Executive SummaryUpdated on Nov 6, 2024
Trellix Network Detection and Response and Gigamon Deep Observability Pipeline compete in the network security and visibility category. Trellix appears to have the upper hand due to its advanced threat detection capabilities, though both products show strengths and weaknesses in different areas.
Features: Trellix Network Detection and Response offers zero-day protection, robust sandboxing, and deep malware analysis, providing significant network visibility and ease of maintenance. Gigamon Deep Observability Pipeline excels with packet filtering, encryption enhancements, and improved network visibility, although it lacks intelligence for traffic flow analysis.
Room for Improvement: Trellix requires enhancements in file replication, machine learning integration, and better customization for sandboxes and VMs. Its analytics are impacted by the McAfee and FireEye integration, necessitating further refinement. Gigamon needs to address cloud monitoring challenges and integrate traffic flow visibility features to minimize dependency on other tools.
Ease of Deployment and Customer Service: Trellix offers flexible deployment options across on-premises and public cloud environments, scoring high in customer service with extensive contact options and a dependable support network. Gigamon focuses on on-premises and hybrid cloud setups, with good technical support, though customer service opinions vary, indicating room for improvement.
Pricing and ROI: Both Trellix and Gigamon are perceived as expensive but provide high ROI. Trellix's pricing reflects its comprehensive threat detection capabilities, justified by effectively preventing breaches. Gigamon's pricing is considered high; however, its network visibility enhancements are acknowledged as valuable, significantly reducing response times and increasing productivity.
