Try our new research platform with insights from 80,000+ expert users

Trellix ESM pros and cons

Vendor: Trellix

3.7 out of 5

37 reviews
75% willing to recommend

1,685 followers

Pros & Cons summary

Trellix ESM offers user-friendly features with many correlations, reports, and dashboards, ensuring efficient threat detection. It provides round-the-clock technical support but lacks continuous security updates, raising relevance concerns. Integration is seamless with some technologies but struggles with Next-Generation Firewalls. Scalability is simplified, yet data display is slow compared to competitors. Trellix ESM's cloud integration is inadequate, requiring improvements. Complex maintenance needs technical support for each update.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Trellix ESM provides numerous pre-built correlations, reports, and dashboards, which are valuable to users.

The adaptive mode allows Trellix ESM to learn autonomously, enhancing its efficiency in blocking unauthorized activities.

Trellix ESM offers reliable technical support available 24/7, ensuring swift resolution of queries.

The search and reporting feature in Trellix ESM is praised for its effectiveness in providing detailed insights.

Trellix ESM significantly improves security and visibility while utilizing fewer human resources.

CONS

Disk space allocation for events is unclear, leaving over 100GB unused in clients.

Performance issues include slow tool operation and outdated data storage, needing upgrades.

McAfee's security updates and support for Trellix ESM have ceased, users struggle with inadequate support.

Trellix ESM lacks advanced detection features, such as integration with two-factor authentication results.

Initial setup of Trellix ESM is challenging and requires technical assistance during system updates.

Trellix ESM Pros review quotes

Chetankumar Savalagimath

Delivery Manager at a tech services company with 1,001-5,000 employees

May 15, 2021

The most valuable feature in ESM is its search and reporting feature. It's really nice.

Read full review

Security Product Manager at a financial services firm with 5,001-10,000 employees

Mar 11, 2019

The most valuable feature is the capability to correlate different events from different platforms that we feed into it.

Read full review

Senior Information Security Manager at a real estate/law firm with 10,001+ employees

Dec 6, 2022

The most valuable feature is for the security operation center because it provides visibility of all traffic within the company infrastructure.

Read full review

Free Report: Trellix ESM Reviews and More

Learn what your peers think about Trellix ESM. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.

852,649 professionals have used our research since 2012.

ES

Security Engineer at PC Store

Nov 15, 2023

The solution's technical support is great.

Read full review

MD

Senior Vice President IT at AS IT Consulting Pvt. Ltd.

May 12, 2025

The strongest part of Trellix ESM is that we get quite good reports.

Read full review

WA

Cyber Security Consultant at a computer software company with 51-200 employees

Aug 8, 2019

This solution integrates easily and very well with other technologies.

Read full review

Senior Security Specialist at a manufacturing company with 10,001+ employees

May 5, 2021

It is user-friendly. The notification part of McAfee ESM is very easy.

Read full review

reviewer1427199

Information Security Officer at a tech services company with 51-200 employees

Sep 27, 2020

It is easy to use and deploy. It comes with user-friendly manuals.

Read full review

CM

CEO at Inteligencia

Mar 11, 2019

The most valuable feature is that if the scanning does find something, it quarantines it. Then you can decide what you are going to do with it.

Read full review

Information Security Analyst at a tech services company with 501-1,000 employees

Jul 4, 2016

The most valuable feature for us is that it comes with many correlations, reports, and dashboards already available. It's also very easy to use.

Read full review

Show 10 more reviews (out of 30)

Trellix ESM Cons review quotes

Chetankumar Savalagimath

Delivery Manager at a tech services company with 1,001-5,000 employees

May 15, 2021

Cloud integration has room for improvement because they're not full-fledged to integrate with the cloud solutions that come. They use different integration platforms to bring in data, and that needs to be improved.

Read full review

Security Product Manager at a financial services firm with 5,001-10,000 employees

Mar 11, 2019

There are some banking and transactional cases that are local, South America transactions. I would like to see them add features that can be used locally, to make those transactions more reliable.

Read full review

Senior Information Security Manager at a real estate/law firm with 10,001+ employees

Dec 6, 2022

Tech support is required each time there is a system update of the solution.

Read full review

Free Report: Trellix ESM Reviews and More

Learn what your peers think about Trellix ESM. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.

852,649 professionals have used our research since 2012.

ES

Security Engineer at PC Store

Nov 15, 2023

The product's stability is an area of concern where improvements are required.

Read full review

MD

Senior Vice President IT at AS IT Consulting Pvt. Ltd.

May 12, 2025

We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that.

