Trellix Collaboration Security Reviews

In my field, I have been in the information security area for 17 years, and I am currently working in my position for a year and a half.

I have worked with Trellix Collaboration Security for several years in different outsourcing services before Johnson & Johnson. At BNP Paribas Bank, a French bank, I worked with Trellix Collaboration Security. At Santander Bank, I also worked with Trellix Collaboration Security. Before the banking sector, I worked in a security operations center with Trellix Collaboration Security since the McAfee company.

At Johnson & Johnson, I am not currently using Trellix Collaboration Security. However, before Johnson & Johnson, I worked at Santander Bank where I participated in a project to implement the endpoint in different offices of the bank, coordinating the alignment and sending of policies, tasks, update tasks, and deployment of the new versions of the products.

In my experience, the best features related to Trellix Collaboration Security concern the protection against threats. Trellix Collaboration Security has a good solution to protect based on behavior and threat intelligence, reputation, and other features. I appreciated being able to include a malicious hash in the console, and the console then disseminated this information to different databases internally to protect against threats, download of the file for web reputation, and check the malicious activities in the email according to the hashes included in the databases.

Regarding threat intelligence, it helped us with signatures, IOCs, or reports related to geolocation, where we could use it to create correlation in the XDR to block and create a campaign to block different malicious activities based on the historical data published in the threat intelligence and based on reputation. It is very important because it is integrated, so it is not necessary to contact VirusTotal or put the hash in VirusTotal. Instead, I use the database and the threat intelligence from Trellix Collaboration Security. In the past, it helped me a great deal with detecting and confirming whether something was malicious or not.

Another feature I believe is very important is the real-time response capability. It is possible to collect artifacts, run scripts, kill processes, and isolate machines all without leaving the interface. For me, this serves as a bridge between detection and reaction, and it truly makes a difference in the tool.

In my view, Trellix Collaboration Security and other XDRs can help the company elevate the trust in operations. Of course, it is necessary to create automations and integrations with pipelines with CSVs, inventory, normalization of data, and automatically raising incidents for the agents and endpoints. In my view, this reduced manual activities significantly and increased the precision of the indicators. Everything helped the operations team and the engineering team respond more quickly to malicious activities detected. It helped us reduce risks, avoid silent failures, and improve the health in general in the environment. Another important point is that we have an improved security posture because it is possible to treat the findings, adjust policies, and block malicious hashes. With that, we reduced the noise according to the detections, increasing the capacity of prevention and detection. We also improved the resilience of the security tools inside the company.

I have had challenges in the past with Trellix Collaboration Security for implementation because of issues related to compatibility. Since we worked in a global company with different operating systems, it was necessary to create different plans and different actions to implement the product.

One thing I really do not prefer in Trellix Collaboration Security is not related to the console. I am a McAfee fan since the McAfee tool, and I find the console of Trellix Collaboration Security to be very user-friendly and easy to use. However, I do not know if it is related to the architecture of the product. Of course, we have modern threats based on behaviors and zero days. We have today CrowdStrike and SentinelOne, where we have better results based on threats and behavior, where it is possible to create a simulation environment based on the file detected and based on it, confirm if it really is malicious or not. In general, I believe Trellix Collaboration Security improved the console based on the last console of McAfee, but I think it is possible to improve more. It really is a good product, but in my view, it needs to improve detection based on behaviors.

Regarding automations, I have implemented Trellix Collaboration Security here at Johnson & Johnson, and I implemented it in the same situation at Santander Bank and BNP Paribas Bank, where I created automations to export data for different metrics, including malicious detections, compliance, baselines, scans, last scans based on the seven days, and checking of patterns. I export everything to CSV files. Based on that, I create Power BI dashboards, and in these Power BI dashboards, I have a more executive view for different metrics to provide to myself, my manager, or director to create an executive view based on it. Another important point we use here at Johnson & Johnson and other companies is a data hub or a SIEM solution, such as Elastic or ArcSight, where we select some logs to be sent and use it to build reports and metrics.

Trellix Collaboration Security is stable in my experience, and I agree with this assessment.

Regarding scalability, the strong points of scalability are related to Trellix Collaboration Security's offering and the high availability in a cloud architecture. This creates more possibility to expand without issues. The console is strong and can be used for a large quantity of machines without slowing down. It is possible to improve and create very good scalability. Integration with multiple tools such as email, collaboration platforms, security, and other SaaS solutions is possible through API. This permits the increase of new services without creating a new architecture. It is possible to integrate.

