Likelihood to Recommend It is valuable software for when it comes to a large or medium organization, since it helps to protect the endpoints, but as the number of servers increases its value increases. However, it is important to keep in mind that when it comes to low end devices, its protection can affect their performance. This is because it is not a software with a very light agent.
Read full review Trellix (FireEye + McAfee)
It’s a dedicated Network Advanced Threat Detection and Prevention solution. Easy maintenance and low operating costs fit perfectly for SMEs. Variety of appliance selection makes NX the perfect choice for large enterprises. As it’s a dedicated solution with its own appliance, price is higher compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing the threat intel exchange on the network side reverse is the true. Sizing is important before the purchase, if you select a low end model for a busy network you lose your initial investment. For multiple NX deployments I highly recommend CMS. Without CMS you’ll lose the threat intel exchange and this will negatively reduce the risk scores.
Read full review Pros The incident management piece is the heart and soul of the product. A single area where all data in relation to network and email protection is available. Works well in conjunction with the standard Symantec Endpoint product. URL Protection is advanced and very helpful Technical support is great and definitely the best I have ever seen for a "anti-virus" type product. Read full review Trellix (FireEye + McAfee)
Advanced detection of targeted attacks. Mandiant team effort is a big plus. Inline mitigation capabilities particularly well. Different deployment models for specific needs. License and information sharing selection 1 way or 2 way mode. Frequent updates. Low false positive rates. FireEye sandboxing is immune to sandboxing attacks. Central management (CMS) capabilities for managing several NX's. Extra IPS/IDS functionality in the product. Smartvision specific to lateral movement detection. Upgrades and updates with zero down time. Local FireEye support is superb. Multiple deployment scenarios (span, inline) in the same NX for different interface pairs. SSL inspection support. No need to maintain, build or updates the images. It's highly automatic. Read full review Cons I don't like that I have to maintain the client and keep it up to date. Updating the client is not a very easy process. Deploying the client could be easier. They have a deployment tool, but it doesn't really get to all PCs, which means I still have to manually deploy it. Because the product has so much customization, it can also be very difficult to set up and understand. Read full review Trellix (FireEye + McAfee)
Very first detected APT sample can pass the NX even it's inline blocking mode. Performance optimization for busy networks is cumbersome. CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization. Constant limitations of tcpdump/ packet capture for 10G interfaces. IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures. It's not a full NDR solution or a UBA solution. Lack of device or user mapping. Forensics is based on the specific APT. May not provide the whole story and need some additional tools. You cannot make manual submission to NX (needs AX). You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken). Read full review Likelihood to Renew Symantec Advanced Threat Protection has done a sufficient job at identifying true positives. However, the UI could be improved and the amount of false positives is a little too frequent for my liking
Read full review Trellix (FireEye + McAfee)
Usability There is a small learning curve, but compared to other AV products it is fairly simple and easy to catch onto
Read full review Trellix (FireEye + McAfee)
Support Rating Support responds fast for higher priority issues, they have always been good at solving the problems we encounter.
Read full review Trellix (FireEye + McAfee)
Implementation Rating No, besides to review documentation prior to beginning. That is what helped lead to a smooth implementation
Read full review Trellix (FireEye + McAfee)
Alternatives Considered Frankly, the other products were too expensive to make the change from Symantec so we continued with the tried and true protection. We don't have the funding to move to a more expensive product and the manpower that it would take to implement a new solution.
Read full review Trellix (FireEye + McAfee)
FireEye NX is a solid product. It gives you sustainable security throughout the organization. NX detection engines are more capable compared to others. Its catch rate is higher, FP rate is lower, [and] speed is awesome. NX can work for highly regulated environments with 1 way solution. Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the FireEye NX for its pinpoint detection capabilities. Local and partner support is exceptional.
Read full review Return on Investment Some digital assets were lost due to failures to detect various threats. We had to use other products in combination in order to trust that all threats were actually detected, taking extra time. We couldn't use just SATP. Ability to quickly manage/deploy via AD made maintenance of the application itself quick and easy. Read full review Trellix (FireEye + McAfee)
As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities. Security score based on detection/prevention metrics [is] very high ensuring the highest level of security. APTs in our region successfully detected and mitigated by the NX. For the ROI, in a six month period FireEye is paying off its [investment]. One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years. Read full review ScreenShots Trellix Network Security Screenshots