Trellix DLP Reviews

I used Trellix DLP for Data Loss Prevention (DLP). I have been working with Trellix in general for approximately ten to 11 years, and specifically with DLP for the last four years.

The most effective aspect of Trellix DLP is that it does what it's supposed to do. It is fairly simple to use compared to Proofpoint. The product covers web, email, and endpoint domains, providing a comprehensive package within one software suite. Trellix products are manageable through a centralized control center, meeting requirements from frameworks like PCI DSS.

Unfortunately, it usually starts with a breach where some data is leaked or taken from the company by an insider or a user. In addition, it is companies that reach the maturity level where they see the value of making use of DLP.

The solution involves implementing the confidentiality, utility, and availability principles. Depending on its location, whether on a server or end-user, if I can use the CIA to find a load, and I can close the door for it, I can secure the data. For someone who understands how information security works, the implementation is straightforward, especially with understanding what policies and fingerprints to use in specific environments where it needs to be implemented.

I use the solution in my company for data security, where our primary focus is on our customers' data. The tool is used to store customer information inside the organization.

The negative part of the product stems from the area revolving around certain browsers. The solution does not support Mozilla Firefox. Mozilla Firefox has multiple architectures while Trellix is a product that does not support multiple architectures.

When it comes to the parts where improvements are required in the product, I feel that Trellix needs to verify data through the SSL inspection process.

The support team's response time during the night is an area of concern where improvements are required.

We use the solution for data loss prevention. It is mainly used in manufacturing industries.

Trellix DLP helps handle false positives, but it depends on your configuration. It is quite overwhelming in terms of its dashboard.

The use cases are in Windows-based environment. All the features are available in DLP for that. Now, for Mac and browser-based applications, those controls won't work because I have some policies that wouldn't apply.

The main thing is it all comes in a single console. Emission, endpoint security, everything in one product, one agent. Nothing else like it. It makes system management much easier.

We use the solution to control the storage devices and the data transfer through the cloud.

The visibility is good. We can use it for our internal investigation.

We are using Trellix DLP for endpoint detection and response, as well as for data loss prevention.

Trellix DLP offers many features, using EDR, EPP, disk encryption, and other features. It's a good feature as all these elements are in one product.

We use the solution for data protection for the endpoint.

Trellix DLP has an agent that continuously scans the endpoint and sends the data to the portal. From there, it continuously leverages data from its threat intelligence.