Likelihood to Recommend This is pretty good AV product - lightweight, easy to install, and easy on system resources. It will take some getting used to on the end user side, it doesn't scan in a traditional way, and it does not have a taskbar icon so it hard to know if it's working or installed. My only complaint would be the false positives which I know every AV system has, but the problem with Barkly is that it alerts the users with a message (which they freak out about) and it alerts IT with an email. Again, not a major issue, but it can be annoying until it is overridden. The override process is super easy though, so its again, not a big deal.
Read full review Trellix (FireEye + McAfee)
It’s a dedicated Network Advanced Threat Detection and Prevention solution. Easy maintenance and low operating costs fit perfectly for SMEs. Variety of appliance selection makes NX the perfect choice for large enterprises. As it’s a dedicated solution with its own appliance, price is higher compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing the threat intel exchange on the network side reverse is the true. Sizing is important before the purchase, if you select a low end model for a busy network you lose your initial investment. For multiple NX deployments I highly recommend CMS. Without CMS you’ll lose the threat intel exchange and this will negatively reduce the risk scores.
Read full review Pros Customer Service. Usually, I'd put the technical details up front, and they're good with that too. But the service from pre-sales all the way through onboarding and continued account management is top tier. Our onboarding schedule got messed up, partly because of us, but that was rather minor. I always get prompt replies to any tickets, and they've even reached out to discuss my feature requests. When it comes to security, it's critical to have a responsive team, and they've got it. Detection seems good. It's hard to quantify exactly, but it seems that they always detect the bad actors. And when we get an alert, they include a bunch of details so we know what kind of scan they're trying to do, how far they got, etc. You can't prevent everyone from doing a scan on your IP, but it gives you a really good idea of where your soft spots might be. And if you're getting those low-level alerts, it's a reminder that it's there and working if you have a major event too. Very easy setup. This goes back to their customer support to some extent, as they walk you through all the steps required. But it's also about their technical solution, it's not so overly complex that it's fragile, nor does it take a great deal of time to deploy. And it's been zero effort to maintain since then. Read full review Trellix (FireEye + McAfee)
Advanced detection of targeted attacks. Mandiant team effort is a big plus. Inline mitigation capabilities particularly well. Different deployment models for specific needs. License and information sharing selection 1 way or 2 way mode. Frequent updates. Low false positive rates. FireEye sandboxing is immune to sandboxing attacks. Central management (CMS) capabilities for managing several NX's. Extra IPS/IDS functionality in the product. Smartvision specific to lateral movement detection. Upgrades and updates with zero down time. Local FireEye support is superb. Multiple deployment scenarios (span, inline) in the same NX for different interface pairs. SSL inspection support. No need to maintain, build or updates the images. It's highly automatic. Read full review Cons The interface is a little lacking from a search perspective but its not really meant for us to have to do the work Read full review Trellix (FireEye + McAfee)
Very first detected APT sample can pass the NX even it's inline blocking mode. Performance optimization for busy networks is cumbersome. CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization. Constant limitations of tcpdump/ packet capture for 10G interfaces. IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures. It's not a full NDR solution or a UBA solution. Lack of device or user mapping. Forensics is based on the specific APT. May not provide the whole story and need some additional tools. You cannot make manual submission to NX (needs AX). You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken). Read full review Alternatives Considered I was using Alert Logic Insight for myself to improve my skills and ability to it. My organization was not happy using our previous website security program so I recommended for them to use this software. It has been more than 1 year and still, they are using this program without having any problem so far.
Read full review Trellix (FireEye + McAfee)
FireEye NX is a solid product. It gives you sustainable security throughout the organization. NX detection engines are more capable compared to others. Its catch rate is higher, FP rate is lower, [and] speed is awesome. NX can work for highly regulated environments with 1 way solution. Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the FireEye NX for its pinpoint detection capabilities. Local and partner support is exceptional.
Read full review Return on Investment Return on Investment is measured in how protected our reputation is and Alert Logic contributes to this is a large way. Alert Logic provides excellent information security assurance to the business and allows us to feel more proactive. Read full review Trellix (FireEye + McAfee)
As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities. Security score based on detection/prevention metrics [is] very high ensuring the highest level of security. APTs in our region successfully detected and mitigated by the NX. For the ROI, in a six month period FireEye is paying off its [investment]. One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years. Read full review ScreenShots Trellix Network Security Screenshots