Trellix Endpoint Security (ENS) Reviews

Our customers primarily use Trellix Endpoint Security (ENS) only for endpoint security, with some cases where they prepare for Data Loss Prevention (DLP).

The main use case for Trellix Endpoint Security (ENS) is to protect the end user and to block USB and other devices, which is why they prefer to go with Trellix. They also use it for DLP to protect email and other things in their environment.

They find Trellix Endpoint Security (ENS) easy and user-friendly for their environment, which is why they choose Trellix. Additionally, it has a more manageable console compared to other products, which they felt were more difficult.

For incidents, we don't handle them directly because we provide the services for installation and management. We have our own SOC team that manages Trellix Endpoint Security (ENS), offering support. Any incidents that occur are taken care of via email for our customers.

We use Trellix in an OT environment where it is being used as an orchestrator to deploy endpoint security and application controls in our network. We are using its DLP product in OT end points.

We use ENS as our main antivirus tool. The activation of features within ENS and the collection of threats into a single console is a strong point. There are some features we're not using, mainly related to IT environments. For us, ENS is primarily an antivirus and adaptive threat prevention tool. The threats received from endpoints received in ePO consoles which can be relayed on SMTP server to get real time updates on threats.

FireEye offers a great suite of tools. I like its threat analyzer and other features.

We have FireEye Endpoint Security installed on all our desktops, laptops, and servers throughout the network.

It's been crucial to monitor threats 24/7, both external and internal. 

It's capable of stopping ransomware at the gateway, preventing malware, and it can even protect against zero-day attacks.

When I implemented it for one of our clients, it improved their security by almost 70 to 80%. They were using a different solution before, but after implementing Trellix Endpoint Security, they were able to block threats that the earlier solution couldn't handle.

There are only about two to three percent false positives, which isn't much. So, this solution handles false positives quite well and minimizes disruption.

For some of our engagements, we have used MVISION, including data protection, threat intelligence, and DPP also.

We use McAfee MVISION primarily for endpoint protection, antivirus, and understanding the threat intel for end users. 

It is very stable.  

The independent modules are very good. 

For the most part, the setup and deployment are simple.

I use Trellix Endpoint Security on all of my Red Hat and Windows 11 endpoints.

Trellix Endpoint Security seems to do a good job in terms of protecting my infrastructure from malware.

We primarily use Trellix for drive encryption and malware prevention, but we also use some advanced features, such as centralized control and policy management. 

Trellix enables us to customize and centrally manage policies. We can set on-prem policies and synchronize them with the cloud. 

We primarily use the solution for endpoint security.

One of the strengths of McAfee in general, not only in the Endpoint, is the ePolicy orchestrator. It's a single management platform for all the solutions and also a single agent. From my experience, with all other products, it becomes easy to use with multiple deployments. 

With McAfee, what you do is you just upload and download some packages for specific features. For example, with endpoint security, you get only the four features, the firewall, web control, the ATP, and then threat prevention. Should the client would want an additional feature, for example, device control, full-blown DLP, or application control, then we can add the packages for that and then easily deploy it with the client. 

We are using all Trellix solutions, and we are also using all McAfee products. Our customers are using virus scan for the old platforms, Endpoint Security, MVISION, File and Folder Encryption, File and Folder Protection, and Device Control, but at the moment, I am really interested in the integration between the new Trellix solution like MVISION and FireEye.

It is a really strong solution for endpoint security.