No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender Threat Intelligence [EOL] vs Trellix Advanced Threat Defense comparison

Why PeerSpot?
Microsoft and Trellix are both solutions in the Advanced Threat Protection (ATP) category. Additionally, 93% of Microsoft users are willing to recommend the solution, compared to 76% of Trellix users who would recommend it.
Trellix Advanced Threat Def...
Read 9 Trellix Advanced Threat Defense reviews
  • 2,071 Views
  • 1,740 Comparison Views
76% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 16, 2025

Trellix Advanced Threat Defense and Microsoft Defender Threat Intelligence [EOL] compete in the cybersecurity market, focused on detecting and neutralizing advanced threats. Trellix appears to have an edge in pricing and support, offering a favorable cost-benefit ratio, while Microsoft Defender's extensive features make it a compelling choice.

Features: Trellix Advanced Threat Defense features comprehensive threat analysis, rapid incident response, and swift actionable insights. Microsoft Defender Threat Intelligence [EOL] offers extensive data integration, detailed threat intelligence, and a global review of malicious code with remediation.

Room for Improvement: Trellix could enhance integration ease and provide more detailed threat intelligence. Its user interface might benefit from additional refinement. Microsoft Defender Threat Intelligence [EOL] could improve its cost-effectiveness, streamline user experience for non-Microsoft environments, and simplify integration for first-time users.

Ease of Deployment and Customer Service: Microsoft Defender Threat Intelligence [EOL] integrates seamlessly within the Microsoft ecosystem, facilitating smoother deployment. Trellix deployment, while straightforward, may take longer in unique environments. Trellix is known for responsive support, whereas Microsoft provides comprehensive documentation and community resources.

Pricing and ROI: Trellix Advanced Threat Defense offers competitive setup costs, focusing on value-driven investment with high ROI through efficient threat management. Microsoft Defender Threat Intelligence [EOL], despite higher initial costs, justifies the investment with rich features and integration benefits, potentially reducing long-term expenses.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Advanced Threat Protection (ATP) Report (Updated: October 2026).
Buyer's Guide
Advanced Threat Protection (ATP)
October 2026
Download the complete report
Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender Threat I...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Trellix Advanced Threat Def...
Average Rating
7.8
Reviews Sentiment
5.6
Number of Reviews
9
Ranking in other categories
Advanced Threat Protection (ATP) (21st)
 

Featured Reviews

Charles Mokoena - PeerSpot reviewer
Charles Mokoena
Mobility & IT Project Manager at Voicevine Pty Ltd
Has strengthened our ability to detect threats in real time and improved internal security decision-making
The features that I find most valuable in Microsoft Defender Threat Intelligence include the Sentinel part of it. There are several features we've looked at, including Sentinel as well as extended Defender, which is XDR. I've used those two, and that's what I've found quite useful for us, especially in the hardening and analysis part of the whole threat analysis. We use the real-time threat detection features in Microsoft Defender Threat Intelligence. If it wasn't for that real-time threat detection on the vulnerability, I think we would not have survived the attack. The integration capabilities of Microsoft Defender Threat Intelligence with other Microsoft security tools have benefited our organization's threat management process by initially being quite a challenge, especially coming from other security tools such as Fortinet and Check Point. However, once you've gotten used to it, it's quite easy and user-friendly. The dashboard, especially the threat analysis dashboard, is quite detailed in terms of providing a view of which areas in our environment need attention, making it quite useful.
Read full review
PP
Philippe Panardie
RSSI at SDIS49
Ensuring long-term reliability while seeking internal email management enhancements
Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution blocks incoming threats on the local PC or any cloud-based threats."
"Defender exceeds expectations, especially for someone who's flipping from CrowdStrike or Falcon XR; this is night and day."
"It is very scalable. There are approximately 2,000 endpoints and up to 200 servers in our company."
"They have a very transparent roadmap for the product."
"The product’s most valuable feature is the ability to provide threat detection and protection simultaneously."
"The solution is well integrated with other Microsoft security products."
"The tool is managed from the cloud, because of which the maintenance is very low."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."
More Microsoft Defender Threat Intelligence [EOL] pros
"This solution is very easy to use and requires little to no training."
"Provides good exfiltration, and is an all-in-one product."
"I see ROI, as it stops in excess of twenty-five malware events per month, all of which could be critical to the business."
"It was easy to set up initially."
"It is stable and reliable."
"I recommend this solution because of its ease of use."
"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."
"It is very scalable."
More Trellix Advanced Threat Defense pros
 

