Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Micro ScanMail [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
107
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
138
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Trend Micro ScanMail [EOL]
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Sabbir Rubayat - PeerSpot reviewer
Sr. Manager (Technology) at Contessabd
Has struggled with poor documentation and limited tuning options but supports basic protection needs
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor. Their support is very poor for this product, and the solution is average. To be honest, it's not that effective. Their Threat Scan Engine has features that don't work properly; they have features that really don't work properly. Their solution provides writing style verification, but this solution comes with false positives 60% of the time. There is no way from their portal to fix it; you can either turn it off or turn it on. The solution has many bugs. I will recommend Microsoft first for replacing Trend Micro ScanMail, then Barracuda, but the problem with Barracuda is that for impersonation solutions, it doesn't work well. There are many features, but you cannot tune the product. Being able to tune a product is really important; such as adjusting settings to be aggressive, minimal, or to exclude certain things. These are the most important considerations when purchasing a product. When impersonation is needed, but there are false positives, there should be an option to tune the product. Barracuda and Trend Micro Deep Security lack this feature, which is pathetic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cortex XDR by Palo Alto Networks has helped lighten the load of our security analysts because it was the major tool that we were using and the one we utilized most."
"Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised."
"It is an easy-to-use tool."
"The solution's stability is generally good."
"Palo Alto is constantly adding new features."
"Monitoring is most valuable."
"Threat identification and detection are the most valuable features of this solution."
"The most valuable feature is that you can select remote access of any machine for sandboxing."
"CrowdStrike Falcon's most valuable features are the lightweight agent which has absolutely zero performance issues. There is no performance deterioration on the laptop on the network. It is a signature-less antivirus and anti-malware solution, it doesn't depend on signatures which better protects the systems."
"From what we have seen, it is very scalable. We have recently acquired a company where someone had a ransomware attack when we joined networks. Within the course of just a few days, we were able to easily get CrowdStrike rolled out to about 300 machines. That also included the removal of that company's legacy anti-malware tool."
"I like the Overwatch feature the most."
"CrowdStrike is deployed on every workstation, so policy changes can be enforced on all of them. It lowers the manual work on each of the workstations. It has helped us manage device usage in our environment."
"This solution consistently releases improvements. They have communicated their next two years of development which is powerful and covers all of our needs."
"The EDR is amazing and ease of integration with Splunk is a big plus. Integration with BigQuery is also a plus for me and workflow creation is easy. Overall, CrowdStrike Falcon is a great product."
"The biggest advantage of this solution for my customers is that it is a single solution that fulfills most of their security concerns while being easy to manage."
"I like the feature called RTC, the remote time connector."
"The pricing of Trend Micro ScanMail is average, which is fine."
"Its integration with mail platforms is valuable."
"The analysis part is good."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"It does the job. Even when our clients have a very high rate of emails per second, there has been no problem."
"I find Trend Micro ScanMail to be a stable solution, and I would rate its stability as nine out of ten."
"What I like the most about Trend Micro ScanMail is its easiness."
"I like that Trend Micro ScanMail is very effective and quite strong."
 

Cons

"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."
"There's room for improvement with Mac device installations, which can be challenging."
"The GUI could be improved."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."
"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."
"Threat prevention should be their first priority, and false positive reductions are needed."
"Improvement is always possible. It's challenging to gauge how much future mitigation is provided, especially since we've only been using the product for about one and a half years. Every product faces this challenge because nothing is ever completely foolproof. So, besides relying on technology, we also focus on increasing our staff's awareness of security issues. Feedback from my colleagues suggests that the reporting and dashboarding of incidents could be improved."
"I would love to see more investment in Insight because CrowdStrike have an opportunity to potentially displace some of the vulnerability management vendors with the visibility they can see over time. I want to see them continue to evolve, e.g., what other things can they disrupt which are operational things we have to continue to do as an organization."
"There are some areas where some customers would prefer a different service."
"The solution should have included remote wipe capability out of the box."
"An improvement would be to extend support to legacy and unsupported servers."
"As for stability, I would rate it around eight because last year they faced some downtime with around eight thousand computers, but it will improve."
"The pricing is a bit too high."
"The sandboxing part can be improved."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
"ScanMail was one of the best solutions a few years ago, but it is no longer the best solution because of its old-fashioned management console. Customers associate it with something that is old because there is no change in the management console. It has old icons, and it is not fresh enough. It is also not easy to use or play with. The report engine is also old-fashioned. Customers want something easier, quicker, and cleaner."
"Even Trend Micro ScanMail support staff are not familiar with this product."
"I believe there is room for improvement in better signatures, better reporting features, and more insight into the spam emails database."
"The weaknesses of Trend Micro ScanMail are that it doesn't fully protect ad-based web access and lacks proper security for Outlook, iOS, and web browser access."
"The price could be better. I think it's pretty good compared to other solutions as far as the features are concerned. It basically covers most of the stuff which we require for email security. But it would be better if they made it a little cheaper and more cost-effective. That would make it easier for us to sell it."
"Its user interface is pretty old-fashioned, and sometimes, it's hard to find the features that you are looking for. The user interface definitely needs some improvement."
 

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"Cortex XDR is a costly solution."
"The price is on the higher side, but it's okay."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"This is an expensive solution."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
"CrowdStrike Falcon is more expensive than other EDR solutions with similar features."
"The solution isn't very costly; it's affordable."
"We have a yearly subscription and find the price to be good. I'd give it a rating of four out of five for price, we got a good discount."
"There are three to four licensing models available to choose from for CrowdStrike Falcon. The price of CrowdStrike Falcon depends on the distributor and the reseller partner. The price we received was good."
"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"The pricing will depend upon your volume of usage."
"The cost of CrowdStrike Falcon in Latin America seems high relative to the economic conditions in the region."
"This solution offers annual subscriptions. The pricing for this solution could be reduced."
"It is an expensive solution. I rate the pricing a seven out of ten."
"It's a yearly subscription, but the price could be better."
"Its price is okay. It is not too high."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
884,192 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
9%
Comms Service Provider
7%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
10%
Government
6%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise33
Large Enterprise62
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for Trend Micro ScanMail?
The pricing of Trend Micro ScanMail is average, which is fine. Pricing doesn't have anything to do with this; their p...
What needs improvement with Trend Micro ScanMail?
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor....
What advice do you have for others considering Trend Micro ScanMail?
I work as a security consultant in Bangladesh Election Commission, a government organization. I have limited experien...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
ScanMail
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
L&T Chiyoda, Assaf Harofeh Medical Center, Atlanta Gastroenterology Associates, Atma Jaya Catholic University of Indonesia, Bishop Luffa School, Brooks Rehabilitation, CHR de la Citadelle, CHRU de Nancy
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Micro ScanMail [EOL] and other solutions. Updated: January 2023.
884,192 professionals have used our research since 2012.