No more typing reviews! Try our Samantha, our new voice AI agent.

Trellix Network Detection and Response vs WatchGuard XTM [EOL] comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Trellix Network Detection a...
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
53
Ranking in other categories
Advanced Threat Protection (ATP) (2nd), Network Detection and Response (NDR) (4th)
WatchGuard XTM [EOL]
Average Rating
8.0
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.
Generalm4545 - PeerSpot reviewer
General Manager- IT & Automation - Serum at a pharma/biotech company with 1,001-5,000 employees
Protects from attack software and hacking but it doesn't provide the reports in a readable format
In my opinion, image clarity is very important, because I don't get the proper image product on reports. This means that functionality is not there. My engineer does not know how he can replace an order. We attach a log after any kind of keys using a utility instead. For the internet policies that we are implementing, the policy should be based on proper protocols. We use the default policies and there are a number of third-party protocols that appear here. Management with WatchGuard XTM means that out of policy is the problem from our side. In this way, we can not do effective services for people with this one. The policy definition with WatchGuard XTM is not proper for all use case requirements. I've got weekly business reports that I am expecting attachments with from WatchGuard XTM that display data for all kinds of consideration which should be required. Main User Functionality Level Order must adhere to using the admin functionality on the registry, or else our users publish their own name. Maybe these recommendations are irrelevant, but I say that the issue to improve most with WatchGuard XTM is the Main User Function.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If we are receiving spam emails, or other types of malicious email coming from a particular email ID, then we are able to block them using this solution."
"We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement and that nothing else was infected. It helped us correlate the events and feel confident in our containment."
"We see ROI in the sense that we don't have to react because it stops anything from hurting the network. We can stop it before we have a bigger mess to clean up."
"Trellix Network Detection and Response has positively impacted our organization by making our security team more confident and responsible, knowing that the network is being watched all the time, allowing us to respond to threats much faster than we used to."
"We have seen several positive impacts since implementing Trellix Network Detection and Response, particularly in the areas of threat detection, intelligence, response, and operational efficiency."
"Improved our systems and our customers' by providing better malware protection, defense against zero-day threats, and improved network security."
"FireEye is so effective at blocking attacks that we were even able to defer an upgrade of our IPS solution, saving a significant amount of money."
"Once we had a chance to do our own due diligence, it was clear that there is really nothing else that compares with the FireEye appliance."
"This product has helped in securing my SQL database and web applications from DDoS attacks and SQL injections, improved my network speed, and helped me to set specific policies for specific applications which I couldn't do with other products."
"We now have the capability to manage traffic better by putting non-business critical traffic into the small bucket, while business critical traffic gets higher priority."
"Flawless. I have had my firebox for 3 years now and never had an issue with it."
"For the current network demand, I think the product is worth buying as it is not too expensive and it has almost all the features that I need."
"It configures in all-in-one place.​"
"Setup and configuration is straightforward with excellent management interface."
"There is a site-to-site VPN configuration between others people."
"This product is solid and has a great reputation behind it."
 

Cons

"The solution's support needs to improve their support."
"It would be a good idea if we could get an option to block based upon the content of an email, or the content of a file attachment."
"Stability issues manifested in terms of throughput maximization."
"Improvement-wise, the initial setup, fine-tuning, and learning can take effort."
"The initial setup was complex because of the nature of our environment. When it comes to the type of applications and functions which we were looking at in terms of identifying malicious threats, there would be some level of complexity, if we were doing it right."
"As far as future inclusions, it would be useful to display more threat intelligence, such as the actual area of the threat and the origin of the web crawling (Tor and Dark Web)."
"It is not a very secure product."
"Its documentation can be improved. The main problem that I see with FireEye is the documentation. We are an official distributor and partner of FireEye, and we have access to complete documentation about how to configure or implement this technology, but for customers, very limited documentation is available openly. This is the area in which FireEye should evolve. All documents should be easily available for everyone."
"I think the anti-Spam feature, and the real time log to inspect the bandwidth users both need improving."
"VPN tunnel lost packet."
"Initially WatchGuard assured us regarding endpoint security, but we are not sure that the product provides endpoint security features to its full extent."
"Sometimes we have had issues with the stability of the product."
"One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format."
"The VPN errors are not helpful when troubleshooting."
"The issue that we had was that the integration with Active Directory was a bit of a hassle."
"Early models of the XTM2 (e.g. 21, 22, 23) line lacked sufficient memory, and caused a number of issues that required frequent reboots."
 

Pricing and Cost Advice

"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."
"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."
"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
"The user fee is not as high but the maintenance fee is expensive."
"Because of what the FireEye product does, it has significantly decreased our mean time in being able to identify and detect malicious threats. The company that I work with is a very mature organization, and we have seen the meantime to analysis decrease by at least tenfold."
"When I compare this solution to its competitors in the market, I find that it is a little expensive."
"It's an expensive solution."
"Pricing and licensing are reasonable compared to competitors."
"The licensing and renewal is very expensive."
"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.​"
"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."
"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
16%
Manufacturing Company
16%
Financial Services Firm
11%
Comms Service Provider
7%
Construction Company
13%
Financial Services Firm
11%
Outsourcing Company
11%
Marketing Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise11
Large Enterprise23
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise7
Large Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...
What needs improvement with FireEye Network Security?
Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...
What is your primary use case for FireEye Network Security?
Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...
Ask a question
Earn 20 points
 

Also Known As

FireEye Network Security, FireEye
No data available
 

Overview

 

Sample Customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense
Find out what your peers are saying about Palo Alto Networks, Trellix, Microsoft and others in Advanced Threat Protection (ATP). Updated: October 2026.
920,769 professionals have used our research since 2012.