Cons

"Some of the customization features could be improved by providing a portion of it as open source."
"It would be beneficial to enhance the pricing structure and make it more affordable."
"The software is expensive."
"In my opinion, the main area of improvement for Microsoft Defender Threat Intelligence is related to how information is conveyed."
"The solution could be more stable and precise because, at times, the threats detected are not legitimate."
"One area that can be improved is reducing false positives."
"The price could be improved."
"While the current setup meets our needs, Microsoft can constantly improve customization and adaptability to rapidly evolving cybersecurity threats."
More Microsoft Defender Threat Intelligence [EOL] cons
"We'd like them to be better at dealing with script threats."
"This solution needs to be made "cloud ready"."
"Lacks remote capabilities not dependent on the internet."
"Some of our customers have mentioned the lack of a tool that would allow for remote capabilities without being attached to the internet."
"I would like to see future versions of the solution incorporate artificial intelligence technology."
"The only problem we can have is that as we have no API interface, there is no inspection of internal mail."
"The support on their side is not readily available. It takes a while."
"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."
More Trellix Advanced Threat Defense cons
 

Pricing and Cost Advice

"There is a need to make yearly payments towards the licensing charges attached to the product."
"It is an expensive product."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"I use the product's default version, which is a free one and not the licensed version."
"Considering Microsoft is constantly changing licensing, I would give it a seven out of ten. It can be difficult to get your head around it, especially for small to medium-sized enterprises (SMEs)."
"The solution is relatively expensive; however, our status as a gold partner provides us with several complimentary licenses, which offsets the cost."
"The product’s pricing is worth it."
"The solution can be licensed, but most users would already have it in their Office 365 license."
More Microsoft Defender Threat Intelligence [EOL] pricing and cost advice
"The product is expensive, but it is better than the rest of them in the industry."
"Our licensing fees for this solution are approximately one million dollars per year."
report
See which vendors are best for you
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
See recommendations
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Outsourcing Company
14%
Manufacturing Company
10%
Educational Organization
8%
Construction Company
15%
Outsourcing Company
15%
Financial Services Firm
13%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise2
Large Enterprise15
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise5
 

Questions from the Community

What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
See all answers
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
See all answers
What advice do you have for others considering Microsoft Defender Threat Intelligence?
I will recommend Microsoft Defender Threat Intelligence because it is a complete automation solution for threat production detection and an end-to-end solution for client security. Unfortunately, s...
See all answers
What needs improvement with McAfee Advanced Threat Defense?
I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...
See all answers
What is your primary use case for McAfee Advanced Threat Defense?
We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...
See all answers
What advice do you have for others considering McAfee Advanced Threat Defense?
Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it'...
See all answers
 

Comparisons

CrowdStrike Falcon vs Microsoft Defender Threat Intelligence [EOL] Logo
CrowdStrike Falcon vs Microsoft Defender Threat Intelligence [EOL]
Compared 5% of the time
Palo Alto Networks VM-Series vs Microsoft Defender Threat Intelligence [EOL] Logo
Palo Alto Networks VM-Series vs Microsoft Defender Threat Intelligence [EOL]
Compared 4% of the time
Recorded Future vs Microsoft Defender Threat Intelligence [EOL] Logo
Recorded Future vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
Microsoft Defender for Endpoint vs Microsoft Defender Threat Intelligence [EOL] Logo
Microsoft Defender for Endpoint vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
SOCRadar Extended Threat Intelligence vs Microsoft Defender Threat Intelligence [EOL] Logo
SOCRadar Extended Threat Intelligence vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
More Microsoft Defender Threat Intelligence [EOL] Competitors
NetWitness Platform vs Trellix Advanced Threat Defense Logo
NetWitness Platform vs Trellix Advanced Threat Defense
Compared 18% of the time
Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense Logo
Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense
Compared 8% of the time
Fortinet FortiSandbox vs Trellix Advanced Threat Defense Logo
Fortinet FortiSandbox vs Trellix Advanced Threat Defense
Compared 8% of the time
Digital Guardian vs Trellix Advanced Threat Defense Logo
Digital Guardian vs Trellix Advanced Threat Defense
Compared 6% of the time
Check Point Infinity vs Trellix Advanced Threat Defense Logo
Check Point Infinity vs Trellix Advanced Threat Defense
Compared 6% of the time
More Trellix Advanced Threat Defense Competitors
 

Product Reports

Buyer's Guide
Microsoft Defender Threat Intelligence [EOL]
October 2026
Microsoft Defender Threat Intelligence [EOL] reportDownload Microsoft Defender Threat Intelligence [EOL] product report
Buyer's Guide
Trellix Advanced Threat Defense
October 2026
Trellix Advanced Threat Defense reportDownload Trellix Advanced Threat Defense product report
 

Also Known As

No data available
McAfee Advanced Threat Defense
 

Overview

Microsoft Defender Threat Intelligence [EOL] offers comprehensive security by integrating with Microsoft platforms, retaining data within tenants, and providing real-time threat detection and collaboration. It's designed for both enterprise and SMB environments.

