TrustRadius: an HG Insights company

HPE Aruba Networking ClearPass Policy Manager vs. Trellix Network Security

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    HPE Aruba Networking ClearPass Policy Manager

    Score8.6 out of 10
    N/AThe HPE Aruba Networking ClearPass Policy Manager provides role- and device-based network access control for employees, contractors and guests across multi-vendor wired, wireless and VPN infrastructures.N/A

    Trellix Network Security

    Score8.6 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .

    $0

    per appliance/ per mbps

    Pricing
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Editions & Modules
    No answers on this topic
    SmartVision
    $0
    per appliance/ per mbps
    Offerings
    Pricing Offerings
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Considered Both Products
    Hewlett Packard Enterprise (HPE)
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    11 Answers
    No answers on this topic
    Delivers good value for the price
    100%
    Delivers good value for the price
    11 Answers
    No answers on this topic
    Happy with the feature set
    100%
    Happy with the feature set
    11 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    10 Answers
    No answers on this topic
    Implementation went as expected
    90%
    Implementation went as expected
    9 Answers
    No answers on this topic
    Best Alternatives
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    SolarWinds Access Rights Manager (ARM)
    Score8.5 out of 10
    Cisco Identity Services Engine (ISE)
    Score9 out of 10
    Enterprises
    SolarWinds Access Rights Manager (ARM)
    Score8.5 out of 10
    Cisco IOS Security
    Score9.6 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Likelihood to Recommend
    9.5
    (11 ratings)
    9.0
    (1 ratings)
    Likelihood to Renew
    9.5
    (2 ratings)
    -
    (0 ratings)
    Usability
    7.8
    (5 ratings)
    -
    (0 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (7 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    Configurability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    6.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    8.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    HPE Aruba Networking ClearPass Policy ManagerTrellix Network Security
    Likelihood to Recommend
    Hewlett Packard Enterprise (HPE)
    Aruba ClearPass is suited well for large enterprise networks with many connecting buildings and branches. Aruba ClearPass protects your endpoints from unauthorized or unknown devices accessing your network. You can apply policies that prevent devices from meeting the required policies in ClearPass. ClearPass will allow only authorized access for devices that are using the policies.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    It’s a dedicated Network Advanced Threat Detection and
    Prevention solution. Easy maintenance and low operating costs fit perfectly for
    SMEs. Variety of appliance selection makes NX the perfect choice for large
    enterprises. As it’s a dedicated solution with its own appliance, price is higher
    compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
    the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
    the threat intel exchange on the network side reverse is the true. Sizing is
    important before the purchase, if you select a low end model for a busy network
    you lose your initial investment. For multiple NX deployments I highly
    recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
    negatively reduce the risk scores.
    Incentivized
    Read full review
    Pros
    Hewlett Packard Enterprise (HPE)
    • You can use ClearPass authenticate using wired and wireless network devices. This is helpful that you don't have to have multiple systems to accomplish this.
    • Because devices can have different purposes Clearpass can configure groups that will specify what access they have. You can use parameters such as vendor or mac address so clearpass know what group to push them to.
    • It is very easy to view device logs. This is really helpful to troubleshoot auth issues. Once you find the device Clearpass provides more than enough info to know what the issue is and to fix it.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Advanced detection of targeted attacks.
    • Mandiant team effort is a big plus.
    • Inline mitigation capabilities particularly well.
    • Different deployment models for specific needs.
    • License and information sharing selection 1 way or 2 way mode.
    • Frequent updates.
    • Low false positive rates.
    • FireEye sandboxing is immune to sandboxing attacks.
    • Central management (CMS) capabilities for managing several NX's.
    • Extra IPS/IDS functionality in the product.
    • Smartvision specific to lateral movement detection.
    • Upgrades and updates with zero down time.
    • Local FireEye support is superb.
    • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
    • SSL inspection support.
    • No need to maintain, build or updates the images. It's highly automatic.
    Incentivized
    Read full review
    Cons
    Hewlett Packard Enterprise (HPE)
    • Going to the end of the page to edit the rules and save them later causes problems.
    • An AND operation can be performed within a rule, but an OR operation cannot. therefore having to write too many rules
    • The license structure seems very complex at first.
    Read full review
    Trellix (Musarubra US LLC)
    • Very first detected APT sample can pass the NX even it's inline blocking mode.
    • Performance optimization for busy networks is cumbersome.
    • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
    • Constant limitations of tcpdump/ packet capture for 10G interfaces.
    • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
    • It's not a full NDR solution or a UBA solution.
    • Lack of device or user mapping.
    • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
    • You cannot make manual submission to NX (needs AX).
    • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
    Incentivized
    Read full review
    Likelihood to Renew
    Hewlett Packard Enterprise (HPE)
    It's a great product, does what we expect from it however it's not easy to set up. You'll likely need an integrator to assist
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Usability
    Hewlett Packard Enterprise (HPE)
    Though Aruba ClearPass offers a lot of insight and features, it is not the easiest to navigate. A lot of other systems can be figured out as you go, but Aruba ClearPass often requires a lot of research in order to set something up correctly. It's not always easy to find what you're looking for. Once you learn the basics, it becomes a lot more manageable, but it's definitely worth investing in some sort of training.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Reliability and Availability
    Hewlett Packard Enterprise (HPE)
    We have it as a cluster
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Performance
    Hewlett Packard Enterprise (HPE)
    It’s very responsive
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Hewlett Packard Enterprise (HPE)
    This product has consistently provided the results needed from it and when issues arose, Aruba TAC was able to provide support effectively. In the previous question, I stated that Aruba Wireless is used as well. With those systems in place with ClearPass troubleshooting becomes much easier. I am sure other issues may arise if calling support while using another vendor for wireless such as Cisco, Juniper, etc.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Alternatives Considered
    Hewlett Packard Enterprise (HPE)
    From my experience, ClearPass has been the best NAC server of all I've seen. Even though configuration is somewhat hard and it's hard to get training, once you learn how to configure it it works very well. The policies are very granular and scalable and the interface is a well-done web GUI that does not need any extra plugins installed, as some of Cisco's product require. There are many more options than with FortiNAC, and many more integration options. Also, troubleshooting and logging is good.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    FireEye NX is a solid product. It gives you sustainable
    security throughout the organization. NX detection engines are more capable
    compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
    awesome. NX can work for highly regulated environments with 1 way solution.
    Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
    FireEye NX for its pinpoint detection capabilities. Local and partner support
    is exceptional.
    Incentivized
    Read full review
    Scalability
    Hewlett Packard Enterprise (HPE)
    It’s very reliable
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Professional Services
    Hewlett Packard Enterprise (HPE)
    Got the job done
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Return on Investment
    Hewlett Packard Enterprise (HPE)
    • ClearPass has streamlined everything so we don't have to have as many people managing our device auth systems.
    • Our Security team loves that ClearPass can deny unauthorized users and devices from the network. This alone has probably saved us a lot of money and headaches.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
    • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
    • APTs in our region successfully detected and mitigated by the NX.
    • For the ROI, in a six month period FireEye is paying off its [investment].
    • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
    Incentivized
    Read full review
    ScreenShots

    Trellix Network Security Screenshots

    Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.