TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Sumo Logic

    Score8.9 out of 10
    N/ASumo Logic is a log management offering from the San Francisco based company of the same name.

    $3

    Per GB Logs

    Trellix Network Security

    Score8.6 out of 10
    Enterprise companies (1,001+ employees)
    Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .

    $0

    per appliance/ per mbps

    Pricing
    Sumo LogicTrellix Network Security
    Editions & Modules
    Essentials
    $3.00
    Per GB Logs
    Enterprise
    $4.00
    Per GB Logs
    Enterprise Security
    $4.25
    Per GB Logs
    Enterprise Suite
    $4.75
    Per GB Logs
    SmartVision
    $0
    per appliance/ per mbps
    Offerings
    Pricing Offerings
    Sumo LogicTrellix Network Security
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Sumo LogicTrellix Network Security
    Considered Both Products
    Sumo Logic
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    89%
    Would buy again
    8 Answers
    No answers on this topic
    Delivers good value for the price
    100%
    Delivers good value for the price
    9 Answers
    No answers on this topic
    Happy with the feature set
    89%
    Happy with the feature set
    8 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    No answers on this topic
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    6 Answers
    No answers on this topic
    Best Alternatives
    Sumo LogicTrellix Network Security
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Cisco Identity Services Engine (ISE)
    Score9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    Cisco IOS Security
    Score9.6 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Sumo LogicTrellix Network Security
    Likelihood to Recommend
    9.7
    (17 ratings)
    9.0
    (1 ratings)
    Usability
    9.0
    (5 ratings)
    -
    (0 ratings)
    Support Rating
    8.7
    (6 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    6.2
    (3 ratings)
    -
    (0 ratings)
    User Testimonials
    Sumo LogicTrellix Network Security
    Likelihood to Recommend
    Sumo Logic
    SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    It’s a dedicated Network Advanced Threat Detection and
    Prevention solution. Easy maintenance and low operating costs fit perfectly for
    SMEs. Variety of appliance selection makes NX the perfect choice for large
    enterprises. As it’s a dedicated solution with its own appliance, price is higher
    compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
    the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
    the threat intel exchange on the network side reverse is the true. Sizing is
    important before the purchase, if you select a low end model for a busy network
    you lose your initial investment. For multiple NX deployments I highly
    recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
    negatively reduce the risk scores.
    Incentivized
    Read full review
    Pros
    Sumo Logic
    • Sumo Logic allowed for our InfoSec team to ingest logs from our CDN directly, in real-time, instead of massive compressed archives that were sent every two-hours (the only alternative at the time). Sumo Logic had an app for these logs, that allowed us to easily get an immediate payoff from the data, with canned dashboard and saved searches.
    • Sumo Logic has a fairly extensive REST API when it comes to log sources, source configurations, dashboard data, searches, etc. Their wiki for the API is usually kept up to date.
    • Sumo Logic, during the period of time I had used their product, had added the ability to configure agents via configuration files. This allowed customers to configure their endpoints, and modify the endpoints, with configuration management tools like Chef / Puppet / Salt. Beforehand, the only option was to always make changes either via the web portal or REST API.
    • The solutions engineers were extremely helpful, and easily reachable when issues would occur.
    • Users at our company found it easy to get started, working on new dashboards, scheduled searches, and alerting. The alerting worked well with our third-party paging tool.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Advanced detection of targeted attacks.
    • Mandiant team effort is a big plus.
    • Inline mitigation capabilities particularly well.
    • Different deployment models for specific needs.
    • License and information sharing selection 1 way or 2 way mode.
    • Frequent updates.
    • Low false positive rates.
    • FireEye sandboxing is immune to sandboxing attacks.
    • Central management (CMS) capabilities for managing several NX's.
    • Extra IPS/IDS functionality in the product.
    • Smartvision specific to lateral movement detection.
    • Upgrades and updates with zero down time.
    • Local FireEye support is superb.
    • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
    • SSL inspection support.
    • No need to maintain, build or updates the images. It's highly automatic.
    Incentivized
    Read full review
    Cons
    Sumo Logic
    • I like the help center, but I think if it had more GUI tools, it could help new users.
    • Pulling out data is sometimes hard to read, (Maybe if I knew how to export data better, this would not be an issue for me).
    • I would like better know-how on how to create reports that will help our business.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Very first detected APT sample can pass the NX even it's inline blocking mode.
    • Performance optimization for busy networks is cumbersome.
    • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
    • Constant limitations of tcpdump/ packet capture for 10G interfaces.
    • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
    • It's not a full NDR solution or a UBA solution.
    • Lack of device or user mapping.
    • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
    • You cannot make manual submission to NX (needs AX).
    • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
    Incentivized
    Read full review
    Usability
    Sumo Logic
    Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Sumo Logic
    I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Implementation Rating
    Sumo Logic
    I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Alternatives Considered
    Sumo Logic
    Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    FireEye NX is a solid product. It gives you sustainable
    security throughout the organization. NX detection engines are more capable
    compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
    awesome. NX can work for highly regulated environments with 1 way solution.
    Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
    FireEye NX for its pinpoint detection capabilities. Local and partner support
    is exceptional.
    Incentivized
    Read full review
    Professional Services
    Sumo Logic
    I've assisted several OneLogin customers with partner accounts to Sumo Logic. It has always been pleasant.
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Return on Investment
    Sumo Logic
    • I can't think of any negative side effects other than it being SO slow sometimes, but compared to Splunk everything is slow
    • It's SO much cheaper than Splunk that the time it takes to query information is well worth it
    • In the times that we've had Sumo go down or stop logging information, we've found that we'd be absolutely lost without Sumo
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
    • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
    • APTs in our region successfully detected and mitigated by the NX.
    • For the ROI, in a six month period FireEye is paying off its [investment].
    • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
    Incentivized
    Read full review
    ScreenShots

    Trellix Network Security Screenshots

    Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.