Trellix Advanced Threat Defense vs Trellix Network Detection and Response comparison

Trellix Advanced Threat Defense vs. Trellix Network Detection and Response

Download the complete report

Helped 893,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

23rd

Average Rating

7.8

Reviews Sentiment

5.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Network Detection a...

Ranking in Advanced Threat Protection (ATP)

17th

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Network Detection and Response (NDR) (13th)

Mindshare comparison

As of May 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Trellix Advanced Threat Defense is 2.1%, up from 1.3% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Mindshare Distribution
Product	Mindshare (%)
Trellix Network Detection and Response	4.1%
Trellix Advanced Threat Defense	2.1%
Other	93.8%

Advanced Threat Protection (ATP)

Featured Reviews

Philippe Panardie

RSSI at SDIS49

Ensuring long-term reliability while seeking internal email management enhancements

Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.

Read full review

Jose Vargas

Agente De Servicios Técnicos at a computer software company with 11-50 employees

Has improved threat detection workflows and supports seamless customer monitoring

The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"If a system admin can put in the patience to read and constantly update the ePO system in terms of rules, enforcing them at regular intervals, you can safely go to sleep every night."

"It is very scalable."

"The most valuable features are the administration console and its detection and response module."

"Provides good exfiltration, and is an all-in-one product."

"The product is expensive, but it is better than the rest of them in the industry."

"The most valuable features are the administration console and its detection and response module."

"I recommend this solution because of its ease of use."

"It is stable and reliable."

More Trellix Advanced Threat Defense pros

"The product has helped improve our organization by being easy to use and integrate, saving time, trouble, and money."

"The solution can scale."

"Application categorization is the most valuable feature for us. Application filtering is very interesting because other products don't give you full application filtering capabilities."

"Improved our systems and our customers' by providing better malware protection, defense against zero-day threats, and improved network security."

"The solution has allowed for growth and improvement in our information security and security operations teams."

"It is a good product to implement, especially where the existing technology fails to detect zero day attacks."

"If we are receiving spam emails, or other types of malicious email coming from a particular email ID, then we are able to block them using this solution."

"The installation phase was easy."

More Trellix Network Detection and Response pros

Cons

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

"The support on their side is not readily available. It takes a while."

"I would like to see future versions of the solution incorporate artificial intelligence technology."

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

"Some of our customers have mentioned the lack of a tool that would allow for remote capabilities without being attached to the internet."

"We'd like them to be better at dealing with script threats."

"It was not complex, but there are things to look out for, because it's an intense product. It scans intensely and there are major obstacles to overcome if it scans while users are using a network, then it is not a good thing."

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

More Trellix Advanced Threat Defense cons

"It doesn't connect with the cloud, advanced machine learning is not there. A known threat can be coming into the network and we would want the cloud to look up the problem. I would also like to see them develop more file replication and machine learning."

"On a scale of one to 10, with one being the worst and 10 being the best, I would you rate this product an 8. From a security perspective, it's pretty decent. It's just that I have seen it miss some semi loads or triggers when it's integrated with other products."

"I heard that FireEye recently was hacked, and a lot of things were revealed."

"As far as future inclusions, it would be useful to display more threat intelligence, such as the actual area of the threat and the origin of the web crawling (Tor and Dark Web)."

"Based on what we deployed, they should emphasize the application filtering and the web center. We need to look deeper into the SSM inspection. If we get the full solution with that module, we don't need to get the SSM database from another supplier."

"A lot of false positives."

"The problem with FireEye is that they don't allow VM or sandbox customization. The user doesn't have control of the VMs that are inside the box."

"Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents."

More Trellix Network Detection and Response cons

Pricing and Cost Advice

"Our licensing fees for this solution are approximately one million dollars per year."

"The product is expensive, but it is better than the rest of them in the industry."

"We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."

"The tool is a bit pricey."

"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

"Its price is a bit high. A small customer cannot buy it. Its licensing is on a yearly basis."

"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."

"FireEye is comparable to other products, such as HX, but seems expensive. It may cause us to look at other products in the market."

"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."

"Pricing and licensing are reasonable compared to competitors."

