No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Network Detection and Response Logo

Trellix Network Detection and Response Reviews

Vendor: Trellix
4.2 out of 5
Leave a review

What is Trellix Network Detection and Response?

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Get the Trellix Network Detection and Response Buyer's Guide and find out what your peers are saying about Trellix Network Detection and Response, Microsoft Defender for Endpoint, Darktrace and more!
Trellix Network Detection and Response is the #13 ranked solution in top Network Detection and Response (NDR) solutions and #17 ranked solution in top Advanced Threat Protection (ATP) solutions. PeerSpot users give Trellix Network Detection and Response an average rating of 8.4 out of 10. Trellix Network Detection and Response is most commonly compared to Microsoft Defender for Endpoint: Trellix Network Detection and Response vs Microsoft Defender for Endpoint. Trellix Network Detection and Response is popular among the large enterprise segment, accounting for 43% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.
Buyer's Guide
Trellix Network Detection and Response
April 2026
Get the report
Helped 895,272 peers since 2012

Featured Trellix Network Detection and Response reviews

Read more reviews

Trellix Network Detection and Response mindshare

Product category:
Advanced Threat Protection (ATP)
As of May 2026, the mindshare of Trellix Network Detection and Response in the Advanced Threat Protection (ATP) category stands at 4.1%, up from 3.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response4.1%
Palo Alto Networks WildFire7.4%
Microsoft Defender for Office 3656.7%
Other81.8%
Advanced Threat Protection (ATP)

PeerResearch reports based on Trellix Network Detection and Response reviews

TypeTitleDate
CategoryAdvanced Threat Protection (ATP)May 20, 2026Download
ProductReviews, tips, and advice from real usersMay 20, 2026Download
ComparisonTrellix Network Detection and Response vs Palo Alto Networks WildFireMay 20, 2026Download
ComparisonTrellix Network Detection and Response vs Microsoft Defender for Office 365May 20, 2026Download
ComparisonTrellix Network Detection and Response vs Proofpoint Email ProtectionMay 20, 2026Download
Suggested products
TitleRatingMindshareRecommending
Microsoft Defender for Endpoint4.15.7%95%213 interviewsAdd to research
Darktrace4.1N/A95%84 interviewsAdd to research
 
 
Key learnings from peers
Last updated May 17, 2026

Valuable Features

Trellix Network Detection and Response excels in threat detection with its MVX engine, zero-day attack prevention, strong sandbox capabilities, and integrated response features. It provides real-time network visibility, automated threat response, and detailed forensic insights. Its user-friendly interface and seamless integration with other security systems enhance network protection. Clients appreciate its impact on reducing alert fatigue and improving incident response time by significantly lowering daily alerts.
  • "Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall."
  • "The biggest impact Trellix Network Detection and Response has had on our organization is improved visibility across our environment and better confidence during investigations, as security analysts can understand suspicious behavior more clearly instead of depending solely on isolated alerts."
  • "The best features that Trellix Network Detection and Response offers are visibility, threat detection, and immediate response, which allows us to take action almost instantly while keeping proof through proper data capture and maintaining logs for future analysis to prevent attacks and ensure that we have the right policies and controls."

Room for Improvement

Trellix Network Detection and Response requires improvements in management, user interface, and AI capabilities. It lacks effective cloud integration, customization features, and documentation. Users report issues with false positives and need better threat intelligence. Integration with other vendors and enhanced support for SSL decryption is essential. The alert noise needs reduction, and there is dissatisfaction with customer support response time, necessitating a more straightforward management console and dashboard. Enhanced reporting and central management are also needed.
  • "I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities."
  • "Improvement-wise, the initial setup, fine-tuning, and learning can take effort."
  • "Trellix Network Detection and Response is stable but occasionally encounters performance issues, which we can fix quickly."