Another aspect is the unified detection and analysis of sandbox, URL, file inspection, and threat intelligence. This creates a more robust increase for a horizontal solution. It creates a good range of use because it really helps a lot. In my view, the limitation about scalability may be related to license and costs. When you include other modules and services, of course, you increase the cost, and because you need to adjust.

Customer support for Trellix Collaboration Security has been very positive in my view. Of course, we have concerns about limitation of support. For example, in evaluations of the AWS marketplace, some users spoke about the new hub created in India and not having good support. However, in my view, I have not had issues with support. I had a great experience with my recent cases opened. My contract of support at Santander and BNP was a platinum support level, and with that, we really had a good experience.

Positive

Previously at Santander Bank and BNP, we were using McAfee. We continued using Trellix Collaboration Security with some improvements. At Johnson & Johnson, we are in transition from Trend Micro Vision One to CrowdStrike. I have had experiences in the past in security operation centers with different solutions. We had good results when we migrated from McAfee to Trellix Collaboration Security. Trellix Collaboration Security is more modern, and in my view, it organizes the structure of the console better.

Another feature I believe is very important is the real-time response capability because it is possible to collect artifacts, run scripts, kill processes, and isolate machines, all without leaving the interface. For me, this serves as a bridge between detection and reaction, and it truly makes a difference in the tool.

I implemented Trellix Collaboration Security here at Johnson & Johnson, and I implemented it in the same situation at Santander Bank and BNP Paribas Bank, where I created automations to export data for different metrics, including malicious detections, compliance, baselines, scans, last scans based on seven days, and checking of patterns. I export everything to CSV files. Based on that, I create Power BI dashboards, and in these Power BI dashboards, I have a more executive view for different metrics to provide to myself, my manager, or director to create an executive view based on it. Another important point we use here at Johnson & Johnson and other companies is a data hub or a SIEM solution, such as Elastic or ArcSight, where we select some logs to be sent and use it to build reports and metrics.

We did see a return on investment, mostly related to operational efficiency and incident reduction rather than headcount reduction. The biggest ROI came from gaining visibility and reducing manual work. With Trellix Collaboration Security's endpoint telemetry, policy automation, and faster threat correlation, our team spent around 25 to 35% less time on routine investigations. Tasks that previously required manual log collection or waiting for the user became near real-time. That alone freed up analyst time for deeper work instead of repetitive triage.

We also saw a major reduction in noise. After tuning the ENS and aligning the threat intelligence with real detections, we dropped false positives around 20 to 30%, which directly reduced the number of tickets escalated to security operations. The real-time feature is a good capability, and we had good results in the past based on it because it prevents lateral movement and avoids more expensive downstream impacts, such as re-imaging and downtime.

We did not purchase Trellix Collaboration Security based on the AWS Marketplace.

I participated in a recent RFP where we evaluated Microsoft Defender, SentinelOne, CrowdStrike, and Proofpoint to check and create a comparison.

My main advice for others about Trellix Collaboration Security is to go with a clear understanding of what you actually need. Trellix Collaboration Security really is powerful, but it is not a plug-and-play product. The value really shows up when you tune policies, integrate multiple collaboration channels, and leverage the threat intelligence and behavioral analysis model. Make sure you have the internal capacity for configuration and ongoing tuning. If your environment is complex with multiple SaaS tools, file sharing, and cross-tenant collaboration, it is necessary to create a plan for proper setup. Once configured, the detection depth and cross-layer correction are really strong. In short, it is a powerful platform, but it rewards teams that prepare, tune, and manage it well.

Regarding integrations, Trellix Collaboration Security has good integration with a large list of products, and it is possible to integrate. Performance and integration are good, and support in my experience has provided good results during telephone calls and email requests. For public and private cloud, we had good results, but I prefer to work with the console of Trellix Collaboration Security as a SaaS solution, and it helped in the deployment for cloud, hybrid, or on-premises environments. It depends on the internet link, but in my last experience with Trellix Collaboration Security, I did not have issues related to deployment using the security solution in a cloud environment. We reached a good result during the deployment of new versions and new products without creating a saturation of the link.

Regarding deployment, we used AWS as the main solution here and at Santander Bank. It is the same at BNP Paribas. In the last three experiences I have had, we used AWS.

My review rating for Trellix Collaboration Security is an 8 out of 10.

