No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender for Office 365 vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
Microsoft Defender for Office 365 boosts efficiency, cuts phishing, integrates security, reduces tool costs, and mitigates risk.
Sentiment score
7.0
Trellix NDR boosts ROI by improving security, reducing response times, and enabling efficient threat management and cost savings.
It has also decreased our time to detection and response by about 15 to 20 percent.
Technology support manager at Alfred State College
Overall, cost of owning and operating our system goes down.
Designation Chief Consultant at Avtow
It's hard to quantify the return on investment we've seen from Microsoft Defender for Office 365.
Chief Architect at a tech vendor with 1,001-5,000 employees
Investigations are generally faster because analysts have immediate access to relevant network context instead of manually piecing together information from multiple sources.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
The time was reduced because of the automated detections.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
Security Engineer at Digitaltrack
 

Customer Service

Sentiment score
5.7
Microsoft Defender for Office 365 support is reliable but varies with subscription level and complexity of issues.
Sentiment score
7.2
Trellix Network Detection and Response support is praised for knowledgeable service, though response times need improvement during severe incidents.
Over the past two years, there have been no critical problems.
Solution Consultant at BIM Group of Companies
we opened tickets, and they typically resolve them quickly.
Chief Architect at a tech vendor with 1,001-5,000 employees
With a subscription for Microsoft Defender for Office 365, it is an eight. Without it, it is a six.
Manager at a tech services company with 10,001+ employees
The support team was responsive and knowledgeable.
Business development executive at Digitaltrack solution Pvt Ltd
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Scalability Issues

Sentiment score
7.8
Microsoft Defender for Office 365 efficiently scales with cloud-native design, ensuring reliable performance and seamless integration for diverse organizations.
Sentiment score
8.0
Trellix Network Detection and Response is scalable and reliable, efficiently handling complex configurations and high bandwidth in large networks.
We have never faced scalability problems, and Microsoft manages it effectively.
Solution Consultant at BIM Group of Companies
Microsoft Defender for Office 365 scales transparently for us, as we grew from 1,000 users to 3,000 users, and we didn't notice much difference.
Chief Architect at a tech vendor with 1,001-5,000 employees
Microsoft Defender for Office 365 scales with the growing needs of my company well.
Senior Client Director and Advisory Service Leader at Crossfuze
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
Cyber Security Engineer at a retailer with 51-200 employees
Trellix Network Detection and Response has handled that growth while continuing to provide consistency, visibility, threat detection, and investigation capabilities.
Business development executive at Digitaltrack solution Pvt Ltd
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Stability Issues

Sentiment score
7.8
Microsoft Defender for Office 365 offers consistently reliable performance with minimal downtime, high user ratings, and manageable minor issues.
Sentiment score
8.0
Trellix Network Detection and Response is highly stable and reliable, with minimal downtime and consistently praised by users.
I would rate the stability of Microsoft Defender for Office 365 as 10 over 10 because it's highly available, it works, and it does the job it is meant to do.
Cloud Solutions Architect at a tech services company with 201-500 employees
I have not experienced any downtime, crashes, or performance issues because of Defender.
Technology Associate at a financial services firm with 51-200 employees
The solution is stable, as we have been using it for the past two years.
Solution Consultant at BIM Group of Companies
In my day-to-day use, it has consistently provided the visibility and detection capabilities we rely on for security monitoring and investigations.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
In our experience, it has had a positive impact on our production environment and has proven to be a dependable part of our security operations.
Business development executive at Digitaltrack solution Pvt Ltd
I encounter no issues with health or reliability when the recommended specifications are met.
CyberSecurity Architect at a comms service provider with 51-200 employees
 

Room For Improvement

Microsoft Defender for Office 365 needs improvements in usability, false positive reduction, phishing detection, scalability, and reporting capabilities.
Trellix needs improved customization, integration, and usability in its detection, reporting, and policy management for enhanced user experience.
The main area for improvement is simplifying the implementation and rollout process.
Infrastructure and Security Lead at Vedanta
Microsoft could improve by offering recommendations for domain spoofing attacks, especially scenarios where DNS records like SPF, DKIM, and DMARC are not properly published.
Solution Consultant at BIM Group of Companies
There is a different console for different things; I just want one consolidated console.
Senior Director, Security Architecture & Engineering at a leisure / travel company with 10,001+ employees
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Network & Security Lead at Net-International
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Presales Manager
 

