Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Trellix Endpoint Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
53rd
Ranking in Extended Detection and Response (XDR)
28th
Average Rating
8.0
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (24th), Endpoint Detection and Response (EDR) (50th), Security Orchestration Automation and Response (SOAR) (22nd), Network Detection and Response (NDR) (15th)
Trellix Endpoint Security
Ranking in Endpoint Protection Platform (EPP)
10th
Ranking in Extended Detection and Response (XDR)
12th
Average Rating
8.0
Number of Reviews
97
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2024, in the Endpoint Protection Platform (EPP) category, the mindshare of NetWitness NDR is 0.2%, down from 0.2% compared to the previous year. The mindshare of Trellix Endpoint Security is 3.8%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Jun 23, 2022
Beneficial single unified dashboard, good native application integration, and high availability
The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good RSA NetWitness Network could improve on integration with non-native application…
AV
May 2, 2023
Useful for containment and taking a triage image
We build our own use cases and those provided by the vendor for specific upcoming attack scenarios. Configuring the rule set using Trellix Endpoint Security is very much flexible based on the IOCs Trellix Endpoint Security is good for doing containment immediately. We can get visibility of…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."
"This solution allows us to locate the malware in real-time."
"RSA NetWitness does market analysis in a more granular form. It gives you full visibility."
"It is stable. We have been using it for some time, without any issues."
"Technical support is knowledgeable."
"The interface of this solution is very flexible and easy to use."
"Ability to isolate the machine when there are malicious files."
"The log correlation is good."
"The endpoint protection and disk encryption features are the most valuable."
"I like trap prevention DNS and threat prevention."
"The loss prevention feature would be the most valuable."
"Their malware detection rate is excellent for all type of devices and the anti-theft products are good and easy to use."
"I have found many of the features to be useful."
"The product helps us by contacting us if there are any virus attacks on our system."
"This is a good solution for antivirus and malware protection."
"It's easy to use and it's very powerful. It offers nice endpoint protection."
 

Cons

"The threat intelligence could improve in RSA NetWitness Endpoint."
"When analyzing something, you have to click several times. It requires a lot of effort to find something."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."
"The initial setup requires a high level of skill."
"The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features."
"The contamination feature could be improved."
"It can be quite complicated to learn McAfee Endpoint Security and to feel comfortable with the environment."
"It would be a lot easier if I could add multiple user accounts within a single device."
"The vendor should simplify the way they bundle the products because it's very hard to explain to customers what products contain which features."
"Although they have increased the complexity, it has affected the scanning speed."
"The solution takes up a high amount of memory and can cause the system to hang."
"Recently, Trellix has introduced a CDR, which involves more manual response than automatic. I believe they should enhance the system by adding features like automated response and the ability to create custom playbooks. This is crucial for an EDR solution, and currently, Trellix lacks this feature while other products offer it."
"The solution has problematic encryption, which needs reforming."
"The solution's documentation is not streamlined and is in bits and pieces, which should be in a single format."
 

Pricing and Cost Advice

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"It is highly scalable. It can be bought based on your requirements."
"I do not have any opinion on the pricing or licensing of the product."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"We are on a three-year contract to use RSA NetWitness Network."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"Its price is reasonable, but it could be made free."
"Pricing is fair."
"We pay for the license on an annual basis."
"The product is expensive."
"Compared to Bitdefender, Trellix Endpoint Security is more expensive, but considering it comes with DLP, the solution's price is fine."
"Licensing is paid yearly."
"Since the maintenance is done by our own team, the price of the subscription should really be cheaper."
"No comment."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
801,634 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Government
9%
Manufacturing Company
7%
Educational Organization
39%
Government
10%
Computer Software Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness XDR?
The solution is expensive. I'd rate it at a one or two out of five. They need to adjust it to keep up with the competition. I cannot speak to the exact pricing of the product.
What needs improvement with NetWitness XDR?
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to n...
How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deploy various components as desired with McAfee Endpoint Security, whereas many othe...
What do you like most about McAfee Endpoint Security?
It provides a robust defense against cybersecurity threats while offering user-friendly features like notifications and approval prompts.
What is your experience regarding pricing and costs for McAfee Endpoint Security?
The solution is not an expensive tool. Compared to other options, it's mostly average-priced. I've deployed it for customers ranging from 100 nodes to over 5,000 nodes. Its renewal prices are very ...
 

Also Known As

RSA ECAT, NetWitness Network
McAfee Endpoint Security, McAfee Complete Endpoint Protection, McAfee Endpoint Protection, Total Protection for Endpoint, Intel Security Total Protection for Endpoint, MCAFEE Complete Endpoint Protection
 

Learn More

Video not available
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
inHouseIT, Seagate Technology
Find out what your peers are saying about NetWitness NDR vs. Trellix Endpoint Security and other solutions. Updated: August 2024.
801,634 professionals have used our research since 2012.