution has many bugs. I will recommend Microsoft first for replacing Trend Micro ScanMail, then Barracuda, but the problem with Barracuda is that for impersonation solutions, it doesn't work well. There are many features, but you cannot tune the product. Being able to tune a product is really important; such as adjusting settings to be aggressive, minimal, or to exclude certain things. These are the most important considerations when purchasing a product. When impersonation is needed, but there are false positives, there should be an option to tune the product. Barracuda and Trend Micro Deep Security lack this feature, which is pathetic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Stability is a primary factor, and then there's the ease of distribution and policy management."
"Has great threat detection capabilities."
"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
"We can visualize and control the activities in the environment from anywhere."
"Monitoring is most valuable."
"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"Cortex covers everything I need. It's a perfect solution. Cortex provides a different level of visibility because it's an extended EDR, allowing you to grab logs from the network and firewalls. Palo Alto invented the concept of the extended EDR or XDR."
"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."
"CrowdStrike Falcon serves as a next-gen AV, which basically does AI-based behavioral analysis to detect and act on malware or ransomware."
"Probably the most valuable thing to me is the real-time response piece. The fact that I can connect to an endpoint as long as it is on the Internet, no matter where it is globally. I can remove files from the endpoint, drop files on the endpoint, stop processes, reboot it, run custom scripts, and deploy software. Pretty much no other tool can do all that."
"The ability to remote into other devices for investigation and the way it presents a graphical representation of the detection, like the parent-child process, are valuable features."
"The most valuable features of CrowdStrike Falcon include Falcon Fusion workflows and endpoint detection capabilities."
"The most valuable features of Crowdstrike Falcon XDR are Spotlight and Discovery, they are helpful. Additionally, the console is user-friendly, with fewer false positives than other solutions."
"Since we deployed CrowdStrike, the network has become much calmer, and we now understand the sources of infections, which helps us prevent them from spreading."
"I value the overall behavior analysis of CrowdStrike. The engine of this product is what drew us to this solution."
"CrowdStrike Falcon is effortless to use, and it's a cloud-specific platform. You only need to deploy the light agents on the licensed endpoints, and you're ready to work. Your dashboards will tell you the number of the endpoints being protected and the incidents. There are also incident dashboards with alerts that will tell you about the details."
"I find Trend Micro ScanMail to be a stable solution, and I would rate its stability as nine out of ten."
"Its integration with mail platforms is valuable."
"I like that Trend Micro ScanMail is very effective and quite strong."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"What I like the most about Trend Micro ScanMail is its easiness."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"It does the job. Even when our clients have a very high rate of emails per second, there has been no problem."
"The analysis part is good."
 

Cons

"Managing the product should be easier."
"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"It'll help if customization was easier."
"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."
"The playbooks could be improved to include more functionalities or actions."
"Cortex XDR could improve its sales support team, including better commission structures and referral programs."
"For further improvements, I can only think of one example because this is very important for us; they could reduce the price. Then it would deserve a rating of seven."
"I would like to see a little bit more in the offline scanning ability. This just comes from my background in what I have done in other positions. They only scan on demand, so I always have this fear that we sometimes maybe email out a dormant virus and can be held liable for that. That is something where I would like to see a little bit more robustness to the tool."
"Deployment in cloud environments is challenging. Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options."
"We'd like to see more integration capabilities."
"CrowdStrike Falcon sometimes wrongly flags things as malicious. Let's say a user is active on Chrome only. Sometimes, our cross-segmenting will fetch from the backend data and show that it is malicious because of memory or CPU utilization."
"The malware analysis could be improved, as that's what we use the solution for the most and that change would make it a better EDR tool."
"The performance could be better."
"CrowdStrike Falcon could improve by adding manual scanning or serverless scanning. It is not available at this time."
"Even Trend Micro ScanMail support staff are not familiar with this product."
"Its user interface is pretty old-fashioned, and sometimes, it's hard to find the features that you are looking for. The user interface definitely needs some improvement."
"I believe there is room for improvement in better signatures, better reporting features, and more insight into the spam emails database."
"The price could be better. I think it's pretty good compared to other solutions as far as the features are concerned. It basically covers most of the stuff which we require for email security. But it would be better if they made it a little cheaper and more cost-effective. That would make it easier for us to sell it."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
"The weaknesses of Trend Micro ScanMail are that it doesn't fully protect ad-based web access and lacks proper security for Outlook, iOS, and web browser access."
"The sandboxing part can be improved."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
 

Pricing and Cost Advice

"Very costly product."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"The price of the solution is high for the license and in general."
"It's about $55 per license on a yearly basis."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"The tool's price is moderate."
"The pricing on CrowdStrike is per license. It was about $42 per seat yearly."
"CrowdStrike Falcon's price is good."
"Annual licensing."
"The cost of CrowdStrike Falcon in Latin America seems high relative to the economic conditions in the region."
"There are three to four licensing models available to choose from for CrowdStrike Falcon. The price of CrowdStrike Falcon depends on the distributor and the reseller partner. The price we received was good."
"The licensing model is straightforward. We choose the features we want and we then can download the package we want."
"Different components are additional price points. We got the components that were right for us, but other organizations may require more (or less) components to suit their needs."
"We pay between $30-50 per user for a yearly license, which is more expensive than SentinelOne or Bitdefender. However, CrowdStrike gives better value for money."
"It is an expensive solution. I rate the pricing a seven out of ten."
"Its price is okay. It is not too high."
"It's a yearly subscription, but the price could be better."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
883,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
9%
Comms Service Provider
7%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
10%
Government
6%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise33
Large Enterprise62
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for Trend Micro ScanMail?
The pricing of Trend Micro ScanMail is average, which is fine. Pricing doesn't have anything to do with this; their p...
What needs improvement with Trend Micro ScanMail?
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor....
What advice do you have for others considering Trend Micro ScanMail?
I work as a security consultant in Bangladesh Election Commission, a government organization. I have limited experien...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
ScanMail
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
L&T Chiyoda, Assaf Harofeh Medical Center, Atlanta Gastroenterology Associates, Atma Jaya Catholic University of Indonesia, Bishop Luffa School, Brooks Rehabilitation, CHR de la Citadelle, CHRU de Nancy
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Micro ScanMail [EOL] and other solutions. Updated: January 2023.
883,760 professionals have used our research since 2012.