ROI

Trellix Network Detection and Response delivers substantial ROI by significantly reducing breaches and attack incidents. Organizations experience fewer response actions as threats are mitigated swiftly, enhancing staff productivity and minimizing cleanup efforts. Automated detections shorten analysis times, saving both resources and money with competitive pricing plans. Satisfied users report nearly double the expected ROI due to its effective threat prevention capabilities, reducing detection and analysis time considerably.

Pricing

Trellix Network Detection and Response is perceived as relatively expensive, with licensing costs on a yearly basis. Some users find pricing and maintenance fees high, whereas others see it as reasonable compared to competitors. The solution's quality justifies its cost for those valuing reliability in threat detection. While smaller customers may struggle with expenses, enterprise buyers evaluating its worth or needing high-level security capabilities may find it meets their requirements.
  • "The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
  • "The tool is a bit pricey."
  • "When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

Popular Use Cases

Users primarily utilize Trellix Network Detection and Response for network intrusion detection and Advanced Persistent Threat detection. It protects against malware and identifies zero-day vulnerabilities without signature recognition. Many entities implement it for endpoint protection, email and web traffic monitoring, and sandboxing. Integrated with firewalls and other tools, it scans network traffic and supports forensic analysis. Organizations value its threat intelligence feature for comprehensive investigations and reducing client risks.

Service and Support

Trellix Network Detection and Response's customer service and technical support receive mixed feedback. Many find the support very good and responsive, with multiple contact options and extensive documentation. Some note issues with response times and complexity in accessing engineering teams. Opinions vary, with ratings fluctuating between six to ten out of ten. While the support is generally satisfactory, some users mention the need for improvement, particularly in high-severity situations and technical expertise availability.

Deployment

Trellix Network Detection and Response's initial setup is generally straightforward and simple, often described as plug-and-play. Some users managed deployment within hours, while others took several days depending on environmental complexities. Professional support from Trellix eased the process for some users. Users occasionally faced complexities in larger environments, but documentation and templates facilitated the setup for many, with some deployments completed by small teams in under two weeks.

Scalability

Trellix Network Detection and Response is generally scalable, with varied experiences across users. Some using appliance-based setups noted room for improvement, while cloud-based users faced fewer challenges. Many report smooth scalability across high bandwidths, supporting thousands of users. Appropriately chosen configurations aid in managing user demands, but scaling beyond specific limits might require upgrades. Users in diverse industries, from telecom to cybersecurity, successfully scale with careful planning and adequate resources.

Stability

Trellix Network Detection and Response exhibits strong stability and minimal issues, with most users reporting it as reliable. Some experienced occasional downtime or throughput challenges, especially when delving deeper into the system. Vendor responsiveness for updates and support is noted as positive. Minor concerns relate to memory and CPU limits or specific license requirements. Users often rate its stability high, praising its robust hardware and operational resilience against harsh conditions.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Network Detection and Response Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business17
Midsize Enterprise7
Large Enterprise18
By reviewers
By visitors reading reviews
Company SizeCount
Small Business146
Midsize Enterprise49
Large Enterprise146
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
14%
Comms Service Provider
12%
Manufacturing Company
11%
Government
8%
Computer Software Company
6%
Healthcare Company
5%
Insurance Company
4%
Outsourcing Company
4%
Marketing Services Firm
3%
Construction Company
3%
Educational Organization
3%
Energy/Utilities Company
3%
Performing Arts
3%
Real Estate/Law Firm
2%
Logistics Company
2%
Legal Firm
2%
Retailer
2%
Transportation Company
2%
Media Company
2%
Wholesaler/Distributor
1%
University
1%
Non Profit
1%
Pharma/Biotech Company
1%
Hospitality Company
1%
Non Tech Company
1%
Aerospace/Defense Firm
1%
Recreational Facilities/Services Company
1%

Compare Trellix Network Detection and Response with alternative products

Go!

