Trellix Network Detection and Response Reviews

Name: Trellix Network Detection and Response
Brand: Trellix
Rating: 4.2 (40 reviews)

Vendor: Trellix

4.2 out of 5

40 reviews
97% willing to recommend

Leave a review

What is Trellix Network Detection and Response?

Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.

Get the Trellix Network Detection and Response Buyer's Guide and find out what your peers are saying about Trellix Network Detection and Response, Microsoft Defender for Endpoint, Microsoft Defender for Office 365 and more!

Trellix Network Detection and Response is the #10 ranked solution in top Network Detection and Response (NDR) solutions and #11 ranked solution in top Advanced Threat Protection (ATP) solutions. PeerSpot users give Trellix Network Detection and Response an average rating of 8.4 out of 10. Trellix Network Detection and Response is most commonly compared to Microsoft Defender for Endpoint: Trellix Network Detection and Response vs Microsoft Defender for Endpoint. Trellix Network Detection and Response is popular among the large enterprise segment, accounting for 52% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a comms service provider, accounting for 13% of all views.

Buyer's Guide

Trellix Network Detection and Response

December 2025

Get the report

Helped 879,310 peers since 2012

Featured Trellix Network Detection and Response reviews

Jose Vargas

Agente De Servicios Técnicos at a computer software company with 11-50 employees

The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.

Read full review

BiswabhanuPanda

Senior technical consultant at Hitachi Systems Micro Clinic

The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.

Read full review

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response. Networking often involves complexity that could be simplified. More visibility in the dashboard would help in quickly identifying and responding to incidents. Additionally, there should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.

Read full review

Trellix Network Detection and Response mindshare

Product category:

As of December 2025, the mindshare of Trellix Network Detection and Response in the Advanced Threat Protection (ATP) category stands at 4.7%, down from 4.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Market Share Distribution
Product	Market Share (%)
Trellix Network Detection and Response	4.7%
Palo Alto Networks WildFire	8.5%
Microsoft Defender for Endpoint	7.5%
Other	79.3%

Advanced Threat Protection (ATP)

PeerResearch reports based on Trellix Network Detection and Response reviews

Type	Title	Date
Category	Advanced Threat Protection (ATP)	Dec 30, 2025	Download
Product	Reviews, tips, and advice from real users	Dec 30, 2025	Download
Comparison	Trellix Network Detection and Response vs Palo Alto Networks WildFire	Dec 30, 2025	Download
Comparison	Trellix Network Detection and Response vs Microsoft Defender for Office 365	Dec 30, 2025	Download
Comparison	Trellix Network Detection and Response vs Microsoft Defender for Endpoint	Dec 30, 2025	Download

Valuable Features

Trellix Network Detection and Response excels in detecting zero-day attacks using its powerful sandboxing technology and MVX engine. Its user-friendly dashboard enhances visibility and simplifies management. Integration capabilities with various security tools provide seamless operation for organizations. Comprehensive threat detection and response along with storytelling-based investigation capabilities set it apart. Users highlight its effective incident reporting, strong automation, and the ability to handle complex security scenarios efficiently, ensuring greater protection and control over their network environments.

"Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall, and if you have these types of tools, your organization would benefit greatly."
"Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch."
"Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch."

Room for Improvement

Trellix Network Detection and Response needs better integration and network visibility. Customizability and management could be improved. False positives are frequent, requiring more effective filtering and reporting capabilities. Cloud connectivity and machine learning features are lacking. SSL support and documentation should be enhanced. Improved threat intelligence sharing and cross-vendor integration are needed. Greater AI intelligence, a streamlined dashboard, and responsive technical support are desired. Better threat detail explanation and multi-IOC handling are suggested for improvement.

"I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it somewhere else."
"Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents."
"The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response."

ROI

Clients and organizations experienced nearly 200% more return than anticipated with Trellix Network Detection and Response. It effectively prevents breaches and attacks, reducing response time by days and boosting staff productivity. Users noted a significant reduction in time needed to identify threats, with a mature organization reporting analysis time decreased by tenfold. Satisfaction levels are high as it precludes network incidents, eliminating the need for reactive measures.

Pricing

Enterprise users found Trellix Network Detection and Response pricing slightly high but comparable to competitors. Licensing is typically annual, with costs varying by organization size and needs. Some users noted the expense, particularly in maintenance fees and necessary Mbps packages. Despite being considered a bit pricey, many prioritize its effective threat detection over cheaper, less reliable alternatives. Partners with certain vendors, like Cisco, receive more favorable pricing, whereas it may be costlier than solutions like Palo Alto.

"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
"The tool is a bit pricey."
"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

Popular Use Cases

Trellix Network Detection and Response is primarily utilized for network intrusion detection, providing security for network environments and defending against attacks. It is implemented for monitoring network traffic, endpoint protection, and identifying zero-day vulnerabilities. Users employ it for threat investigations and forensic analysis, integrating with firewalls for enhanced threat intelligence. Trellix aids in blocking malicious traffic, scanning uploads and downloads, and supporting customer environments with XDR tools.

Service and Support

Customer service and support for Trellix Network Detection and Response receive positive feedback, typically rated between 8 and 10. Users appreciate the responsive technical support, though some suggest improvements. Support includes options like 24/7 premium service, chat, and multiple contact channels. While some users handle initial support internally, others rely on Trellix for advanced issues. Negative comments highlight delays and technical expertise gaps. FireEye platform support is responsive, but there is mention of restrictive maintenance policies.