Hybrid Cloud

Amazon Web Services (AWS)

My main use case for Trellix Collaboration Security is based on my experience with Trellix EPO and Trellix products, as I have over six years of experience managing Trellix EPO and all its features when it comes to antivirus protection, including its firewall and DLP functionality. You can also encrypt a drive instead of using BitLocker, integrate your whole network, deploy a fabric from Trellix, and this fabric serves as a private network that enhances secure communication. It becomes comparable to an EDR because you can integrate it with Trellix TIE services, a reputation service, and manage USBs for controlling data movement from the computer to the USB.

On top of that, you can run scans 24/7, which is called the on-access scan, or run on-demand scans whenever you prefer, perhaps once a day for a full scan. You have extensive management capabilities regarding the ports and IPs the computers communicate with, providing a lot of functionalities.

A specific example of how I have used Trellix Collaboration Security in my consulting work is in my current work environment, where I manage over 130,000 endpoints, allowing me to protect each endpoint with a firewall, which makes a significant difference because the entire network is not protected by a network firewall alone. Having an endpoint firewall is valuable, and being able to scan all applications for malicious content 24/7 with an on-access scan, which scans everything you click on in real-time, ensures effective security which I truly appreciate.

Day-to-day, we scan the endpoints once a week and conduct full scans weekly while also performing 24/7 scans through the on-access scans. We help people troubleshoot performance issues related to scanning and create exclusions for threat prevention, exploit prevention, and the on-access scan itself because a file, folder, or software may not need to be scanned continuously. My everyday tasks revolve around managing performance and connectivity, which may involve opening ports or ensuring domain reachability, as well as managing USBs, including creating new exclusions for new vendors of USBs. Additionally, you can integrate Trellix EPO with LDAP, which helps manage computers and users, enabling the creation of specific, more granular rules.

In my opinion, the best features Trellix Collaboration Security offers include the firewall, the on-access scan, and the ability to obtain daily signatures for the latest malware. These daily signatures, referred to as content, ensure that we are protected against the most recent malware threats recognized by other companies.

Another feature I particularly enjoy is the capability to maintain different locations that can communicate with the fabric, or DXL fabric as I refer to it, allowing me to create something akin to an EDR for immediate responses to resolve issues.

The DXL fabric has helped my organization by enabling communication between different locations, such as one in Europe, another in South America, and one here. This fabric communicates with a broker that interacts with the TIE servers, which maintain the reputation of files, certificates, and known signatures from various regions including Europe, South America, and Canada. When something suspicious occurs, such as a certificate appearing malicious on an application, I can easily click and indicate that I trust this file, and through the fabric, I can apply an exclusion for that application across all locations simultaneously.

Other features I find valuable include the SSO integration with Trellix EPO, specifically SAML SSO, allowing people not to have to manage usernames and passwords if they already utilize an SSO service for SAML; I consider this functionality to be quite beneficial.

Areas where Trellix Collaboration Security can be improved include the fact that it used to support OpenLDAP but now does not support it any longer; it only supports LDAP, which means open-source lightweight directories are not supported anymore.

While I find Trellix's support and performance to be satisfactory, I do have concerns. Sometimes Trellix uploads packages, identifies bugs, and removes them without notifying users, which requires us to wait for the next release or roll back, both undesirable situations. I need assurance that proper testing occurs before the release of new packages.

I have been using Trellix Collaboration Security for approximately six years.

Trellix Collaboration Security can indeed be stable if you know how to manage its features effectively.

Trellix Collaboration Security is very good when it comes to scalability, demonstrating impressive capacity for growth.

I appreciate the customer support, particularly if you can effectively communicate the issue you are experiencing.

Neutral

I have previously used SonicWall for antivirus and network firewalls; however, Trellix exceeds SonicWall's offerings, which are more aligned with a SaaS solution. The absence of an on-premise console with SonicWall was a significant factor that led me to choose Trellix.

I observe that the return on investment is hindered by the lack of adequate training opportunities, with Trellix's own training being quite costly, ranging from 2,000 to 4,000 dollars, which many small or medium-sized businesses cannot afford. I believe the educational materials can be enhanced, as Trellix does not explain certain concepts well in their training, and having completed the training, I feel I could offer better instructional support.

