Microsoft Sentinel vs. Trellix Enterprise Security Manager

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Microsoft Sentinel
Score 8.7 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
$2.46
per GB ingested
Trellix Enterprise Security Manager
Score 8.5 out of 10
N/A
Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
Pricing
Microsoft SentinelTrellix Enterprise Security Manager
Editions & Modules
Azure Sentinel
$2.46
per GB ingested
100 GB per day
$123.00
per day
200 GB per day
$221.40
per day
300 GB per day
$319.80
per day
400 GB per day
$410.00
per day
500 GB per day
$492.00
per day
More than 500 GB per day
$492.00 + $98.40
per day/plus each additional 100 GB increment
No answers on this topic
Offerings
Pricing Offerings
Microsoft SentinelTrellix Enterprise Security Manager
Free Trial
YesNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Microsoft SentinelTrellix Enterprise Security Manager
Features
Microsoft SentinelTrellix Enterprise Security Manager
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Microsoft Sentinel
8.0
28 Ratings
1% above category average
Trellix Enterprise Security Manager
8.4
9 Ratings
6% above category average
Centralized event and log data collection8.528 Ratings8.69 Ratings
Correlation8.128 Ratings7.09 Ratings
Event and log normalization/management7.728 Ratings8.09 Ratings
Deployment flexibility6.926 Ratings8.39 Ratings
Integration with Identity and Access Management Tools8.026 Ratings9.37 Ratings
Custom dashboards and workspaces7.828 Ratings9.39 Ratings
Host and network-based intrusion detection7.724 Ratings8.37 Ratings
Data integration/API management7.626 Ratings9.32 Ratings
Behavioral analytics and baselining7.624 Ratings8.62 Ratings
Rules-based and algorithmic detection thresholds8.226 Ratings8.62 Ratings
Response orchestration and automation8.225 Ratings8.02 Ratings
Reporting and compliance management9.04 Ratings8.62 Ratings
Incident indexing/searching8.326 Ratings7.62 Ratings
Best Alternatives
Microsoft SentinelTrellix Enterprise Security Manager
Small Businesses
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 7.5 out of 10
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 7.5 out of 10
Medium-sized Companies
Sumo Logic
Sumo Logic
Score 9.3 out of 10
Sumo Logic
Sumo Logic
Score 9.3 out of 10
Enterprises
Sumo Logic
Sumo Logic
Score 9.3 out of 10
Sumo Logic
Sumo Logic
Score 9.3 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Microsoft SentinelTrellix Enterprise Security Manager
Likelihood to Recommend
8.6
(53 ratings)
9.0
(9 ratings)
Likelihood to Renew
7.1
(2 ratings)
-
(0 ratings)
Usability
6.5
(7 ratings)
-
(0 ratings)
Support Rating
8.0
(3 ratings)
6.5
(2 ratings)
Professional Services
5.0
(1 ratings)
-
(0 ratings)
User Testimonials
Microsoft SentinelTrellix Enterprise Security Manager
Likelihood to Recommend
Microsoft
Microsoft Sentinel excels in centralized monitoring, AI-driven threat detection, and automation, but improvements in cost transparency, user experience, third-party integrations, and support for emerging technologies could make it even more effective. Addressing these areas would enhance its appeal for small-to-medium businesses, large enterprises, and organizations with complex or specialized IT environments.
Read full review
Trellix (FireEye + McAfee)
I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
Read full review
Pros
Microsoft
  • I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
  • The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.
Read full review
Trellix (FireEye + McAfee)
  • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
  • This is a core McAfee product that is still getting support.
  • It has a substantial amount of compatibility and integration with other products.
Read full review
Cons
Microsoft
  • I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
  • It should improve ML and AI capabilities.
  • I find its documentation a little bit difficult to understand at the start. So the words should be simple.
Read full review
Trellix (FireEye + McAfee)
  • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
  • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
Read full review
Likelihood to Renew
Microsoft
it does the job reasonably well
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Usability
Microsoft
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Support Rating
Microsoft
Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.
Read full review
Trellix (FireEye + McAfee)
McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
Read full review
Alternatives Considered
Microsoft
We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. While Sumo Logic is good at analyzing data, Microsoft Sentinel fits our needs.
Read full review
Trellix (FireEye + McAfee)
We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
Read full review
Professional Services
Microsoft
Did not use professional services
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Return on Investment
Microsoft
  • As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
Read full review
Trellix (FireEye + McAfee)
  • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
  • Ability to have third party management
  • Actively upgraded product with good vendor support
Read full review
ScreenShots

Microsoft Sentinel Screenshots

Screenshot of Screenshot of Screenshot of Microsoft Sentinel Capabilities