TrustRadius: an HG Insights company

Microsoft Sentinel vs. Trellix Enterprise Security Manager

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Sentinel

    Score8.6 out of 10
    N/AMicrosoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.

    $2.46

    per GB ingested

    Trellix Enterprise Security Manager

    Score8.6 out of 10
    N/ATrellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
    Pricing
    Microsoft SentinelTrellix Enterprise Security Manager
    Editions & Modules
    Azure Sentinel
    $2.46
    per GB ingested
    100 GB per day
    $123.00
    per day
    200 GB per day
    $221.40
    per day
    300 GB per day
    $319.80
    per day
    400 GB per day
    $410.00
    per day
    500 GB per day
    $492.00
    per day
    More than 500 GB per day
    $492.00 + $98.40
    per day/plus each additional 100 GB increment
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft SentinelTrellix Enterprise Security Manager
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Microsoft SentinelTrellix Enterprise Security Manager
    Considered Both Products
    Microsoft
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    99%
    Would buy again
    73 Answers
    No answers on this topic
    Delivers good value for the price
    94%
    Delivers good value for the price
    59 Answers
    No answers on this topic
    Happy with the feature set
    96%
    Happy with the feature set
    71 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    52 Answers
    No answers on this topic
    Implementation went as expected
    97%
    Implementation went as expected
    66 Answers
    No answers on this topic
    Features
    Microsoft SentinelTrellix Enterprise Security Manager
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Microsoft Sentinel and Trellix Enterprise Security Manager
    Feature
    Microsoft Sentinel
    8.5
    34 Ratings
    8% above category average
    Trellix Enterprise Security Manager
    8.4
    9 Ratings
    6% above category average
    Centralized event and log data collection9.034 Ratings8.69 Ratings
    Correlation8.835 Ratings7.09 Ratings
    Event and log normalization/management8.435 Ratings8.09 Ratings
    Deployment flexibility8.333 Ratings8.39 Ratings
    Integration with Identity and Access Management Tools8.933 Ratings9.37 Ratings
    Custom dashboards and workspaces8.435 Ratings9.39 Ratings
    Host and network-based intrusion detection8.030 Ratings8.37 Ratings
    Data integration/API management8.433 Ratings9.32 Ratings
    Behavioral analytics and baselining9.031 Ratings8.62 Ratings
    Rules-based and algorithmic detection thresholds8.733 Ratings8.62 Ratings
    Response orchestration and automation8.232 Ratings8.02 Ratings
    Reporting and compliance management7.35 Ratings8.62 Ratings
    Incident indexing/searching8.733 Ratings7.62 Ratings
    Best Alternatives
    Microsoft SentinelTrellix Enterprise Security Manager
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft SentinelTrellix Enterprise Security Manager
    Likelihood to Recommend
    8.5
    (74 ratings)
    9.0
    (9 ratings)
    Likelihood to Renew
    6.5
    (2 ratings)
    -
    (0 ratings)
    Usability
    8.2
    (27 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (3 ratings)
    6.5
    (2 ratings)
    Professional Services
    5.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Microsoft SentinelTrellix Enterprise Security Manager
    Likelihood to Recommend
    Microsoft
    What has really impressed me is how Microsoft Sentinel delivers centralised security monitoring across multiple data sources in our enterprise. It has reduced cost of handling large security logs by collecting and analyzing data without friction of managing traditional SIEM infrastructure. It is easy to work to integrate with Azure logs for quick data analysis.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
    Incentivized
    Read full review
    Pros
    Microsoft
    • The visual presentation of data is terrific, so including what we had prior to Microsoft Sentinel, it presents data in a much more usable way, so that's been quite refreshing. It's not quite as complex to understand what you're looking at.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
    • This is a core McAfee product that is still getting support.
    • It has a substantial amount of compatibility and integration with other products.
    Incentivized
    Read full review
    Cons
    Microsoft
    • One feature that I would like to see improved is probably the log parsing. I think one of the big things that Splunk does better than Microsoft Sentinel is that it makes it easy to bring in new log streams of arbitrary formats and parse them out into columns and tables. Microsoft Sentinel is a lot more involved, though. It takes a lot more manual work to bring in different log sources and parse them out.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
    • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    it does the job reasonably well
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Usability
    Microsoft
    Mirosoft sentinel is easy to use once the inital setup is completed.The dashboard and centralized alerts make it simple to monitor security events and investigate incidents.Integration with other microsoft security tool is also helpful.Some advanced features and configurations can take time to understand, but overall it provides good, user-friendly security monitoring.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Microsoft
    Microsoft support is one of the highest rated on the market. It has global and multilingual support. Calls can be made over the phone and the solution is virtually instantaneous with the help of Microsoft engineers. It's great!
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
    Incentivized
    Read full review
    Alternatives Considered
    Microsoft
    Compared to platforms such as Splunk, LogRhythm, and Devo, Microsoft Sentinel’s cloud‑native, consumption‑based pricing model and reduced infrastructure overhead tend to offer better overall cost efficiency. This is especially true for organizations already invested in the Microsoft ecosystem, where Sentinel can deliver strong capabilities with a lower total cost of ownership.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
    Incentivized
    Read full review
    Professional Services
    Microsoft
    Did not use professional services
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Return on Investment
    Microsoft
    • It's probably neutral. We see value, but it's, again, tick that kind of expense stuff. We're getting more insight and value into what is going on in that cloud workspace, but just noting the cost. So it's probably neutral. I'm not directly responsible, so the full kind of return on investment kind of cycle, that's someone else's problem. I'm like the end user. It's my team that will look at the data and look at the output of Microsoft Sentinel. So the ROI, someone else can worry about that.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
    • Ability to have third party management
    • Actively upgraded product with good vendor support
    Incentivized
    Read full review
    ScreenShots

    Microsoft Sentinel Screenshots

    Product screenshotProduct screenshotScreenshot of Microsoft Sentinel Capabilities