Microsoft Defender Threat Intelligence enhances cybersecurity operations by integrating with Azure Sentinel and Microsoft products like Intune and Azure. Its capabilities in endpoint, email, and cloud security ensure robust protection against a wide range of threats. With global threat data, anti-spam features, and customization options, it addresses threat prevention and vulnerability management. Seamless scaling and proactive incident prevention make it a reliable choice for enterprises looking for collaborative, efficient security management.

What are the key features of Microsoft Defender Threat Intelligence?
  • Integration with Microsoft Products: Enhances usability by working seamlessly with Intune and Azure.
  • Real-time Threat Detection: Quickly identifies and responds to emerging threats.
  • Email and Cloud Security: Protects critical communication channels and cloud environments.
  • Global Threat Data: Offers extensive threat intelligence from various regions.
  • Comprehensive Reporting: Provides detailed insights into security activities and incidents.
  • Automation and Insights: Streamlines threat management with advanced automation capabilities.
What benefits should users look for in reviews?
  • Proactive Incident Prevention: Reduces the risk of breaches by anticipating threats.
  • Seamless Deployment: Ensures efficient integration within existing infrastructure.
  • Customization: Flexible settings to meet specific security requirements.
  • Collaboration Across Regions: Enables coordinated defense strategies globally.
  • Efficient Security Management: Improves operations through automated and integrated systems.

Microsoft Defender Threat Intelligence is crucial for industries that value data retention and comprehensive threat analyses in safeguarding their operations. Financial institutions, healthcare providers, and technology firms implement this solution to secure their environments by updating security protocols and ensuring compliance with various industry standards. The focus on integration and customization helps these organizations adapt to evolving cybersecurity threats effectively.

Microsoft

Trellix Advanced Threat Defense offers efficient threat detection and automatic threat remediation, featuring seamless management and integration with operating systems and extensions.

Providing robust malware defense, Trellix Advanced Threat Defense is easy to set up and use. Its components work collaboratively, with standout features like behavioral analysis, retro-inspection, and ePolicy Orchestration. Despite its strengths, users suggest improvements in Active Directory integration, cloud readiness, artificial intelligence, and faster sandboxing. The API interface and scalability need enhancement, while better compatibility with platforms like Cisco could elevate its function. Effective for server and endpoint security, it effectively blocks threats like WannaCry and disperses attack data through the DXL client quickly.

What are the notable features of Trellix Advanced Threat Defense?
  • Management and Automatic Threat Remediation: Facilitates seamless management and handling of threats.
  • Effective Threat Detection and Response: Delivers efficient and reliable threat detection capabilities.
  • Behavioral Analysis and Retro-Inspection: Offers advanced analysis for comprehensive threat identification.
  • ePolicy Orchestration: Streamlines processes for enhanced threat management.
  • Scalability and Price: Provides a stable and scalable solution at a competitive price point.
What key benefits can be identified from reviews?
  • Ease of Use and Setup: Known for its straightforward implementation and user-friendly interface.
  • Integration Capabilities: Works well with different operating systems and technologies like Palo Alto firewalls.
  • Threat Protection Efficiency: Proven effectiveness in stopping threats such as WannaCry.
  • Rapid Attack Information Dissemination: Utilizes the DXL client for quick data sharing.

Trellix Advanced Threat Defense is widely used across numerous industries for server and desktop protection, ensuring endpoint security and halting attacks without failure. Its integration with diverse technologies enhances protection in varied environments, making it a valuable tool in enterprise security management.

Trellix
 

Sample Customers

Information Not Available
The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust
Buyer's Guide
Advanced Threat Protection (ATP)
October 2026
Download Free Report
Find out what your peers are saying about Palo Alto Networks, Trellix, Microsoft and others in Advanced Threat Protection (ATP). Updated: October 2026.
DOWNLOAD NOW
920,769 professionals have used our research since 2012.
See our list of best Advanced Threat Protection (ATP) vendors.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.