The product provides a one-click recovery of encrypted files. Threat hunting is marvelous.
Reviews from AWS customer
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
A scalable solution that provides a one-click recovery of encrypted files and excellent threat-hunting features
What is most valuable?
What needs improvement?
The product must improve the ability to work with different operating systems like Windows and macOS. The CPU utilization of the product is quite high compared to its competitors. The agent file size is higher. The number of services that run on a system is quite high. Other EDR solutions have only a single service running on it.
For how long have I used the solution?
I have been working with the product from the day of inception. I am using the latest version of the solution.
What do I think about the stability of the solution?
The stability is good. I rate the stability a nine and a half out of ten.
What do I think about the scalability of the solution?
I rate the tool’s scalability a ten out of ten. The solution is suitable for small, medium, and large enterprises.
How are customer service and support?
The support is great.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is simple. It can be done in a couple of days. The solution is cloud-based.
What's my experience with pricing, setup cost, and licensing?
The product’s aggressiveness in competing with the competitor's pricing is almost nil. The pricing is always high. I rate the pricing a three and a half out of ten.
Which other solutions did I evaluate?
We can compare the tool with SentinelOne and CrowdStrike. Kaspersky and Trend Micro cannot compete against the solution.
What other advice do I have?
People must always evaluate the product first. They must see the difference in manageability and flexibility of the licenses. They must also consider the manageability and flexibility of the software before making a decision. Overall, I rate the solution a nine out of ten.
A tool that provides good visibility of the whole environment and the endpoints to users
What is our primary use case?
Trellix Endpoint Detection and Response (EDR) is a very advanced solution, and it can work very well since it helps a user get very deep and very detailed information. With Trellix Endpoint Detection and Response (EDR), I can collect everything from the client without any problem. Trellix EDR API rate is very high, and they cover a very large number of attacks and IOCs because it stands as a highly corrected product with the help of a very high-level research and development team.
What is most valuable?
The most valuable features of the solution stem from the fact that the response and coverage that the tool provides are very high. The functionality of the product in terms of recovery and IOCs is very nice. The details included in the IOCs are something you can refer to with the help of the product's knowledge base, meaning you can get a reference about attacks and IOCs from certain databases of the tool, and it also covers the new attacks.
What needs improvement?
In my opinion, Trellix Endpoint Detection and Response (EDR) is one of the best tools that I have worked with till now.
One of the issues about the product stems from the failure to work on its administrative scalability. The aforementioned area can be considered for improvement.
The interface should be easier to use, and Trellix needs to provide training to explain how to use the solution, as these are areas where the solution lacks and needs to improve.
For how long have I used the solution?
I have been using Trellix Endpoint Detection and Response (EDR) for two years. I operate as an implementer of the solution in my company.
What do I think about the stability of the solution?
Stability-wise, I rate the solution a nine out of ten.
Only skillful people can work with the solution, as only an old or experienced person will have all the capabilities and the power to improve and search for processes. In general, a person needs to know how to use the solution.
What do I think about the scalability of the solution?
Scalability is something that has emerged as a new requirement, and it may be very hard to use the features that can make the solution more scalable.
My company doesn't have many customers currently using the product.
The product is mostly for enterprise-sized businesses. The product works nicely for enterprise businesses.
Which solution did I use previously and why did I switch?
I have worked with many EDR products in the past, but I feel that Trellix is a very remarkable product because of its capabilities.
How was the initial setup?
The product's initial setup phase was very straightforward since you just need to install it, and it works.
The product's deployment phase had very few steps because it was made available as a preconfigured device without the configurations, and with the network configuration, everything works fine.
The solution is deployed on an on-premises model.
The solution can be deployed in an hour.
The maintenance and deployment of the solution require the same number of people as for Kaspersky.
What was our ROI?
Some benefits are available for the users from the use of the solution as it provides nice visibility of the whole environment and the endpoints in an environment, but there is a need to have someone with the technical background to manage it.
What's my experience with pricing, setup cost, and licensing?
The licensing costs attached to the solution are very easy to manage. There is a need to make yearly payments towards the licensing costs.
What other advice do I have?
Trellix Endpoint Detection and Response (EDR) is a product that is meant for enterprise-sized businesses, and it would not be good for small and medium-sized businesses.
I rate the overall tool a nine out of ten.
Which deployment model are you using for this solution?
Its scalability is valuable for my use cases, but it should be more compatible with macOS
What is our primary use case?
Please share how Trellix Endpoint Detection and Response has improved your organization. If it didn't, please explain why.
What needs improvement?
The solution should be more compatible with macOS.
What do I think about the stability of the solution?
The solution is stable. I rate it a nine out of ten.
What do I think about the scalability of the solution?
The solution is scalable. Since we are from the banking industry, we have 10,000 users for the solution.
What about the implementation team?
We have two architects, five engineers and two technical support personnel for deployment.
What's my experience with pricing, setup cost, and licensing?
The pricing for Trellix Endpoint Detection and Response (EDR) is good.
What other advice do I have?
I rate Trellix Endpoint Detection and Response a seven out of ten.
A stable tool that helps its users investigate malicious files
What is our primary use case?