The experience with pricing, setup costs, and licensing indicates that while Trellix Collaboration Security is a great product, it tends to be on the pricier side. I do not possess complete knowledge of all the pricing details for licensing or support as I am only somewhat involved in the purchasing process, but I know that larger enterprises, such as a bank I previously supported, invest in it as they have the financial resources. However, I believe it might be less accessible for small to medium-sized businesses, and I wish there were more affordable options available for them.

Before selecting Trellix Collaboration Security, I evaluated other options, including Trend Micro, which many individuals discuss. Though I personally have not used Trend Micro, it appears that it is popular for file servers, possibly enabling faster scans for zip files and specific files that can take Trellix longer to unzip.

My advice for those considering using Trellix Collaboration Security is to ensure your budget accounts for investing over 100,000 dollars to hire someone to manage the product, as professionals with this expertise tend to come at a high cost. I give this product an overall rating of ten out of ten.

On-premises

My main use case for Trellix Collaboration Security involves using Policy Orchestrator, email gateway, web gateway, and Trellix sensors, Security Manager, Network Security Manager.

I use Trellix Collaboration Security in my daily operations by utilizing different sites sensors and then integrating security manager, which controls network operations, traffic inspections, packet inspection, deep packet inspection, and SSL inspections.

The best features Trellix Collaboration Security offers include GTI threat intelligence and signatures upgrade database. Since I have integrated GTI and sensors along with network security manager, all sensors share information and reports effectively, allowing me to view attack reports from the dashboard easily.

I can customize dashboards in Trellix Collaboration Security to view information like top attacks, ransomware attacks, and critical high attacks. I can monitor sensor health, attacks, logs that generate, and customize these as per my needs, plus I can add emails and alerts.

I rely on Trellix Collaboration Security because the sensors are highly reliable and high-performance sensors that can handle traffic efficiently. CPU resources are effectively utilized while handling deep packet inspections and SSL inspections. Moreover, there are policies to be on networks, and there is a built-in firewall that I can use to block external attacks.

Trellix Collaboration Security can improve by addressing some zero-day attacks and enhancing VM-based protections.

I chose a nine out of ten because some improvements are required, especially concerning East-West traffic or zero-day vulnerabilities. To improve vulnerabilities, Trellix can use an automation process to check if the system is vulnerable.

I have worked with Trellix Collaboration Security for over almost four and a half years.

Trellix Collaboration Security is very stable.

Trellix Collaboration Security scalability allows me to use sensors on-cloud, on-premises, inside premises, and in a hybrid environment. I can use VM-based environments to effectively stop East-West attacks.

I have interacted with the customer support team of Trellix Collaboration Security. The support team is good overall, though my experience with the Indian support team was not as satisfactory since they did not provide adequate support to rectify issues. I managed to identify and resolve the problem myself.

I previously tried to use the Fortinet solution, but the Fortinet solution was not providing good performance, making Trellix Collaboration Security a better choice for me.

I have seen a return on investment with Trellix Collaboration Security; specifically, money was saved and fewer employees were needed because I do not need employees on different sites. I only need a Network Security Manager deployed centrally to control all these sensors from one location.

My experience with Trellix Collaboration Security regarding pricing, setup cost, and licensing was very good, and the setup cost was very cheap.

I evaluated other options, including Trend Micro-based sensors, but I found that Trellix Collaboration Security's performance is better.

All is good with Trellix Collaboration Security.

I would rate Trellix Collaboration Security a ten out of ten.

My advice for others looking into using Trellix Collaboration Security is to ensure that data backup is performed before upgrading to the latest version, as Trellix should provide a proper plan for device upgrades and fallback options. Sometimes, if the sensors are located in different locations and the network security manager is positioned elsewhere, data may get corrupted during upgrades. Firmware files may become corrupt, leading to sensor instability, and I would have to go on-site to resolve this. Therefore, Trellix should develop options for sensors to restore firmware remotely in case of failures.

I have additional thoughts about Trellix Collaboration Security. Trellix has various security products working; however, it should improve its design and devices to effectively compete with Fortinet, which is a growing company with diverse, efficiently running products.

On-premises

My main use case for Trellix Collaboration Security is to secure our collaboration tools and ensure that any file or link shared through them is safe and free from any threats across the environment.

A specific example of how I use Trellix Collaboration Security in my daily work is when it caught a malicious file that was shared through our messaging platform before anyone could open it. That alone demonstrated how valuable this product is for our team.

The best features Trellix Collaboration Security offers include real-time scanning of files being shared and links, automatic threat blocking, and seamless integration with our existing collaboration tool.

