

Palo Alto Networks WildFire and Trellix Network Detection and Response compete in the cybersecurity market. WildFire seems to have an advantage due to its strong integration with next-gen firewalls and cloud-based protection features.
Features: WildFire integrates seamlessly with next-gen firewalls for superior threat prevention, zero-day malware protection, policy configuration, and machine learning capabilities. Its automation and intuitive design provide out-of-the-box functionality. Trellix focuses on network visibility with features like east-west traffic analysis and robust forensic capabilities. It integrates effectively with security tools to enhance threat detection and response.
Room for Improvement: WildFire could become more user-friendly with easier deployment, remote management enhancements, and improved real-time updates. It also requires better support and competitive pricing. Trellix should work on reducing alert noise, enhancing cloud-native support, and offering more comprehensive documentation. Improvement in AI capabilities and third-party integration is also recommended.
Ease of Deployment and Customer Service: Both WildFire and Trellix offer deployment options such as on-premises and hybrid cloud. WildFire is noted for generally good technical support but could enhance response times and premium service offerings. Trellix support is highlighted for needing quicker response times and better AI integration to elevate customer satisfaction.
Pricing and ROI: WildFire is perceived as expensive, impacting smaller organizations. However, its strong security offerings provide a significant return on investment through reduced operational costs and improved security posture. Trellix, while also considered costly, is deemed reasonable for its comprehensive threat detection capabilities. Both offer value through enhanced network security despite high pricing.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
The time was reduced because of the automated detections.
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
It has saved us money and time, and the overall investment has been profitable.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
We have had some open tickets for months, maybe half a year, and there is no real answer.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
They help and support us promptly, allowing us to resolve issues immediately.
Wildfire is highly scalable.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
The on-premises version is expensive to scale as it might need an additional device to be installed in the setup.
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Trellix Network Detection and Response is scalable.
It performs filtering, malware blocking, and scanning.
The solution is scalable and stable.
Trellix Network Detection and Response is somewhat stable but there is a bit of downtime sometimes during the off-hours.
It should be easier to establish the Palo Alto Networks WildFire cluster between the devices.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
It is a very good product.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
I would rate it an eight out of ten in terms of affordability.
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
I wanted something that was not too price-heavy like SentinelOne but also not much cheaper like Kaspersky.
The price for Trellix Network Detection and Response is reasonable.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
The integration and working with third-party solutions was very seamless and smooth.
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
| Product | Mindshare (%) |
|---|---|
| Palo Alto Networks WildFire | 7.3% |
| Trellix Network Detection and Response | 4.1% |
| Other | 88.6% |

| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 15 |
| Large Enterprise | 29 |
| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 9 |
| Large Enterprise | 22 |
Palo Alto Networks WildFire provides robust threat prevention with emphasis on automated malware detection and real-time security updates. Seamless integration and intuitive deployment enhance its ability to protect environments effectively, addressing advanced threat scenarios.
Palo Alto Networks WildFire is recognized for its threat detection capabilities, offering automated analysis of emails and effective malware response. The integration with Palo Alto's ecosystem ensures users benefit from seamless operations while safeguarding on-premise and cloud infrastructures. It supports VPN, URL filtering, and user identification with a focus on reducing manual intervention. Users note its complexity and high pricing but appreciate the efficient deployment once configured. Integration with third-party systems requires attention, but it remains vital for those requiring advanced network security measures.
What are the key features of Palo Alto Networks WildFire?Industries like banking leverage Palo Alto Networks WildFire for securing infrastructure against zero-day threats and cyber-attacks. It is widely used for scanning files and emails, ensuring malicious activity is prevented. Integrated with firewalls, WildFire strengthens cybersecurity frameworks, protecting organizations from evolving security challenges.
Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.
Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.
What key features does Trellix offer?Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.