In my company, we use Trellix Endpoint Detection and Response (EDR) since it is a very helpful product. In my company, we install Trellix Endpoint Detection and Response (EDR) for all our machines and endpoints, along with Trellix Cloud Security. Trellix EDR can be integrated with Trellix SIEM. Trellix and McAfee Endpoint Security are used in our company as they offer endpoint protection.
Trellix Endpoint Detection and Response (EDR) offers endpoint protection and helps collect information while also allowing users to investigate malicious files in an IT environment.
What needs improvement?
Trellix purchased McAfee two years ago. At this moment, it may seem a bit difficult if I explain Trellix and McAfee separately. Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint provide endpoint protection. In the future, if Trellix can compile both the products, Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint, into one solution, our company need not install multiple agents, which can reduce the workload for IT and make the tool easy to manage.
The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution. If both tools are combined into a single solution, it will become easier for a user to manage and deploy such a product.
For how long have I used the solution?
I have been using Trellix Endpoint Detection and Response (EDR) for two years.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
It is a scalable solution.
Around 600 users use the solution.
My company plans to increase the use of the solution by 20 percent.
How are customer service and support?
I have experience with the solution's technical support.
How was the initial setup?
Speaking about the product's setup phase, in our company, we deploy it with the endpoint management setup system. When in our company, we have any new applications, the endpoint management setup system automatically deploys for all the agents.
The solution can be deployed in twenty minutes to complete all the components of the installation phase.
For deployment, my company uses a deployment application since we have to deal with endpoints in my organization, and other than that, if there is a requirement for deployments, then we use it to take care of such a setup phase. The deployment can be done automatically for the endpoint.
The solution is mostly deployed on the cloud, but at times, it may be deployed on a hybrid cloud.
What's my experience with pricing, setup cost, and licensing?
Speaking about the price, you must use the product to find the product's cost for you.
What other advice do I have?
I recommend the solution to others in the future.
I rate the overall tool an eight out of ten.
Which deployment model are you using for this solution?
A scalable and easy-to-implement solution that provides timely alerts on malicious behavior in the server
What is our primary use case?
The product works as a preventive tool. It checks for signatures as well as behaviors.
What is most valuable?
If there is any malicious behavior in the workstation or server, the tool stops or isolates it automatically and generates alerts. It creates reports on the incidents and provides the details to us. The product is very easy to scale and implement.
What needs improvement?
The product must focus on improving the appliances. The console has a lot of bugs, and it creates many issues. It is very tedious to troubleshoot the issues sometimes. The support team does not help. We solve our problems by testing things we find on Google and other forums where people give suggestions about the product. The product has very limited options for creating policies. The product could provide more options for creating policies. The options must be customizable according to the user’s requirements.
For how long have I used the solution?
I have been using the solution for more than two years.
What do I think about the stability of the solution?
I rate the tool’s stability an eight out of ten.
What do I think about the scalability of the solution?
The tool is scalable. We have implemented it across the organization. I would recommend the tool for both small and large companies.
How are customer service and support?
The support team is the worst. The support team must improve its knowledge.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
We used an anti-malware solution before we started using Trellix.
How was the initial setup?
The solution is deployed on the cloud. The initial setup was simple.
What about the implementation team?
The deployment took nearly a month. Trellix’s team helped us deploy the product. They were helpful during the purchasing and implementation process. Four or five people in the organization manage and maintain the solution.
What's my experience with pricing, setup cost, and licensing?
The product’s pricing is reasonable. However, we have to have a minimum contract of three years. The licensing model is not so good. Advanced threat intelligence features are very expensive.
What other advice do I have?
We are planning to change the vendor. We have one more year of contract on the product. Companies must use EDR, but they must research before choosing vendors. Overall, I rate the solution an eight out of ten.
Efficiently blocks traffic and browser navigation while offering ease of setup to its users
What is our primary use case?
As a user, I didn't have any concerns about technical aspects where I was working previously. Working together. So, we sell licenses of McAfee. We had a promotional activity in which when you buy a cell phone, you get a McAfee subscription for mobile, and we used to offer a license of McAfee with an internet connection.
How has it helped my organization?
Blocking browser navigation is a feature of the solution with which we have experienced success.
What is most valuable?
The fact that it is easy to manage by consumers, families, small businesses, or parents while blocking traffic is a valuable feature of the solution.
What needs improvement?
For Spanish users, it is necessary to have a knowledge base specifically designed for them, which is currently not available.
Blocking other browsers should be a feature introduced in the solution. At this time, you can control Safari and Microsoft Edge. But I don't know about the other browsers.
For how long have I used the solution?
I have been using McAfee MVISION Endpoint Detection and Response for five years. We use the solution on mobile and in the cloud. Also, my company is a reseller.
What do I think about the stability of the solution?
There are issues with the solution on the other browsers. So, I don't know if any feature is enabled in the solution to resolve the issues.
What do I think about the scalability of the solution?
We have been providing a lot of licenses, and we never had a problem. So, it is a scalable product. For personal use in my family, I may have plans to use it.
How are customer service and support?
I rate the technical support a ten out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The solution's initial setup process was simple.
What was our ROI?
There has been a return on investment since it is a good business. Hence, we embedded the solution in our services. So, I know that this is a good investment.
What other advice do I have?
My company does provide the solution at a good price for our customers. The solution needs to support their Spanish customers. Overall, I rate the solution a nine out of ten.