Item: Trellix Enterprise Security Manager
Rating: 10
Author: Neil Johnson

Use Cases and Deployment Scope

McAfee Enterprise Security Manager is a powerful SIEM that offers us the comfort of being in compliance with international standards in the domain of information security and helps us to assure security. Correlation of different events from different platforms is very useful and necessary. The integration with another software from McAfee is also very good (EPO, DLP).

Pros and Cons

Integration with other software
Log sources integration
Very user friendly interface
Real-time monitoring

Pre-defined reports
The system requirements are quite demanding
No other tool issue or operational issue was identified

Return on Investment

Improve security
Prevent incidents and attacks
Reduce the security and continuity risks
Correct and independent management information

Alternatives Considered

IBM QRadar

We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.

Other Software Used

DenyAll Vulnerability Manager, FortiSIEM, Google Analytics

Likelihood to Recommend

Collect valuable data from hundreds of types of devices. Events correlation and offenses work very well. Notification in case of an incident also works perfectly. The configuration is easy to customize. With the Content Packs (plugins) the system is flexible for new questions or new situations. Helps in improving visibility of threat actors and helps in further prevention.

Manage you events

Overall Satisfaction with McAfee Enterprise Security Manager