SurfWatch Labs vs. Trellix Enterprise Security Manager

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
SurfWatch Labs
Score 7.0 out of 10
N/A
SurfWatch Labs in Sterling, Virginia offers a security information and event management (SIEM) platform.N/A
Trellix Enterprise Security Manager
Score 8.5 out of 10
N/A
Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
Pricing
SurfWatch LabsTrellix Enterprise Security Manager
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
SurfWatch LabsTrellix Enterprise Security Manager
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
SurfWatch LabsTrellix Enterprise Security Manager
Considered Both Products
SurfWatch Labs

No answer on this topic

Trellix Enterprise Security Manager
Chose Trellix Enterprise Security Manager
McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise …
Chose Trellix Enterprise Security Manager
Other evaluated products: Microsoft Defender and Symantec
- McAffee has more comprehensive integrated tools that better serve our infrastructure
- Analysts found the use of the tool more intuitive
Chose Trellix Enterprise Security Manager
McAfee is not the easiest tool to use. The user interface (specially the admin part) is fairly confusing.
At first, McAfee is very overwhelming and not so easy to understand. However, once you get used to the tool, you get used to the interface and you're able to do pretty much …
Chose Trellix Enterprise Security Manager
We had used McAfee Enterprise Security Manager for a long time, and it served us well. It is great since it can serve as an all-in security tool. Also, it was a great deal for our organization, since it came bundled with our manager network security.
Chose Trellix Enterprise Security Manager
We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter …
Chose Trellix Enterprise Security Manager
We selected and implemented McAfee Enterprise Security Manager because is the best SIEM solution from the market. With a very good support from the vendor. Easy implementation and easy management. A lot of threats addressed. High level of security assured. Very good resilience. …
Chose Trellix Enterprise Security Manager
Splunk tends to be the top dog in the space. Everything is compatible and it's capable of anything. You just have to have the time and money to do the work. And if you have a large volume of logs (and who doesn't?), it's not cheap. McAfee Enterprise Security Manager's advantage …
Chose Trellix Enterprise Security Manager

We looked at a few products, these were AlienVault, ESM, LogRhythm and Alert Logic.

ESM at the time had more functionality and a friendlier and cleaner user interface than LogRhythm

ESM had an ability to integrate easily into Intel's endpoint solution versus AlienVault where a …

Features
SurfWatch LabsTrellix Enterprise Security Manager
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
SurfWatch Labs
-
Ratings
Trellix Enterprise Security Manager
8.4
Ratings
7% above category average
Centralized event and log data collection00 Ratings8.60 Ratings
Correlation00 Ratings7.00 Ratings
Event and log normalization/management00 Ratings8.00 Ratings
Deployment flexibility00 Ratings8.30 Ratings
Integration with Identity and Access Management Tools00 Ratings9.30 Ratings
Custom dashboards and workspaces00 Ratings9.30 Ratings
Host and network-based intrusion detection00 Ratings8.30 Ratings
Data integration/API management00 Ratings9.30 Ratings
Behavioral analytics and baselining00 Ratings8.60 Ratings
Rules-based and algorithmic detection thresholds00 Ratings8.60 Ratings
Response orchestration and automation00 Ratings8.00 Ratings
Reporting and compliance management00 Ratings8.60 Ratings
Incident indexing/searching00 Ratings7.60 Ratings
Best Alternatives
SurfWatch LabsTrellix Enterprise Security Manager
Small Businesses
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 8.0 out of 10
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 8.0 out of 10
Medium-sized Companies
Sumo Logic
Sumo Logic
Score 8.8 out of 10
Sumo Logic
Sumo Logic
Score 8.8 out of 10
Enterprises
Sumo Logic
Sumo Logic
Score 8.8 out of 10
Sumo Logic
Sumo Logic
Score 8.8 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
SurfWatch LabsTrellix Enterprise Security Manager
Likelihood to Recommend
-
(0 ratings)
9.0
(0 ratings)
Support Rating
-
(0 ratings)
6.5
(0 ratings)
User Testimonials
SurfWatch LabsTrellix Enterprise Security Manager
Likelihood to Recommend
No answers on this topic
McAfee is a good solution if you're in a medium/large company and if you're looking for a solution that can be customized and expanded. I also recommend if you have the most common log sources on your environment, since McAfee supports the major log sources (but lack a lot of small vendors). In my opinion, I wouldn't recommend McAfee for small companies, since it's not that easy to manage and maintain.
Read full review
Pros
No answers on this topic
  • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
  • This is a core McAfee product that is still getting support.
  • It has a substantial amount of compatibility and integration with other products.
Read full review
Cons
No answers on this topic
  • If there is a requirement to integrate into other vendor products i.e. (log sharing) then this was very cumbersome.
  • Integration of vulnerability scanning that is available in other vendor products would be a good addition.
  • When integrating all of Intel's products a third party consultancy is usually required, where other vendor products can be configured without this additional cost.
Read full review
Support Rating
No answers on this topic
Dealing with the McAfee support is a lottery. Sometimes you reach them and it's a really experienced engineer, but sometimes it's a person with no clue on the tool. We had few cases where our internal engineers knew more about the tool than the McAfee support. However, sometimes we get hold of some really good engineers that know the tool from inside out
Read full review
Alternatives Considered
No answers on this topic
McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise Security Manager, I know I'm getting a quality product for a fair price.
Read full review
Return on Investment
No answers on this topic
  • It effectively blocks potential attacks from outside.
  • It aids us in doing more effective root-cause analysis whenever an incident occurs, since it gives us enough details to understand what went wrong.
Read full review
ScreenShots