Read full review

WA

Cyber Security Consultant at a computer software company with 51-200 employees

Aug 8, 2019

We cannot add new data sources to the most recent version.

Read full review

Senior Security Specialist at a manufacturing company with 10,001+ employees

May 5, 2021

It is not a very advanced solution, and it is for very generic use cases. It cannot cope with the advanced requirements that we're going to have. For example, for multiple authentication failures, it is still based on Windows events for detecting multiple login failures, whereas other companies are going beyond and working on implementing two-factor authentication. It is time to correlate the two-factor authentication results with authentification failures, which is not happening with McAfee ESM. The performance of the tool should be improved because it is very slow. The data display on the console is very slow in McAfee ESM. Its data storage is still old-fashioned, and it should be improved and upgraded to the latest versions. They have to come up with some new ideas to match what other leaders in the same domain are doing. For example, in Splunk, when you search for information for the last 60 days or five months, it quickly shows the information, but that is not the case with McAfee. The results should be quicker and faster on the console. They should integrate some additional features such as User Behavior Analytics (UBA) and automation. The threat intelligence part should also be improved on McAfee.

Read full review

reviewer1427199

Information Security Officer at a tech services company with 51-200 employees

Sep 27, 2020

McAfee is no more providing security updates on this product, and the enhancements to this product seem to have stopped. Moreover, we don't get proper support, and we struggle to get its support. It would be good if they can add some AI engine and out of the box use cases because it is currently limited to the same scenario and the same setup. I have done a POC for Securonix, LogRhythm. These products are much more ahead as compared to McAfee ESM. They have included multiple modules in the same solution. Correlation is very easy. If McAfee ESM can improve, especially in such implementations, then I believe it would be much better.

Read full review

CM

CEO at Inteligencia

Mar 11, 2019

The only issue I have with McAfee is the amount of computer resources that it takes... it's definitely impacting some of the other applications that are running on a computer at the same time.

Read full review

Information Security Analyst at a tech services company with 501-1,000 employees

Jul 4, 2016

The disk space needed for events is not clear. In all clients, we had at least more than 100GB free that we could not use.

Read full review

Show 10 more reviews (out of 30)

Product Categories

Product Categories

Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons

Microsoft Sentinel vs Trellix ESM

Splunk Enterprise Security vs Trellix ESM

IBM Security QRadar vs Trellix ESM

Elastic Security vs Trellix ESM

LogRhythm SIEM vs Trellix ESM

Fortinet FortiSIEM vs Trellix ESM

Securonix Next-Gen SIEM vs Trellix ESM

Exabeam vs Trellix ESM

Stellar Cyber Open XDR vs Trellix ESM

ManageEngine EventLog Analyzer vs Trellix ESM

ArcSight Enterprise Security Manager (ESM) vs Trellix ESM

SolarWinds Security Event Manager vs Trellix ESM

Trellix Helix Connect vs Trellix ESM

Snare vs Trellix ESM

Graylog Security vs Trellix ESM

See all alternatives

Product Categories

Product Categories

Security Information and Event Management (SIEM)

Popular Comparisons

Popular Comparisons

Microsoft Sentinel vs Trellix ESM

Splunk Enterprise Security vs Trellix ESM

IBM Security QRadar vs Trellix ESM

Elastic Security vs Trellix ESM

LogRhythm SIEM vs Trellix ESM

Fortinet FortiSIEM vs Trellix ESM

Securonix Next-Gen SIEM vs Trellix ESM

Exabeam vs Trellix ESM

Stellar Cyber Open XDR vs Trellix ESM

ManageEngine EventLog Analyzer vs Trellix ESM

ArcSight Enterprise Security Manager (ESM) vs Trellix ESM

SolarWinds Security Event Manager vs Trellix ESM

Trellix Helix Connect vs Trellix ESM

Snare vs Trellix ESM

Graylog Security vs Trellix ESM

See all alternatives

Related questions

36

Has anyone got experience in deployment of a SIEM solution?

27

IBM QRadar is rated above competitors (McAfee, Splunk, LogRhythm) in Gartner's 2020 Magic Quandrant. Agree/Disagree?

260

What Solution for SIEM is Best To Be NIST 800-171 Compliant?

54

When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?

128

What are the main differences between Nessus and Arcsight?

6

What's The Best Way to Trial SIEM Solutions?

197

Which is the best SIEM solution for a government organization?

1,117

What is the difference between IT event correlation and aggregation?

143

What Is SIEM Used For?

22

RSA-EMC vs. other SIEM products?