Deployment

Trellix Network Detection and Response's initial setup is largely straightforward and user-friendly. Most found it simple, aided by comprehensive documentation and supportive technical staff. While some encountered complexity with specific technical environments, deployment often required minimal personnel and was accomplished swiftly. Trellix received mixed feedback on timeframes, with some completing setup in hours and others facing longer processes. Professional services and clear instructions contributed significantly to ease of integration within existing infrastructures.

Scalability

Trellix Network Detection and Response scales effectively with both cloud-based and appliance-based implementations. Many users experience no issues handling thousands of users and high bandwidth capacities. It supports diverse configurations across industries such as telecom and oil and gas. Scalability works smoothly in extensive networks, with easy deployment on high bandwidth infrastructures. Users emphasize its adaptability alongside numerous managed servers and workstations, achieving high scalability ratings and seamless transitions between capacity upgrades.

Stability

Trellix Network Detection and Response is generally stable, with minimal reported issues. Users find reliability strong and minimal problems occur unless delving deeper into specific system functions. It satisfies organizational requirements in both network and security terms. Some users note issues with memory, CPU, device crashes, and licensing, but generally find the solution robust and effective. Many rate its stability highly, noting the importance of regular updates to maintain performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trellix Network Detection and Response Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	7
Large Enterprise	16

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	117
Midsize Enterprise	34
Large Enterprise	166

By visitors reading reviews

Top industries

By visitors reading reviews

Comms Service Provider

13%

Manufacturing Company

12%

Financial Services Firm

12%

Government

10%

Computer Software Company

Insurance Company

Energy/Utilities Company

Healthcare Company

Retailer

Educational Organization

Legal Firm

Performing Arts

Logistics Company

Real Estate/Law Firm

Outsourcing Company

Wholesaler/Distributor

Hospitality Company

Media Company

University

Non Profit

Marketing Services Firm

Pharma/Biotech Company

Non Tech Company

Aerospace/Defense Firm

Transportation Company

Construction Company

Compare Trellix Network Detection and Response with alternative products

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response was previously known as FireEye Network Security, FireEye.

Trellix Network Detection and Response customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Product Categories

Advanced Threat Protection (ATP)

Network Detection and Response (NDR)

Popular Comparisons

Microsoft Defender for Endpoint vs Trellix Network Detection and Response

Microsoft Defender for Office 365 vs Trellix Network Detection and Response

Darktrace vs Trellix Network Detection and Response

Proofpoint Email Protection vs Trellix Network Detection and Response

Vectra AI vs Trellix Network Detection and Response

Palo Alto Networks WildFire vs Trellix Network Detection and Response

Cisco Secure Network Analytics vs Trellix Network Detection and Response

Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response

Anomali vs Trellix Network Detection and Response

Palo Alto Networks VM-Series vs Trellix Network Detection and Response

ThreatLocker Zero Trust Endpoint Protection Platform vs Trellix Network Detection and Response

ExtraHop Reveal(x) vs Trellix Network Detection and Response

Trend Micro Deep Discovery vs Trellix Network Detection and Response

NetWitness NDR vs Trellix Network Detection and Response

Fidelis Elevate vs Trellix Network Detection and Response

See all alternatives

Trellix Network Detection and Response Reviews Summary
Author info	Rating	Review Summary
Agente De Servicios Técnicos at a computer software company with 11-50 employees	4.5	I've used Trellix Network Detection and Response for six months and find it highly effective, user-friendly, and great for threat detection and integration, though I wish it offered more detailed threat explanations and containment options.
Senior technical consultant at Hitachi Systems Micro Clinic	4.5	I've used Trellix Network Detection and Response for several years, appreciating its in-depth investigation capabilities and solid detection. Despite its effectiveness, the integration with McAfee and FireEye needs improvement. The solution can be expensive due to storage requirements.
Information Security Engineer at Nhq Distribution Ltd	4.0	I use Trellix Network Detection and Response for network intrusion detection, benefiting from its automatic incident response feature. While effective, it needs a more responsive Central Management Console, improved AI, and better technical support to enhance its utility.
Information Security Senior Advisor at Eskom Ltd	4.5	I have used Trellix Network Detection and Response for thirteen years, finding it invaluable for blocking malicious traffic and supporting endpoint security. While some features are initially challenging, its automation capabilities greatly enhance our security operations against threats like DDoS attacks.
OT/ICS Information Security Specialist at SANS	3.5	In my company, we use Trellix Network Detection and Response for our endpoints. Although I've not used other solutions before, I believe its integration capabilities need improvement. No specific return on investment or cloud provider information was noted.
System Engineer - Security Presales at Raya Integration	4.5	No summary available
Senior Manager at a financial services firm with 10,001+ employees	3.5	I find Trellix Network Detection and Response primarily valuable for its NTAP features, which are easy to set up and stable, with helpful support. However, it needs improved SSL support and better scalability, and we're evaluating Check Point SandBlast Network.
information security at a insurance company with 201-500 employees	2.5	I use Trellix Network Detection and Response daily for threat investigations. Its valuable features include investigative support and providing information as a storyline. However, it lacks the ability to add multiple IOCs simultaneously, complicating searches within our environment.

Title	Rating	Mindshare	Recommending
Microsoft Defender for Endpoint	4.1	7.5%	95%	210 interviews Add to research
Microsoft Defender for Office 365	4.2	6.8%	96%	60 interviews Add to research

Trellix Network Detection and Response Reviews

What is Trellix Network Detection and Response?

Featured Trellix Network Detection and Response reviews

Trellix Network Detection and Response mindshare

PeerResearch reports based on Trellix Network Detection and Response reviews

Valuable Features

Room for Improvement

ROI

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare Trellix Network Detection and Response with alternative products

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response customers

Related questions

Product Categories

Popular Comparisons