Likelihood to Recommend If a colleague was looking to tighten down their network I can easily recommend Snort to them. It gives you some more peace of mind knowing that its always scanning traffic for malicious looking code. Even things your major firewalls and security hardware might miss, Snort has picked up. Its an easy recommendation for me.
Read full review Trellix (FireEye + McAfee)
It provides great web security and will protect your devices against viruses and malware when paired with other security software and hardware. For instance, we have multiple layers of security set up so if McAfee misses something then one of our other barriers will catch the infection or intrusion before it reaches the network. I would not suggest using this product as a standalone agent because I do not think it will be as effective when working by itself. The dashboard also makes it convenient to manage devices, policies, and settings from wherever you are so it's an ideal solution for any IT department to use. I would just suggest using something else as a backup so your network isn't left vulnerable.
Read full review Pros IPS detection. DoS detection. Packet logging. Read full review Trellix (FireEye + McAfee)
Provides high fidelity alerting. Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass. Provides alert telemetry across on-disk and in-memory attacks. Supports many additional 'bolt-on' modules to provide additional alert context or capabilities. Read full review Cons At times can be unstable with Cisco bugs, require frequent upgrading. FTD images that are being pushed for ASAs are less efficient from an administration standpoint, no CLI. Read full review Trellix (FireEye + McAfee)
The amount of false detections especially the negative ones needed to be reduced. It requires more optimization. It tends to make the PCs slower. It almost doesn't have the ability to heal. This is very important as we need our sensitive data to be recoverable. It doesn't have any free scanning functionality. Our users using personal machines cannot scan in case of an incident. This could be added like Malwarebytes. Read full review Support Rating Trellix (FireEye + McAfee)
The support of product was very good when we initially implemented the solution. We were getting fats replies and could see the customer approach. After a while the level of support was not following the SLA's and the replies were getting very confusing and late.
Read full review Alternatives Considered For our organization, the Cisco defense in depth concept works the best. While Cisco can be made to work with other vendors, we have found the best in depth protection by integrating Cisco products for maximum visibility. We had a
Barracuda Web Filter , but it was difficult to maintain when you had limited scope on what you could block, so we created a whitelist only setup which required a lot of additional manpower. This wouldn't have covered new threats with DNS spoofing and the like. Sourcefire also integrated with our anti-malware platform (Cisco AMP) for even better visibility on what may be happening on the end users workstation. We are planning on adding in Cisco ISE to complete the approach and possibly stealthwatch to cover our bases in the future. The Palo Alto gear was interesting, but it was priced far out of our range.
Read full review Trellix (FireEye + McAfee)
Unlike Trellix Endpoint Security Symantec Endpoint provides less information about events on the user side. Trellix give an opportunity to see information about virus detection on a user machine as quick as it possible, so we were able to catch the signs of virus propagation early and prevent the spread of damage
Read full review Return on Investment Being open source, ROI on free is hard to beat for something that works. I believe it greatly enhances the security of my network. Read full review Trellix (FireEye + McAfee)
From an auditing standpoint, we can show that our workstations/servers are protected. Even though it cant identify more advanced/targeted malware, it is still good to identify the more obvious malware which occurs daily in my enterprise. Since it can be easily deployed, the products can easily get deployed on all systems in the environment for optimal anti-malware protection. Read full review ScreenShots Trellix Endpoint Security ENS Screenshots