CrowdStrike Falcon vs. McAfee Total Protection (discontinued) vs. Trellix Network Security

Crowdstrike is a unified platform for monitoring endpoint devices, whether they're workstations, servers, cloud-native machines, or even mobile devices. It uses AI/ML to monitor anomalies and suspicious behavior, including zero-day attacks. It is suitable for large organizations but may be costlier or less appropriate for smaller organizations, those who want an on-prem EDR setup, and those who need custom scanning based on compliance requirements.

Incentivized

I think McAfee is great to have whether it's for work or for personal use. While it has some drawbacks, I like the peace of mind of feeling safe when I'm browsing the web/email, especially when my computer has sensitive/confidential information, knowing that McAfee will immediately detect any threats. The UI is extremely easy to navigate, which makes it easy for users regardless of how tech-savvy they are.

Incentivized

It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.

Incentivized

• The Log analysis is very detailed and easy to use.
• Prevent and block all type of malwares.
• Great threat intelligence which is very up-to-date with the recent cyber attacks
• very user friendly in access and management
• Automated feature of detecting, taking action and closing incidents using fusion workflow.

Incentivized

• Excellent protection of all internet connected assets on our VPN.
• Constant updates of needed security patches that ensure our network and systems are protected from current and emerging/potential threats.
• Prompt and reliable customer service that provides needed answers and expertise in a crisis.
• Strategic whitepapers on emerging cyber threats and McAfee solutions to resolve them before they become a problem for my team or our clients.

Incentivized

• Advanced detection of targeted attacks.
• Mandiant team effort is a big plus.
• Inline mitigation capabilities particularly well.
• Different deployment models for specific needs.
• License and information sharing selection 1 way or 2 way mode.
• Frequent updates.
• Low false positive rates.
• FireEye sandboxing is immune to sandboxing attacks.
• Central management (CMS) capabilities for managing several NX's.
• Extra IPS/IDS functionality in the product.
• Smartvision specific to lateral movement detection.
• Upgrades and updates with zero down time.
• Local FireEye support is superb.
• Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
• SSL inspection support.
• No need to maintain, build or updates the images. It's highly automatic.

Incentivized

• Support - we are often tasked with running down problems rather than being directed by support.
• The sales staff we have dealt with are not very responsive or timely.
• I believe this is a product built for installations of 300 users or more.

Incentivized

• Price - Extremely high price tag for many of the solutions.

Incentivized

• Very first detected APT sample can pass the NX even it's inline blocking mode.
• Performance optimization for busy networks is cumbersome.
• CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
• Constant limitations of tcpdump/ packet capture for 10G interfaces.
• IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
• It's not a full NDR solution or a UBA solution.
• Lack of device or user mapping.
• Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
• You cannot make manual submission to NX (needs AX).
• You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).

Incentivized

Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI.

Incentivized

McAfee has consistently delivered on its stated goals of providing comprehensive protection for our networks and systems. Due to their excellent work and follow through I have been, and will continue to be a loyal customer.

Incentivized

I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers.

Incentivized

Any time we need to engage the Crowdstrike Falcon Complete Team, their response is switch, thorough, and they are sure to not close out any request until the customer confirms that they have provided an acceptable resolution. If I ever need anything from the account team related to the product, I also get a response from them within minutes typically to address my question. Top notch customer service!

Incentivized

There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any.

Incentivized

The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user.

Incentivized

Read the documentation

Incentivized

It was just a legacy AV program onboarded during initial setup days. As the org. As it expanded, its threat landscape also grew, and we needed a next-gen solution to protect against evolving threat vectors. Falcon EDR was the one that solved all these in a single place.

Incentivized

I haven't used Norton for a while, but when I did use it I felt that it slowed down my computer and had constant pop-ups, which were both equally frustrating and annoying. It was also very difficult to remove from my computer. Malwarebytes is a great, straightforward program I've used for virus scanning. It's pretty bare bones but I think if you just want something to scan for viruses it gets the job done quickly and reliably. In my opinion McAfee offers similar benefits as Norton but its more intuitive and doesn't impact system performance.

Incentivized

FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.

Incentivized

• CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises.
• The cloud-native architecture and automated features have improved operational efficiency.
• The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times.

Incentivized

• Blocks unsafe websites
• Virus detection and removal
• Protects sensitive data

Incentivized

• As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
• Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
• APTs in our region successfully detected and mitigated by the NX.
• For the ROI, in a six month period FireEye is paying off its [investment].
• One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.

Incentivized