Trellix Enterprise Security Manager Reviews and Ratings

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is used by our entire office staff. With the help of McAfee Enterprise Security Manager, we have been able to prevent - as well as identify - security threats to our organization. Every computer in our office has McAfee Enterprise Security Manager installed and I believe our office is truly safer as a result.

Likelihood to Recommend

I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is being managed by the company's infrastructure area to improve information security processes in monitoring, investigating and minimizing problems and threats to our cloud services and systems. We use it mainly to monitor the performance of systems and applications, databases and critical network processes. The objective is to perform data analysis for patterns that may indicate a threat. This intelligence process determines priorities and alerts that reveal possible threats as early as possible.

Likelihood to Recommend

It is an important tool for large companies that have their cloud infrastructure. It is very interesting for organizations that need to monitor and analyze data from a heterogeneous infrastructure. It allows you to store billions of events and flows with quick access to long-term event data storage, but this infrastructure has a processing cost.

Use Cases and Deployment Scope

We deploy and sell the McAfee ESM (the SIEM solution) to our clients. We had it deployed in several kinds of companies, from small companies to large organizations. From private sector to public sector. McAfee is used to monitor the events (logs) of the clients and correlate them to generate alerts regarding security threats.

Likelihood to Recommend

McAfee is a good solution if you're in a medium/large company and if you're looking for a solution that can be customized and expanded. I also recommend if you have the most common log sources on your environment, since McAfee supports the major log sources (but lack a lot of small vendors).

In my opinion, I wouldn't recommend McAfee for small companies, since it's not that easy to manage and maintain.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is used in our company as the overall security information and event management system. It manages the whole network security inside our organization. Together with other McAfee services, it proactively monitors the behavior of all activities within the network and would prompt the security team whenever there seems to malicious things happening within the corporate network and connected devices.

Likelihood to Recommend

McAfee Enterprise Security Manager can be well suited to any type of business or architecture of enterprise IT infrastructure and network since it can be tailored fit to your organization needs. Just make sure that during the engagement with the vendor, you need to be clear with what systems you have, as McAfee tends to have some limitations on integrating with other systems, especially with some cloud platform wherein we needed to acquire other SIEM because McAfee isn't compatible with the function we need from it in our cloud system.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is a powerful SIEM that offers us the comfort of being in compliance with international standards in the domain of information security and helps us to assure security. Correlation of different events from different platforms is very useful and necessary. The integration with another software from McAfee is also very good (EPO, DLP).

Likelihood to Recommend

Collect valuable data from hundreds of types of devices. Events correlation and offenses work very well. Notification in case of an incident also works perfectly. The configuration is easy to customize. With the Content Packs (plugins) the system is flexible for new questions or new situations. Helps in improving visibility of threat actors and helps in further prevention.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is easy to use and to maintain, with great results. We use this SIEM because it offers threat intelligence correlation, analytics, profiling, security alerts, data presentation and compliance. Good integration with log sources, inclusive with other McAfee tools. It is easy to monitor security events and identify incidents and cyber attacks.

Likelihood to Recommend

The solution offers a lot of features. Great threat categorization and classification. Collect very quick a large volumes of events. Working in cluster is very useful. Data source onboarding reduces the time required to configure new data sources. Support includes professional services and training. Good performance and redundancy. High level of security.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager (previously called Nitro) is used as an enterprise SIEM across multiple sites and domains. It collects system logs and system events for correlation and alerting. It's a hub for security operations.

Likelihood to Recommend

I would make a cautionary recommendation. If you're heavily invested in a McAfee product line, the McAfee Enterprise Security Manager is a natural fit and you probably already understand the risk of working with them. If you are greenfield looking for a SIEM, I would advise documenting your use cases very well, because you may find yourself doing a new implementation down the road.

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is used not only for its log collection capabilities but also for its advanced threat intelligence. We are using the product as part of moving into Intel's complete suite of products, where appliance integration will bring a commonality to our incident capabilities and help with faster response times and visibility.

Likelihood to Recommend

<p>McAfee Enterprise Security Manager is well placed when the environment has other Intel products. We operate McAfee Move and the two products work extremely well together. The anti-virus product can be very cumbersome if used with another SIEM solution when log collecting.</p><p>We have other areas where intel solutions are not in use and in these circumstances we used another well-known SIEM solution that had an easier implementation phase than Intel's and where remote access was challenging.</p>

Use Cases and Deployment Scope

McAfee Enterprise Security Manager was used to deploy full disk encryption to sensitive end points, manage the HIPS, and end point security across the enterprise of 5000 + endpoints.

Likelihood to Recommend

It is great for deploying and managing enterprise endpoint protection; McAfee Antivirus is still not a leader.