More Trellix Network Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

893,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

16%

Comms Service Provider

12%

Outsourcing Company

11%

Financial Services Firm

14%

Comms Service Provider

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	4
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	21
Midsize Enterprise	8
Large Enterprise	19

Questions from the Community

What needs improvement with McAfee Advanced Threat Defense?

I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...

What is your primary use case for McAfee Advanced Threat Defense?

We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...

What advice do you have for others considering McAfee Advanced Threat Defense?

What do you like most about FireEye Network Security?

We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...

What is your experience regarding pricing and costs for FireEye Network Security?

My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.

What needs improvement with FireEye Network Security?

I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...

Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense

Comparisons

Compared 11% of the time

Digital Guardian vs Trellix Advanced Threat Defense

Compared 10% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 10% of the time

Check Point Infinity vs Trellix Advanced Threat Defense

Compared 9% of the time

Palo Alto Networks WildFire vs Trellix Advanced Threat Defense

Compared 5% of the time

More Trellix Advanced Threat Defense Competitors

Palo Alto Networks WildFire vs Trellix Network Detection and Response

Compared 6% of the time

Fortinet FortiSandbox vs Trellix Network Detection and Response

Compared 6% of the time

Vectra AI vs Trellix Network Detection and Response

Compared 4% of the time

Darktrace vs Trellix Network Detection and Response

Compared 3% of the time

Hillstone Cloud Sandbox vs Trellix Network Detection and Response

Compared 3% of the time

More Trellix Network Detection and Response Competitors

Product Reports

Trellix Advanced Threat Defense

Download Trellix Advanced Threat Defense product report

Trellix Network Detection and Response

Download Trellix Network Detection and Response product report

Trellix Network Detection and Response report

Also Known As

McAfee Advanced Threat Defense

FireEye Network Security, FireEye

Overview

Trellix Advanced Threat Defense offers efficient threat detection and automatic threat remediation, featuring seamless management and integration with operating systems and extensions.

Providing robust malware defense, Trellix Advanced Threat Defense is easy to set up and use. Its components work collaboratively, with standout features like behavioral analysis, retro-inspection, and ePolicy Orchestration. Despite its strengths, users suggest improvements in Active Directory integration, cloud readiness, artificial intelligence, and faster sandboxing. The API interface and scalability need enhancement, while better compatibility with platforms like Cisco could elevate its function. Effective for server and endpoint security, it effectively blocks threats like WannaCry and disperses attack data through the DXL client quickly.

What are the notable features of Trellix Advanced Threat Defense?

Management and Automatic Threat Remediation: Facilitates seamless management and handling of threats.
Effective Threat Detection and Response: Delivers efficient and reliable threat detection capabilities.
Behavioral Analysis and Retro-Inspection: Offers advanced analysis for comprehensive threat identification.
ePolicy Orchestration: Streamlines processes for enhanced threat management.
Scalability and Price: Provides a stable and scalable solution at a competitive price point.

What key benefits can be identified from reviews?

Ease of Use and Setup: Known for its straightforward implementation and user-friendly interface.
Integration Capabilities: Works well with different operating systems and technologies like Palo Alto firewalls.
Threat Protection Efficiency: Proven effectiveness in stopping threats such as WannaCry.
Rapid Attack Information Dissemination: Utilizes the DXL client for quick data sharing.

Trellix Advanced Threat Defense is widely used across numerous industries for server and desktop protection, ensuring endpoint security and halting attacks without failure. Its integration with diverse technologies enhances protection in varied environments, making it a valuable tool in enterprise security management.

Trellix

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?

Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
APTs Detection: Detects advanced persistent threats through sophisticated techniques.
MVX Engine: Uses virtual machines for behavioral analysis.
Sandboxing: Adds a layer of threat protection.
Real-Time Response: Offers immediate threat mitigation and context.
User-Friendly Dashboard: Enhances visibility with application filtering.

What are the benefits of Trellix Network Detection and Response?

Enhanced Usability: Integrates easily with other platforms for seamless operations.
Detailed Context: Real-time packet capture provides in-depth threat analysis.
Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix

Sample Customers

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Trellix Advanced Threat Defense vs. Trellix Network Detection and Response