We build our own use cases and those provided by the vendor for specific upcoming attack scenarios. Configuring the rule set using Trellix Endpoint Security is very much flexible based on the IOCs.
External reviews
78 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Useful for containment and taking a triage image
What is our primary use case?
How has it helped my organization?
Trellix Endpoint Security is good for doing containment immediately. We can get visibility of processes or services running all over the enterprise, where the agent gets information on a particular end-user system. Since Trellix Endpoint Security keeps the data for three months, we can get a complete picture of the files downloaded from the end user mission. So Trellix Endpoint Security is very helpful when you do forensics. The only drawback is that we cannot change its format, and there is no workaround currently.
What is most valuable?
The most valuable feature of Trellix Endpoint Security is containment, which takes less than a minute. It also has a dual containment feature. Trellix Endpoint Security is also useful for taking the triage image, which takes roughly thirty minutes. So it's pretty fast, and we have multiple configuration sets. We can precisely take a triage image based on what you want, like endpoint logs, antivirus logs, or the RAM.
What needs improvement?
Currently, Trellix Endpoint Security can't find the running mutexes, while other open-source products can do it. Mutex is something like a malware user. Secondly, the solution should support multiple output formats for the triage image. Currently, the solution has only Mandiant format, where you can't use tools like volatility to analyze the memory image.
It would be good if Trellix Endpoint Security had a good visualization like other products, such as SentinelOne and Carbon Black.
For how long have I used the solution?
I have been using Trellix Endpoint Security for one year and six months.
What do I think about the stability of the solution?
I rate Trellix Endpoint Security a seven out of ten for stability because it crashes frequently and requires a lot of maintenance.
What do I think about the scalability of the solution?
I rate Trellix Endpoint Security a nine out of ten for scalability. We have plans to increase the usage of the solution in the future.
How was the initial setup?
I rate Trellix Endpoint Security an eight out of ten for ease of initial setup.
What's my experience with pricing, setup cost, and licensing?
I rate Trellix Endpoint Security a nine out of ten for pricing.
What other advice do I have?
I am using the latest version of Trellix Endpoint Security. Using Trellix Endpoint Security depends upon the user's organizational needs. If their only concern is containing and taking the triage image, and if they are comfortable doing forensics with a deadline, then they can use Trellix Endpoint Security. But if some companies want to integrate their in-house or third-party tools, Trellix Endpoint Security is not a good option.
Overall, I rate Trellix Endpoint Security a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Great visibility of devices and ability to push out products to client machines
What do you like best about the product?
Love that you can view all managed and unmanaged devices and have the ability to push out products to both types of devices.
What do you dislike about the product?
Times where certain products start to malfunction and removing it from a particular computer may become tricky to do
What problems is the product solving and how is that benefiting you?
providing security and vulnerability protection for all of our end-user devices
McAfee Enterprise Log Manager allows to store & manage logs intelligently & efficiently for search
What do you like best about the product?
McAfee Enterprise Log Manager stores all the logs universally & can be accessed easily. It is a hybrid system & easy to integrate with any device. It supports log analysis & search.
What do you dislike about the product?
McAfee Enterprise Log Manager can improve its UI. Their cost can be made more low for all enterprise
What problems is the product solving and how is that benefiting you?
McAfee Enterprise Log Manager Collects, Compresses & stores all the log data. It provides data with details of IP Source & Destination, Identity context, topological network information, Policy & privacy information. It supports flexible storage pools. It is intelligent log management
Best Saas based security management tool
What do you like best about the product?
It is a cloud based console that manages the various security devices, platform and network all from a single console. Compare to other products it is easy to understand.
What do you dislike about the product?
The console will lag sometimes when we have to detect. There will be frequent updates for the products. The drive encryption is lacking in cloud platform compare to on-prem.
What problems is the product solving and how is that benefiting you?
It is the best device control and antivirus solution. We can block each and every product from connecting the endpoint. The detecting virus and malware is great.
Recommendations to others considering the product:
It is the best Saas product for security. It will detect the malware and phishing without any fail. It has good features that We can see out there.
McAfee SIEM Review
What do you like best about the product?
The ESM console is the best tool. The level of customization available in McAfee SIEM makes it unique
What do you dislike about the product?
The GUI can be improved as the competitor products look better in feel. Apart from that, there are no issues.
What problems is the product solving and how is that benefiting you?
Its one of the industry-leading SIEM solutions. it provides the NOC/SOC engineers to drill down to the logs with its advanced feature sets.
Thoughts on McAfee ESM
What do you like best about the product?
The offering package, The tool supports both on-prem and cloud environments and affordable compared to other tools in the market.
What do you dislike about the product?
Customer support and it is unfriendly to install with seeking McAfee's tech professional's help. And without SME is close to impossible to complete the setup.
What problems is the product solving and how is that benefiting you?
SOC Monitoring, Cyberthreat detection, and log correlation. It has majorly helped in finding real-time attacks and remediating those threats in real-time.
Recommendations to others considering the product:
The market's new tool has a good reputation in NAM and EU regions but still has a lot of potentials when the tool is configured perfectly.
Centralized dashboard for having a control over all the threats and its entry points, awesome..!!!
What do you like best about the product?
One person can have a look on the entire status of the security from one dashboard.
What do you dislike about the product?
Some features are good but a little hard to understand and implement.
What problems is the product solving and how is that benefiting you?
Syncing of all the security products.
McAfee Enterprise Log Search Helps Utilize Network Security Logs For Troubleshooting
What do you like best about the product?
It provides wide range of search, analytics and log management facilities which can be utilized by collaborating teams. Once the initial setup has been done, then doing slight modifications and setting up monitoring rules is very easy.
What do you dislike about the product?
The integration with AWS cloud, Ali cloud and Google cloud is not fully fleshed out and appears to lack key features. The user interface looks feels incomplete and needs improvement.The interface buttons lack sensitivity and at times required multiple clicks to engage.
What problems is the product solving and how is that benefiting you?
Troubleshooting. A real cost-benefit over current tools our company presently use.
Its good, console is userfriendly.
What do you like best about the product?
Easy to handle, the console is user-friendly.
What do you dislike about the product?
Console response delays a bit, it could be better.
What problems is the product solving and how is that benefiting you?
To mitigate security threats
Recommendations to others considering the product:
Everything is good, just support could be better.
Highly secured tool
What do you like best about the product?
i like how it automatically updates for the latest features and security threats. During updates, it does not affect my work on the system
What do you dislike about the product?
there is a limit to what features i can access on Mcafee, so i do not have any dislike
What problems is the product solving and how is that benefiting you?
We use this tool to prevent virus threats and malware because of the size of my company. it has helped to keep information and work safe
showing 51 - 60