We performed a comparison between McAfee ePolicy Orchestrator and Trend Micro Integrated Data Loss Prevention based on real PeerSpot user reviews.
Find out in this report how the two Security Orchestration Automation and Response (SOAR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It has basic out-of-the-box integrations with multiple log sources."
"The machine learning and artificial intelligence on offer are great."
"What is most useful, is that it has a good connection to the Microsoft ecosystem, and I think that's the key part."
"It is quite efficient. It helps our clients in identifying their security issues and respond quickly. Our clients want to automate incident response and all those things."
"The automation feature is valuable."
"The UI of Sentinel is very good and easy to use, even for beginners."
"There are some very powerful features to Sentinel, such as the integration of various connectors. We have a lot of departments that use both IaaS and SaaS services, including M365 as well as Azure services. The ability to leverage connectors into these environments allows for large-scale data injection."
"Sentinel enables us to ingest data from our entire ecosystem. In addition to integrating our Cisco ASA Firewall logs, we get our Palo Alto proxy logs and some on-premises data coming from our hardware devices... That is very important and is one way Sentinel is playing a wider role in our environment."
"The DLP feature in McAfee ePolicy Orchestrator is good."
"You have to have some experience, however, it's pretty simple to understand."
"The general endpoint protection is valuable, and it is easy to manage."
"The most valuable features of this solution are the antivirus and the DLP."
"The policy auditing, policy management, and device auditing are all valuable features. Our customers appreciated the ability to get alerts to system-wide events from a single view."
"Technical support is very helpful."
"The most valuable feature of the solution is the central management console, which is used for DLP, endpoint security, drive encryption, and application control."
"The most valuable feature of the McAfee ePolicy Orchestrator is agent communication."
"The interface and dashboard are okay."
"We are able to check the log and keep records."
"We use Trend Micro mainly to monitor user activities, such as tracking the websites they visit and purchase items. Additionally, we focus on identifying and addressing antivirus threats. We used to explore a feature related to proxy but decided against it as an enterprise solution wasn't readily available for us. Our primary use of Trend Micro revolves around end-user security. Integration with Active Directory has proven beneficial, allowing us to easily push updates or changes directly from the console."
"The solution's initial setup process was straightforward."
"None of the Trend Micro Integrated Data Loss Prevention features worked well, but the solution had a straightforward setup."
"It is a scalable product."
"The basic setup, like configuring servers or deploying the SaaS platform and agent implementation, is straightforward."
"We find the initial setup to be very easy."
"Sentinel still has some anomalies. For example, sometimes when we write a query for log analysis with KQL, it doesn't give us the data in a proper way... Also, the fields or columns could be improved. Sometimes, it is not giving the desired results and there is a blank field."
"At the network level, there is a limitation in integrating some of the switches or routers with Microsoft Sentinel. Currently, SPAN traffic monitoring is not available in Microsoft Sentinel. I have heard that it is available in Defender for Identity, which is a different product. It would be good if LAN traffic monitoring or SPAN traffic monitoring is available in Microsoft Sentinel. It would add a lot of value. It is available in some of the competitor products in the market."
"Sometimes, we are observing large ingestion delays. We expect logs within 5 minutes, but it takes about 10 to 15 minutes."
"They should integrate it with many other software-as-a-service providers and make connectors available so that you don't have to do any sort of log normalization."
"I believe one of the challenges I encountered was the absence of live training sessions, even with the option to pay for them."
"Only one thing is missing: NDR is not available out-of-the-box. The competitive cloud-native SIEM providers have the NDR component. Currently, Sentinel needs NDR to be powered from either Corelight or some other NDR provider."
"Sentinel should be improved with more connectors. At the moment, it only covers a few vendors. If I remember correctly, only 100 products are supported natively in Sentinel, although you can connect them with syslog. But Microsoft should increase the number of native connectors to get logs into Sentinel."
"The on-prem log sources still require a lot of development."
"It's a little bit complex to configure it, but when you start using it, it is much easier. There are many policies that you need to create, and in three or four places"
"McAfee ePolicy Orchestrator needs to upgrade the technology; it's like their area function is not quite as good as compared to other market vendors."
"The solution sometimes has some false positives on IP addresses, from the web control aspect of the product. This needs to be improved."
"One thing that I don't like is that McAfee products change very often and upgrade very often."
"Sometimes agents hang. We have to reinstall the agents."
"There are some issues we are having with updating our Windows server. So we need to contact support or access our support portal."
"McAfee ePolicy Orchestrator should improve its integration with other tools."
"Lacks a single plug-in for multiple uses."
"Having more features apart from what the product was designed for is what I'd like to see in its next release."
"Trend Micro Integrated Data Loss Prevention is buggy, which is one area for improvement. I also found Trend Micro Integrated Data Loss Prevention support horrible, so that's another area for improvement."
"I would like to provide improved network direction in order to regulate all of the user agents. We only use Trend Micro Data Loss Prevention to manage various threats and malicious user agents currently."
"They could improve the product's data loss policies."
"Needs a remote login option."
"Within the solution, many of the functions do not perform as intended...It is not a stable solution...It is not a scalable solution."
"In Trend Micro Integrated Data Loss Prevention, there is a need to improve the plug-in manager, as it is an area with shortcomings."
"Being able to specify an agent list, or client list, to allow support from outside of the organization, would be of benefit to this solution."
More Trend Micro Integrated Data Loss Prevention Pricing and Cost Advice →
McAfee ePolicy Orchestrator is ranked 9th in Security Orchestration Automation and Response (SOAR) with 39 reviews while Trend Micro Integrated Data Loss Prevention is ranked 13th in Data Loss Prevention (DLP) with 15 reviews. McAfee ePolicy Orchestrator is rated 8.0, while Trend Micro Integrated Data Loss Prevention is rated 6.2. The top reviewer of McAfee ePolicy Orchestrator writes "Useful agent communication, reliable, but lacking support for microservices". On the other hand, the top reviewer of Trend Micro Integrated Data Loss Prevention writes "Good for data blocking and security, content categorization, and generating accessibility reports ". McAfee ePolicy Orchestrator is most compared with Splunk SOAR, Symantec Data Loss Prevention, Zscaler DLP, Elastic Security and Forcepoint Data Loss Prevention, whereas Trend Micro Integrated Data Loss Prevention is most compared with Forcepoint Data Loss Prevention, McAfee Total Protection for Data Loss Prevention, Symantec Data Loss Prevention and Trellix DLP. See our McAfee ePolicy Orchestrator vs. Trend Micro Integrated Data Loss Prevention report.
We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