Setup Cost

Microsoft Defender for Office 365 is cost-effective with E5, costly standalone, requiring careful planning for subscription-based licensing.
Trellix's pricing is considered competitive but expensive, with straightforward licensing and efficient setup, potentially deterring smaller businesses.
We've likely saved 30% of costs.
Designation Chief Consultant at Avtow
Money-wise, it is a part of the Office 365 suite, making it slightly more expensive compared to Trend Micro.
Infrastructure and Security Lead at Vedanta
Microsoft is quite affordable with a lot of features available for any size organization.
Solution Consultant at BIM Group of Companies
Trellix Network Detection and Response is an enterprise-grade security solution, so it represents a significant investment, but we believe that the value it provides in terms of threat detection, network visibility, and incident response justifies the cost.
Business development executive at Digitaltrack solution Pvt Ltd
The pricing model is not transparent, as they do not provide pricing ranges upfront, complicating the evaluation of costs across regions.
CyberSecurity Architect at a comms service provider with 51-200 employees
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Network & Security Lead at Net-International
 

Valuable Features

Microsoft Defender for Office 365 enhances security with AI-driven phishing detection and robust protection across Microsoft 365 services.
Trellix Network Detection and Response enhances security with real-time detection, automation, and integration, reducing manual monitoring by 50%.
It ranks the threats and allows us to prioritize those hitting us the hardest, such as email threats.
Technology support manager at Alfred State College
It provides end-to-end visibility on email threats such as phishing, extending beyond Exchange Online Protection.
Solution Consultant at BIM Group of Companies
The value of the DLP feature is significant to us because we have internal data, sometimes sensitive, and the users may not always be aware of security and privacy, which might lead them to send out information mistakenly to external parties.
Chief Architect at a tech vendor with 1,001-5,000 employees
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Network & Security Lead at Net-International
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Presales Manager
 

Categories and Ranking

Microsoft Defender for Offi...
Ranking in Advanced Threat Protection (ATP)
2nd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
61
Ranking in other categories
Email Archiving (1st), Email Security (2nd), Microsoft Security Suite (8th), Secure Email Gateway (SEG) (2nd)
Trellix Network Detection a...
Ranking in Advanced Threat Protection (ATP)
10th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
54
Ranking in other categories
Network Detection and Response (NDR) (7th)
 

Mindshare comparison

As of June 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Office 365 is 6.5%, down from 14.6% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Microsoft Defender for Office 3656.5%
Trellix Network Detection and Response4.1%
Other89.4%
Advanced Threat Protection (ATP)
 

Featured Reviews

Emeka Ndulu - PeerSpot reviewer
Cloud Solutions Architect at a tech services company with 201-500 employees
Improves threat visibility and response while reducing manual tasks and training users against phishing
I appreciate the attack simulation feature whereby I get to train users and educate them on how to identify phishing emails and spam emails, as well as the anti-spam protection. It gives me visibility into my threat environment and threat landscape to ensure that I am one step ahead of any likelihood of threats within my environment. I get to detect it and respond, so the threat intelligence is very effective. Microsoft security solutions save my time. It saves money because once I protect my environment, I don't lose money. It has decreased my detection time and my time to respond.
Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
Manufacturing Company
16%
Financial Services Firm
13%
Comms Service Provider
9%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise11
Large Enterprise32
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise11
Large Enterprise23
 

Questions from the Community

What is your experience regarding pricing and costs for Microsoft Defender for Office 365?
My experience with pricing, setup, and licensing is that it's actually quite reasonable even on the licensing side as a standalone product. It's very competitive compared to what competitors are ch...
What needs improvement with Microsoft Defender for Office 365?
I think Microsoft Defender for Office 365 can be improved by creating more educational pieces about not just looking for malware. We are seeing a lot more malware-less emails that Defender for Offi...
What is your primary use case for Microsoft Defender for Office 365?
My main use cases for Microsoft Defender for Office 365 include email hygiene.
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...
What needs improvement with FireEye Network Security?
Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...
What is your primary use case for FireEye Network Security?
Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...
 

Also Known As

MS Defender for Office 365
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Microsoft Defender for Office 365 is trusted by companies such as Ithaca College.
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Microsoft Defender for Office 365 vs. Trellix Network Detection and Response and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.