Trellix Email Security

We block DMARC for incoming mails and have threat detection enabled to block or identify any spam mail received in end-user mailboxes. We prevent spam mails and unknowns such as DKIM and DMARC unavailable mail. Additionally, we have country-based restrictions in our email gateway, which helps us prevent mail coming from unrecognized or unused countries. These are the ways we provide security to our end-user mailboxes.

We have cloud threat protection, which helps us identify any suspicious threats in emails.

Threat intelligence is adequate because they are using Microsoft GTI threat intelligence, but we need to increase protection against phishing and spam mails. It is already implemented, but we need to increase intelligence for cases where phishing links are received and need to be blocked. If users try to open links that have converted to phishing after some time, those need to be blocked. We are blocking some links, but we may miss others, so we need clarity on that protection, especially for older links.

I have recommendations for increasing dashboard customization. Currently, we are using custom dashboards, but they are not effectively customizable. If they provide better customization options, it would be easier to understand everything in a single dashboard instead of navigating through dropdown menus to see reports. Additionally, log retention is currently 30 days, but some customers request to extend it to 60 days. Having 60 days of log retention would be helpful for maintaining logs.

I have been working with Trellix Email Security  for the past one year.

There are two deployment modes: API integration, which is very easy, and MX record change, which requires some downtime. For deployment with inline mode, it takes around four to six hours of downtime. For API-based integration, we do not need any downtime and can implement it directly in production.

The security rates at eight out of ten.

I have not performed scalability adjustments because the user count has not increased. However, based on my understanding, we have the option to increase the count in the future. The scalability rates at nine out of ten.

Technical support rates at eight out of ten. The overall service rates at eight.

Positive

I work with both Sophos and Trellix Email Security  solutions. When compared with Sophos, Trellix Email Security is better, and when compared to other solutions, the price is more cost-effective.

We deployed the solution for approximately 1,000 mailboxes.

Three people were involved in the installation: one from the DNS side, one from Office 365 , and another from my team.

The operational cost involves a one-time investment for purchasing and implementing the solution, which provides protection for one year. The operational cost is average. Compared to other email solutions such as Cisco, price-wise, we get this solution within 50 to 60% of the average. They provide good percentages for enterprise customers. It reduces costs by almost 40% or 45% compared to other security solutions.

I am satisfied with the secure licensing cost because compared to other solutions, Trellix Email Security is cheaper and provides most features. I only know about the pricing from one year ago.

I am not working with other Trellix products such as Trellix Move AntiVirus or Trellix Intrusion Prevention System . The solution is easy to deploy, and the operational cost is less compared to other solutions. The price rates at eight out of ten. We use inline mode for integration with existing security infrastructure. They recently added AI to the solution, but I need to check with the team regarding AI implementation for email specifically. My final rating for Trellix Email Security is nine out of ten.

Public Cloud

Amazon Web Services  (AWS )

What do you like best about the product?

This tool was hard to manage, and we are glad that we no longer have to support it in our environment.

What do you dislike about the product?

Hard to manage. No parsers ever available for new products we would wish to send logs for. Every feature request or parser request turned into a Pay to uprgade instance. The interface is from the 80s, and hard to find everything.

What problems is the product solving and how is that benefiting you?

None at all

What do you like best about the product?

Trellix Enterprise Security Manager helps us to detect the malwares and threats and helps us to mitigate them promptly with mininal efforts

What do you dislike about the product?

Sometimes it responds very slow. Due to slowness, sometimes we stuck to responds to threats promptly

What problems is the product solving and how is that benefiting you?

Trellix Enterprise Security Manager detects threats based on the rule engine and alerts us for any kind of threats. It can help detect the ongoing threats and mitigate them.

What do you like best about the product?

McAfee Enterprise Log search is best security tool

It is having instant access to log data from various sources

And it is filtering options to quickly identify specific events or patterns

It can able to handle large volume of log data from diverse sources

It integrates with other McAfee solutions and third party tools

It is having features enabling security teams to monitor investigate and respond to the security incident

What do you dislike about the product?

McAfee enterprise log search can be costly solution especially for large scale deployments organisation with the limited budgets

It is difficult to effectively communicate insights to the non technical stakeholders

It requires significant training and expertise for new users

Large volume of lock data can impact search performance leading to slower query results

Integration with diverse log sources and customization of dashboards and reports can be time consuming and require technical expertise

What problems is the product solving and how is that benefiting you?

Helping to prevent data beaches by identifying suspicious activity and vulnerability

Offering centralised flat form for law collection analysis and reporting improving security teams

Identifying potential security threats in real time

It is giving incidence response enabling rapid investigation and analysis of security incident

What do you like best about the product?

The thing that I like best about MVISION ePO is how it helps me managed my McAfee Solutions in our organization. It helps me automate our organization workflows thus reducing the time and task that is needed for the investigation and triaging.

What do you dislike about the product?

The only downside that I dont like about mvision ePO is how complicated it is to configure especially if you don't have any necessary training with regards to this solution.

What problems is the product solving and how is that benefiting you?

MVISION ePO's ability to address these cybersecurity challenges helps enhance our organization's security posture, minimize risks, and safeguard sensitive data and assets, ultimately contributing to our business continuity and reputation.