Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Micro ScanMail [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
106
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
137
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Trend Micro ScanMail [EOL]
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
8
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Sabbir Rubayat - PeerSpot reviewer
Sr. Manager (Technology) at Contessabd
Has struggled with poor documentation and limited tuning options but supports basic protection needs
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor. Their support is very poor for this product, and the solution is average. To be honest, it's not that effective. Their Threat Scan Engine has features that don't work properly; they have features that really don't work properly. Their solution provides writing style verification, but this solution comes with false positives 60% of the time. There is no way from their portal to fix it; you can either turn it off or turn it on. The solution has many bugs. I will recommend Microsoft first for replacing Trend Micro ScanMail, then Barracuda, but the problem with Barracuda is that for impersonation solutions, it doesn't work well. There are many features, but you cannot tune the product. Being able to tune a product is really important; such as adjusting settings to be aggressive, minimal, or to exclude certain things. These are the most important considerations when purchasing a product. When impersonation is needed, but there are false positives, there should be an option to tune the product. Barracuda and Trend Micro Deep Security lack this feature, which is pathetic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."
"The solution is a new generation XDR that has a lot of artificial intelligence modules."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"The protection offered by this product is good, as is the endpoint reporting."
"The product has an intuitive dashboard."
"The tool is easy to use."
"The EDR and XDR features have been most valuable."
"The most valuable features in CrowdStrike Falcon are the full EDR with antivirus, hunting, reporting, and RTR remote control."
"The detection is very effective."
"The malware protection is the most valuable feature of CrowdStrike Falcon."
"The managed services are distinguished, responsive, dynamic, flexible, and assertive when taking action."
"The automatic alert feature is the most important feature of the solution."
"We have seen a reduction to the performance hit to our operating systems."
"This solution has made the lives of the IT staff much easier, compared to the previous one."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"Its integration with mail platforms is valuable."
"The analysis part is good."
"The pricing of Trend Micro ScanMail is average, which is fine."
"I find Trend Micro ScanMail to be a stable solution, and I would rate its stability as nine out of ten."
"What I like the most about Trend Micro ScanMail is its easiness."
"I like that Trend Micro ScanMail is very effective and quite strong."
"It does the job. Even when our clients have a very high rate of emails per second, there has been no problem."
 

Cons

"We had a problem with getting our older endpoints up to date, but their newest updates have been really good. I've been pleased with it in terms of what our needs are. It's doing what we want it to do."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."
"I have seen lagging with Cortex XDR by Palo Alto Networks. There was one time when we faced a threat actor trying to gain access to our system. When our team utilized the tool, we were all on the same dashboard and we faced a lag issue at that time of around five minutes, which was quite significant."
"In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations."
"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."
"There's room for improvement with Mac device installations, which can be challenging."
"The connection to the internet has not performed as expected."
"We sometimes get false positives."
"The management of log aggregation is in need of improvement."
"Unfortunately, native applications are not supported."
"The management reporting functionality needs to be improved."
"An improvement would be to extend support to legacy and unsupported servers."
"Too many false positives."
"Falcon could be improved with more function on the mobile end of things and better optimization with mobile devices."
"CrowdStrike Falcon needs to improve their host management system."
"The price could be better. I think it's pretty good compared to other solutions as far as the features are concerned. It basically covers most of the stuff which we require for email security. But it would be better if they made it a little cheaper and more cost-effective. That would make it easier for us to sell it."
"ScanMail was one of the best solutions a few years ago, but it is no longer the best solution because of its old-fashioned management console. Customers associate it with something that is old because there is no change in the management console. It has old icons, and it is not fresh enough. It is also not easy to use or play with. The report engine is also old-fashioned. Customers want something easier, quicker, and cleaner."
"Even Trend Micro ScanMail support staff are not familiar with this product."
"Its user interface is pretty old-fashioned, and sometimes, it's hard to find the features that you are looking for. The user interface definitely needs some improvement."
"I believe there is room for improvement in better signatures, better reporting features, and more insight into the spam emails database."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
"The sandboxing part can be improved."
"The weaknesses of Trend Micro ScanMail are that it doesn't fully protect ad-based web access and lacks proper security for Outlook, iOS, and web browser access."
 

Pricing and Cost Advice

"The pricing is a little bit on the expensive side."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"I am using the Community edition."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"It's about $55 per license on a yearly basis."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The pricing will depend upon your volume of usage."
"I'm not directly involved in sales, so I can't comment on the exact price, but I know the price decreases the higher the quantity we purchase."
"The solution isn't very costly; it's affordable."
"All I can say about the licensing cost is that it's negotiable."
"The more endpoints an organization adds the cheaper the cost."
"The pricing and licensing are reasonable. I don't think we are getting charged more than what it is worth. It is fair, but I do not like how it is a la carte. I realize they do that so other organizations can buy and get the agent, getting it cheaper than you could otherwise. However, if you want the main core package, which has all the main features with the exception of maybe the multi-cloud protections, that can get pricier for an organization. So, you have to pick and choose what you want. I do not care for a la carte pricing."
"We pay 40,000 dirhams per 100 users."
"This solution offers annual subscriptions. The pricing for this solution could be reduced."
"It's a yearly subscription, but the price could be better."
"Its price is okay. It is not too high."
"It is an expensive solution. I rate the pricing a seven out of ten."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
883,448 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
9%
Government
7%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Financial Services Firm
11%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise33
Large Enterprise62
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for Trend Micro ScanMail?
The pricing of Trend Micro ScanMail is average, which is fine. Pricing doesn't have anything to do with this; their p...
What needs improvement with Trend Micro ScanMail?
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor....
What advice do you have for others considering Trend Micro ScanMail?
I work as a security consultant in Bangladesh Election Commission, a government organization. I have limited experien...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
ScanMail
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
L&T Chiyoda, Assaf Harofeh Medical Center, Atlanta Gastroenterology Associates, Atma Jaya Catholic University of Indonesia, Bishop Luffa School, Brooks Rehabilitation, CHR de la Citadelle, CHRU de Nancy
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Micro ScanMail [EOL] and other solutions. Updated: January 2023.
883,448 professionals have used our research since 2012.