TrustRadius: an HG Insights company

NetWitness vs. Trellix Enterprise Security Manager

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    NetWitness

    Score6.2 out of 10
    N/ANetWitness Platform is a security operations platform for detecting, investigating, and responding to threats across IT and operational technology (OT) environments. It combines network, log, endpoint, and user-behavior telemetry to help analysts reconstruct attack activity and coordinate response.N/A

    Trellix Enterprise Security Manager

    Score8.6 out of 10
    N/ATrellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
    Pricing
    NetWitnessTrellix Enterprise Security Manager
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    NetWitnessTrellix Enterprise Security Manager
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Features
    NetWitnessTrellix Enterprise Security Manager
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of NetWitness and Trellix Enterprise Security Manager
    Feature
    NetWitness
    -
    Ratings
    Trellix Enterprise Security Manager
    8.4
    9 Ratings
    5% above category average
    Centralized event and log data collection00 Ratings8.69 Ratings
    Correlation00 Ratings7.09 Ratings
    Event and log normalization/management00 Ratings8.09 Ratings
    Deployment flexibility00 Ratings8.39 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.37 Ratings
    Custom dashboards and workspaces00 Ratings9.39 Ratings
    Host and network-based intrusion detection00 Ratings8.37 Ratings
    Data integration/API management00 Ratings9.32 Ratings
    Behavioral analytics and baselining00 Ratings8.62 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.62 Ratings
    Response orchestration and automation00 Ratings8.02 Ratings
    Reporting and compliance management00 Ratings8.62 Ratings
    Incident indexing/searching00 Ratings7.62 Ratings
    Best Alternatives
    NetWitnessTrellix Enterprise Security Manager
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Splunk SOAR
    Score9.1 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    NetWitnessTrellix Enterprise Security Manager
    Likelihood to Recommend
    8.6
    (7 ratings)
    9.0
    (9 ratings)
    Support Rating
    -
    (0 ratings)
    6.5
    (2 ratings)
    User Testimonials
    NetWitnessTrellix Enterprise Security Manager
    Likelihood to Recommend
    NetWitness
    If an organization has all the best breed cyber security tools are in place & want to know the holistic security posture of the organization, they need to best security program or SOC than RSA NetWitness Incident Response and Cyber defense Services is the best solution. The bottom line is not only buying the best solution but it is also about establishing an effective security program that brings together security expertise, process, and technology to improve an organization's ability to prevent detect and respond to attacks.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
    Incentivized
    Read full review
    Pros
    NetWitness
    • Threat prediction and network forensics are the most useful features. It's possible for me to see who received and clicked on any malware on the network, for example. This is the feature I enjoy the most.
    • In addition, the capture packet provides a wealth of information.
    • The support.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
    • This is a core McAfee product that is still getting support.
    • It has a substantial amount of compatibility and integration with other products.
    Incentivized
    Read full review
    Cons
    NetWitness
    • Lacking out of the box best practice templates etc. It relies heavily on customization.
    • Lack of up to date threat feeds.
    • Difficult to learn and use initially.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
    • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
    Incentivized
    Read full review
    Support Rating
    NetWitness
    No answers on this topic
    Trellix (Musarubra US LLC)
    McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
    Incentivized
    Read full review
    Alternatives Considered
    NetWitness
    ES offers the single pane of glass for investigation and monitoring needs, however, to get everything onboarded can be daunting. The identiy and assets enrichment was not as straightforward and required a lot of manual work to make them work. For it to be optimized for full benefit, there is a layer of complexity that needs to be managed along the journey post deployment as well
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
    Incentivized
    Read full review
    Return on Investment
    NetWitness
    • The tool is great and an important part of my tool box
    • The level of administration needed is a little too high
    • Support relationships have to be customer led and prompted
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
    • Ability to have third party management
    • Actively upgraded product with good vendor support
    Incentivized
    Read full review
    ScreenShots