The feature I find most valuable in my day-to-day work is the real-time file scanning. Knowing that every file shared across our team is being checked automatically gives us a lot of peace of mind.

Trellix Collaboration Security has positively impacted our organization by making our collaboration environment very safe, allowing our team to share files and links without worrying about threats.

This positive impact has led to measurable outcomes, such as threats being blocked automatically that could have caused real problems, and the team feels much safer using collaboration tools now than they did before. Overall, it is providing great security for the organizational environment.

Trellix Collaboration Security is working smoothly, but a more detailed report on what has been blocked could be really helpful.

I have been using Trellix Collaboration Security for more than three years.

Trellix Collaboration Security is a very stable solution, and it has been running without any issues.

The scalability of Trellix Collaboration Security is excellent, as it has scaled well with our organization's growing team.

The customer support has been really helpful and responsive, with very knowledgeable engineers on the product who have addressed any questions or issues.

I am using this type of solution for the first time and did not previously use a different solution.

My experience with pricing, setup cost, and licensing is that pricing is reasonable, licensing is straightforward, and the setup was not complicated.

We are a partner with Trellix Collaboration Security, and my company has a business relationship with this vendor other than being a customer.

I have seen a return on investment as blocking threats before they reach our team has saved us from potential incidents, saving us time and money.

My experience with pricing, setup cost, and licensing is that pricing is reasonable, licensing is straightforward, and the setup was not complicated.

We have not evaluated other options before choosing Trellix Collaboration Security.

My advice for others looking into using Trellix Collaboration Security is that any organization using collaboration tools regularly must have this product. Set it up early and ensure it covers all your collaboration channels; once it is in place, your team can collaborate freely without worrying about security threats. I would rate this solution a 9 out of 10.

Public Cloud

Microsoft Azure

My main use case for Trellix Collaboration Security is to protect our platforms like Slack, Microsoft Teams, Google Workspace, Drive, OneDrive, and Google Drive.

With the help of Trellix Collaboration Security, we use Slack in our organization, ensuring that no one can post or share data related to threats or anything sensitive in our production environment. We employ Trellix Collaboration Security to protect against emerging threats.

With the help of Trellix Collaboration Security, we are able to block phishing campaigns, malware delivery, suspicious URLs, and the lateral movement of shared files. This ensures that no one can target my drives where we have uploaded sensitive data on Google Drive and OneDrive.

Trellix Collaboration Security offers inbound security that is similar to email security, providing significant protection on the inbox level rather than just at the gateway level.

It secures our sales applications, such as Salesforce, and HR and finance platforms, helping protect our hybrid work environment, reduce attack surfaces, and prevent the spreading of malware from one user to another. Trellix Email Security protects at the gateway level, while Trellix Collaboration Security ensures protection from insider users and enhances cyber resilience.

Trellix Collaboration Security is a comprehensive cybersecurity solution that secures collaborations such as Microsoft Teams, Office 365, Google Workspace, and enterprise applications, and it also protects our files, links, chats, and overall digital workspace.

In our organization, Trellix Collaboration Security has positively impacted us after we experienced an incident where an insider sent data that spread ransomware. After using collaboration security, we no longer allow sharing or sending data that could be designed or injected with malicious files or viruses.

After implementing Trellix Collaboration Security, we have not encountered any incidents related to ransomware.

I believe no improvements are needed for Trellix Collaboration Security as we are already using more tools from Trellix.

I don't think any improvements are necessary or there are features missing in Trellix Collaboration Security.

I deduct two points because while we are using it for insiders, we still rely on another solution for gateway level security, which makes us use two different solutions for the same purpose.

I have been using Trellix Collaboration Security for the last two years.

Trellix Collaboration Security is stable.

Trellix Collaboration Security's scalability is simple, as it operates from a single console where we just configure our Slack, Teams, and OneDrive, and afterwards we only need to set the policies.

Customer support for Trellix Collaboration Security is good, especially in the area of email security, as they have dedicated email security support engineers.

I have never used any different solution prior to Trellix Collaboration Security.

I see a return on investment with Trellix Collaboration Security as it saves time, reduces incidents, and allows one person to handle what previously required more effort to check one by one.

My experience with the pricing, setup cost, and licensing has been positive as I find it cheaper than other OEM solutions and thus is good.

