Executive SummaryUpdated on Sep 9, 2024
NetWitness NDR and Trellix Endpoint Detection and Response (EDR) are both strong contenders in network threat detection. Trellix EDR seems to have the upper hand due to its advanced features and better customer service.
Features: User reviews highlight NetWitness NDR for its comprehensive network visibility, incident response capabilities, and overall network threat detection. Trellix EDR is recognized for its robust endpoints monitoring, automatic threat remediation, and advanced threat detection. While both products offer high-quality threat detection, Trellix EDR's automated response features make it a favorite among users.
Room for Improvement: NetWitness NDR users suggest enhancements in scalability, integration flexibility, and overall performance. Trellix EDR users see room for improvement in reporting capabilities, response times, and user interface. Both products have areas to develop, but NetWitness NDR seems to need more work in expanding its integration potential.
Ease of Deployment and Customer Service: NetWitness NDR is commended for its flexible deployment options, but users report inconsistency in customer support. Trellix EDR users find deployment straightforward and praise their support team's responsiveness. Trellix EDR appears to have an edge with smoother deployment and better customer service.
Pricing and ROI: NetWitness NDR users perceive it as cost-effective with good ROI. Trellix EDR is noted for offering value despite higher upfront costs due to superior features. While NetWitness NDR is seen as budget-friendly, Trellix EDR's feature set justifies its pricing for many users.
