What is Trellix Network Security?

Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .

What are Trellix Network Security's top competitors?

Palo Alto Networks WildFire , Trend Micro Deep Discovery , and Zscaler Internet Access are common alternatives for Trellix Network Security.

Who uses Trellix Network Security?

The most common users of Trellix Network Security are from Enterprises (1,001+ employees).

Trellix Network Security Reviews & Ratings 2024

Deployment Types	On-premise
Operating Systems	Windows, Linux, Mac
Mobile Application	No
Supported Countries	Worldwide
Supported Languages	English

Consumers	0%
Small Businesses (1-50 employees)	0%
Mid-Size Companies (51-500 employees)	10%
Enterprises (more than 500 employees)	90%

5 star threat prevention/detection product exceeding our expectations

Rating: 9 out of 10

Incentivized

May 17, 2021

Verified User

Vetted Review

Verified User

5 years of experience

Use Cases and Deployment Scope

FireEye Network Security named FireEye NX is our main solution for threat detection and mitigation of 0day and APTs in the network. NX is being used throughout the company. Even we deploy NX solutions to other companies. It’s highly effective and scalable in terms of detection and prevention. FireEye NX usage within the FireEye Ecosystem (HX,EX,CMS) enhances the value. SOC team is constantly monitoring the FireEye alerts other than the SIEM generated incidents. It’s a very low false positive rate compared to other products thus increas[ing] the SOC efficiency. With ease SOAR integration helps to automate the IOC distribution. Our Security team and management trust the product. Advanced detection capabilities ensure the targeted attacks will be detected and blocked before it arrives to network.

Pros and Cons

Advanced detection of targeted attacks.
Mandiant team effort is a big plus.
Inline mitigation capabilities particularly well.
Different deployment models for specific needs.
License and information sharing selection 1 way or 2 way mode.
Frequent updates.
Low false positive rates.
FireEye sandboxing is immune to sandboxing attacks.
Central management (CMS) capabilities for managing several NX's.
Extra IPS/IDS functionality in the product.
Smartvision specific to lateral movement detection.
Upgrades and updates with zero down time.
Local FireEye support is superb.
Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
SSL inspection support.
No need to maintain, build or updates the images. It's highly automatic.

Likelihood to Recommend

It’s a dedicated Network Advanced Threat Detection and Prevention solution. Easy maintenance and low operating costs fit perfectly for SMEs. Variety of appliance selection makes NX the perfect choice for large enterprises. As it’s a dedicated solution with its own appliance, price is higher compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing the threat intel exchange on the network side reverse is the true. Sizing is important before the purchase, if you select a low end model for a busy network you lose your initial investment. For multiple NX deployments I highly recommend CMS. Without CMS you’ll lose the threat intel exchange and this will negatively reduce the risk scores.

Most Important Features

Threat exchange and intel.
Low false positive ratios.
Uptime values are very high for both inline and span modes.
Advanced detection and mitigation capabilities ensuring the highest level protection.
FireEye Ecosystem.
Proper detection for C&C and bot.

Return on Investment

As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
APTs in our region successfully detected and mitigated by the NX.
For the ROI, in a six month period FireEye is paying off its [investment].
One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.

Alternatives Considered

Palo Alto Networks WildFire and Trend Micro Deep Discovery

FireEye NX is a solid product. It gives you sustainable security throughout the organization. NX detection engines are more capable compared to others. Its catch rate is higher, FP rate is lower, [and] speed is awesome. NX can work for highly regulated environments with 1 way solution. Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the FireEye NX for its pinpoint detection capabilities. Local and partner support is exceptional.

Other Software Used

Trend Micro Deep Discovery, Palo Alto Networks WildFire, Check Point 13000 Appliances

SmartVision

$0

Trellix Intrusion Prevention System

Darktrace

Zscaler Internet Access

Palo Alto Networks WildFire

Cisco Secure IPS

CrowdStrike Falcon

Cisco Identity Services Engine (ISE)

Trend Micro TippingPoint

Cloudflare Zero Trust Services

Snort