We evaluated Sophos security before choosing Trellix Collaboration Security, but they did not provide the functionalities we required.

My advice for others looking into using Trellix Collaboration Security is to prevent insider threat vectors because a colleague may unknowingly share infected files. You need to be vigilant and ensure that you are safeguarding your organization.

Public Cloud

Other

My main use case for Trellix Collaboration Security is in areas such as email usage and file sharing security, mostly for threat detection and blocking malicious content. This is our main use purpose, and it helps our team stay protected from malicious files and links.

Trellix Collaboration Security offers malware and link detection, automatic mail scanning, and secure file sharing as its best features in my experience.

Trellix Collaboration Security has helped our team by preventing phishing attacks and malware infections, keeping our systems secure through the detection of malicious emails. Secure file sharing has enabled our team to collaborate safely without risking sensitive data. For example, we avoided a potential data breach when a suspicious attachment was blocked before anyone could open it.

Trellix Collaboration Security has positively impacted my organization by improving security, making teamwork more effective, and ensuring collaboration has become smoother.

Trellix Collaboration Security can be improved by making the reporting and analysis tools more detailed. The interface could be more user-friendly and notifications more customizable.

I have been using Trellix Collaboration Security for one year.

Trellix Collaboration Security is stable and has minimal downtime.

Its scalability is good, and it has grown well with our organization's needs.

Customer support for Trellix Collaboration Security is responsive and helpful when I have reached out.

Neutral

I previously used a different solution but switched to Trellix Collaboration Security for better security and easier management.

I have seen a return on investment from using Trellix Collaboration Security as we have saved time and reduced security incidents, improving our overall effectiveness.

My experience with pricing, setup cost, and licensing for Trellix Collaboration Security is that pricing and setup were reasonable and licensing was straightforward.

I evaluated other options like Option A and Option B before choosing Trellix Collaboration Security.

Its use and integration with existing systems are very easy. My advice to others looking into using Trellix Collaboration Security is to ensure it fits your team's workflow and to take advantage of its security features fully. I would rate this product an 8 out of 10.

Hybrid Cloud

Microsoft Azure

I have worked on Email Security both on-premises and in the cloud, Web Security, and also on MDR, which is called HX endpoint security for Trellix Collaboration Security. I am familiar with the File Analysis system as well. It actually depends on the use case and whether the email system is on the cloud or on-premises. Our focus is on what is required for the customer based on security policies. Most of the time, it's not dependent on one factor but rather a package.

The entire system is stable and delivers what the customer needs. Trellix Collaboration Security is valued for being a stable and comprehensive solution that fulfills customer needs. Despite not being able to use it for complete on-premises email security, it is effective for sandboxing and new threat coverage, working as a standalone solution without needing to integrate with other systems.

I would like to see the addition of email digital protection features, such as anti-spam and antivirus, not just sandboxing, in the on-premises solution.

I have been working with the Email Security product for more than ten years, about fourteen to fifteen years. In Trellix Collaboration Security in general, I have been involved for about twelve years.

There were no deployment issues.

Trellix Collaboration Security is very stable. There were no stability issues for me recently.

I do not find it limited for the technology. There’s an area not limited for the vendors, and there is nothing new in terms of limitations.

I would rate them as a 1.5. The new hub created in India is not good.

Negative

I worked with Forcepoint and Cisco IronPort. Trellix Collaboration Security cannot be used for full security on-premises for email security unlike other products, but it does meet the needs.

The setup is straightforward.

I am involved in the implementation and troubleshooting as well as in sales and presales, making opportunities for my account manager colleagues.

I worked with Forcepoint and Cisco IronPort.

Trellix Collaboration Security came to fill a gap in areas not filled before. Multiple security layers are needed to protect email and web security, like firewall, web security, and email security. Some gaps needed filling, like new threats covered by Trellix Collaboration Security, which works as a standalone and doesn’t need integration with other solutions. I would rate it as nine out of ten.

On-premises

I primarily use it to monitor database access, particularly in banking and similar environments. It ensures that IT personnel and others do not create unauthorized accounts or users. Collaboration security assists in tracking database access and alerts in case of suspicious activity.

One of the most valuable features is the protection against vulnerabilities, particularly through virtual patching. This ensures that I am safe from potential threats affecting database security. 

Another significant feature is the vulnerability assessment, which is effective for overall data protection.

There is a need for improved integration with totally different products, such as a rapid server. This is currently challenging since the management console becomes overloaded with logs, which complicates troubleshooting.

