Trellix Enterprise Security Manager vs. Trellix Network Security

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Trellix Enterprise Security Manager
Score 8.5 out of 10
N/A
Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
Trellix Network Security
Score 8.6 out of 10
Enterprise companies (1,001+ employees)
Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .
$0
per appliance/ per mbps
Pricing
Trellix Enterprise Security ManagerTrellix Network Security
Editions & Modules
No answers on this topic
SmartVision
$0
per appliance/ per mbps
Offerings
Pricing Offerings
Trellix Enterprise Security ManagerTrellix Network Security
Free Trial
NoYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeNo setup feeOptional
Additional Details
More Pricing Information
Community Pulse
Trellix Enterprise Security ManagerTrellix Network Security
Features
Trellix Enterprise Security ManagerTrellix Network Security
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Trellix Enterprise Security Manager
8.4
9 Ratings
6% above category average
Trellix Network Security
-
Ratings
Centralized event and log data collection8.69 Ratings00 Ratings
Correlation7.09 Ratings00 Ratings
Event and log normalization/management8.09 Ratings00 Ratings
Deployment flexibility8.39 Ratings00 Ratings
Integration with Identity and Access Management Tools9.37 Ratings00 Ratings
Custom dashboards and workspaces9.39 Ratings00 Ratings
Host and network-based intrusion detection8.37 Ratings00 Ratings
Data integration/API management9.32 Ratings00 Ratings
Behavioral analytics and baselining8.62 Ratings00 Ratings
Rules-based and algorithmic detection thresholds8.62 Ratings00 Ratings
Response orchestration and automation8.02 Ratings00 Ratings
Reporting and compliance management8.62 Ratings00 Ratings
Incident indexing/searching7.62 Ratings00 Ratings
Best Alternatives
Trellix Enterprise Security ManagerTrellix Network Security
Small Businesses
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 7.5 out of 10
NinjaOne
NinjaOne
Score 9.1 out of 10
Medium-sized Companies
Sumo Logic
Sumo Logic
Score 8.8 out of 10
NinjaOne
NinjaOne
Score 9.1 out of 10
Enterprises
Sumo Logic
Sumo Logic
Score 8.8 out of 10
Cisco Meraki MX
Cisco Meraki MX
Score 9.0 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Trellix Enterprise Security ManagerTrellix Network Security
Likelihood to Recommend
9.0
(9 ratings)
9.0
(1 ratings)
Support Rating
6.5
(2 ratings)
-
(0 ratings)
User Testimonials
Trellix Enterprise Security ManagerTrellix Network Security
Likelihood to Recommend
Trellix (Musarubra US LLC)
I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
Read full review
Trellix (Musarubra US LLC)
It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.
Read full review
Pros
Trellix (Musarubra US LLC)
  • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
  • This is a core McAfee product that is still getting support.
  • It has a substantial amount of compatibility and integration with other products.
Read full review
Trellix (Musarubra US LLC)
  • Advanced detection of targeted attacks.
  • Mandiant team effort is a big plus.
  • Inline mitigation capabilities particularly well.
  • Different deployment models for specific needs.
  • License and information sharing selection 1 way or 2 way mode.
  • Frequent updates.
  • Low false positive rates.
  • FireEye sandboxing is immune to sandboxing attacks.
  • Central management (CMS) capabilities for managing several NX's.
  • Extra IPS/IDS functionality in the product.
  • Smartvision specific to lateral movement detection.
  • Upgrades and updates with zero down time.
  • Local FireEye support is superb.
  • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
  • SSL inspection support.
  • No need to maintain, build or updates the images. It's highly automatic.
Read full review
Cons
Trellix (Musarubra US LLC)
  • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
  • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
Read full review
Trellix (Musarubra US LLC)
  • Very first detected APT sample can pass the NX even it's inline blocking mode.
  • Performance optimization for busy networks is cumbersome.
  • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
  • Constant limitations of tcpdump/ packet capture for 10G interfaces.
  • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
  • It's not a full NDR solution or a UBA solution.
  • Lack of device or user mapping.
  • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
  • You cannot make manual submission to NX (needs AX).
  • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
Read full review
Support Rating
Trellix (Musarubra US LLC)
McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
Read full review
Trellix (Musarubra US LLC)
No answers on this topic
Alternatives Considered
Trellix (Musarubra US LLC)
We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
Read full review
Trellix (Musarubra US LLC)
FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.
Read full review
Return on Investment
Trellix (Musarubra US LLC)
  • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
  • Ability to have third party management
  • Actively upgraded product with good vendor support
Read full review
Trellix (Musarubra US LLC)
  • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
  • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
  • APTs in our region successfully detected and mitigated by the NX.
  • For the ROI, in a six month period FireEye is paying off its [investment].
  • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
Read full review
ScreenShots

Trellix Network Security Screenshots

Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.