I have been working with Trellix Collaboration Security for ten years.

Sometimes, integration can be challenging, impacting its stability, which is why I rate it a five out of ten.

I rate it an eight out of ten. Scalability benefits me by allowing for growth, although sometimes adding users can be difficult due to licensing.

The support isn't bad, but there is room for improvement in response time. Initially, I must generate a ticket, and then it gets escalated through tiers if the issue isn't resolved.

Neutral

For me, setup is easy because of my extensive experience. I rate it ten out of ten.

The price is high at eight out of ten. It is quite expensive and should be reconsidered.

Before installing, consider potential challenges with system performance, especially when integrating multiple tools, which could slow down performance. Overall, I rate the solution with an eight due to its impressive performance, however, integration with other systems needs improvement. My overall product rating is an eight out fo ten.

On-premises

Ideally, I don't manage the installation, but I do manage the security part. I am responsible for defining security-based best practices and implementing them in our company's environment.

I know about Trellix (formerly FireEye) Endpoint Security HX. I use Trellix Network Security (NX) for network security and devices, while Trellix (formerly FireEye) Endpoint Security HX is used for email security requirements.

My experience with the product is good. One of the valuable features of the product stems from the fact that it is easy to implement the tool in our environment.

Technology is an area that is evolving every day. As changes are introduced on a day-to-day basis, I feel that my company should evaluate the products we use. In general, our company should make the tool more robust to protect our systems.

I have been using Trellix Collaboration Security for more than three years.

Stability-wise, I rate the solution a nine out of ten.

Considering the number of people on my team, which is huge, I feel the scalability part is good.

Around 2,00,000 people use the product in my company.

The product is extensively used in my company.

Whether my company plans to increase the number of users of the product or not is something that depends on the growth of the organization.

The solution's technical support is good and supportive when it comes to my interactions with them.

I also use Office 365 and Exchange Online Protection (EOP).

The product's implementation phase is easy. When it comes to the implementation part, it is always better to go with some kind of automation process. Automation process can ensure a 100 percent implementation success rate in our company's environment.

The solution is deployed on an on-premises model.

When it comes to the licensing model, my company mostly purchases the five-year license model. I rate the product price as nine out of ten, where ten is the most expensive, and one is the cheapest. There is no need to pay any extra charges apart from the licensing costs.

I primarily use the product in our daily security operations since it is implemented in all of our company's systems and is used in our environment.

Normally, email security tools like FireEye or Trellix help to protect ourselves from spam, malware, and other email-oriented threats. The tool is used extensively in our company's environment. It is more like a collaboration email security that is used in our company.

Whether my company plans to increase the number of users of the product or not is something that depends on the growth of the organization.

I recommend the product to those who plan to use it.

The product is stable and reliable, considering the results my company gets out of it.

When it comes to Trellix or FireEye Endpoint Security (HX), the tools offer antivirus as well as the modern real-time security feature, which is used to automate the detection and protection of the endpoints against all the security threats that are currently there in the industry.

I don't see any challenges with the integration part of the product, but since a different team manages it, I don't have visibility into it.

In terms of the value offered by the product, the solution does help our company protect data and the complete infrastructure.

I rate the tool a nine out of ten.

On-premises

Our primary use case for this solution is as a layer of advanced security for emails. FireEye Email Security helps us prevent spam and phishing emails and all other business-compromised email attacks.

FireEye ETB offers a good dashboard thanks to which we can see which emails are coming into the organization and which are going out. The solution also allows us to block emails as per the domain and email addresses. This is the most beneficial aspect of the solution in my opinion. Lastly, the solution not only protects us from phishing, it also secures us from advanced malware and phishing attacks.

In the next release, I'd like to see them provide more integration features.

I have been using this solution for more than two years.

I would rate the stability of this solution a ten, on a scale from one to 10, with one being the worst and 10 being the best.

I would rate the scalability of this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best. There are seven to eight individuals using this email solution.

I would rate the technical support of this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.

Positive

I would say that the initial setup process was easy because it only took an hour to turn the domain on and then all we had to do was the configuration on the cloud side. I think it takes almost fifteen to twenty days to complete the process.

We have seen ROI from this solution as it helps us prevent phishing targeting the CEO, CFO, and other individuals in higher levels of management.

I would say that this is a good solution for email threat prevention. This works perfectly as an extra layer of email security solutions.