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?
  • Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
  • APTs Detection: Detects advanced persistent threats through sophisticated techniques.
  • MVX Engine: Uses virtual machines for behavioral analysis.
  • Sandboxing: Adds a layer of threat protection.
  • Real-Time Response: Offers immediate threat mitigation and context.
  • User-Friendly Dashboard: Enhances visibility with application filtering.
What are the benefits of Trellix Network Detection and Response?
  • Enhanced Usability: Integrates easily with other platforms for seamless operations.
  • Detailed Context: Real-time packet capture provides in-depth threat analysis.
  • Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
  • Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix Network Detection and Response was previously known as FireEye Network Security, FireEye.

Trellix Network Detection and Response customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Related questions

  • 64
How much do independent test results affect your security purchases?
  • 37
Holding Security Vendors Accountable
  • 47
What can businesses do to improve their security posture?
  • 47
When evaluating Advanced Threat Protection, what aspect do you think is the most important to look for?
  • 210
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 118
Compromise Assessment vs Threat Hunting
  • 64
What are the main evaluation criteria for you when choosing the right vendor for brand protection services?
  • 188
Why is ATP (Advanced Threat Protection) important for companies?

Product Categories

Product Categories
Advanced Threat Protection (ATP)
Network Detection and Response (NDR)

Popular Comparisons

Popular Comparisons
Microsoft Defender for Endpoint vs Trellix Network Detection and Response Logo
Microsoft Defender for Endpoint vs Trellix Network Detection and Response
Darktrace vs Trellix Network Detection and Response Logo
Darktrace vs Trellix Network Detection and Response
Microsoft Defender for Office 365 vs Trellix Network Detection and Response Logo
Microsoft Defender for Office 365 vs Trellix Network Detection and Response
Proofpoint Email Protection vs Trellix Network Detection and Response Logo
Proofpoint Email Protection vs Trellix Network Detection and Response
Vectra AI vs Trellix Network Detection and Response Logo
Vectra AI vs Trellix Network Detection and Response
Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
Palo Alto Networks WildFire vs Trellix Network Detection and Response
Cisco Secure Network Analytics vs Trellix Network Detection and Response Logo
Cisco Secure Network Analytics vs Trellix Network Detection and Response
Anomali vs Trellix Network Detection and Response Logo
Anomali vs Trellix Network Detection and Response
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response Logo
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response Logo
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response
Palo Alto Networks VM-Series vs Trellix Network Detection and Response Logo
Palo Alto Networks VM-Series vs Trellix Network Detection and Response
Microsoft Defender for Identity vs Trellix Network Detection and Response Logo
Microsoft Defender for Identity vs Trellix Network Detection and Response
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response Logo
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response Logo
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response
Digital Guardian vs Trellix Network Detection and Response Logo
Digital Guardian vs Trellix Network Detection and Response
See all alternatives
 
Trellix Network Detection and Response Reviews Summary
Author infoRatingReview Summary
Network & Security Lead at Net-International5.0I use Trellix NDR for IDS/IPS, boosting network performance by offloading traffic inspection from firewalls. It handles east-west threats and offers excellent ROI. I rated it 10/10 for its performance and efficiency, despite desiring machine learning integration.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees3.5I find Trellix NDR effective for threat detection and reducing alerts, providing good ROI due to its affordability. However, it suffers from excessive alert noise, poor documentation, and inadequate customer support, requiring significant improvements.
Cyber Security Engineer II (Vulnerability & Threat Management) at FICO4.0I value Trellix NDR for strong network visibility and detecting lateral movement, enhancing investigations when correlated with other tools. While setup and UI could improve, it scales well, offers good customer support, and performs faster, aiding compliance.
Presales Manager5.0I highly recommend Trellix NDR (10/10) for its excellent network visibility, threat detection, and compliance benefits. I believe pricing could improve, and more advanced AI/automation for proactive threat handling would make this crucial solution even better.
Agente De Servicios Técnicos at a computer software company with 11-50 employees4.5I've used Trellix Network Detection and Response for six months and find it highly effective, user-friendly, and great for threat detection and integration, though I wish it offered more detailed threat explanations and containment options.
IT Manager at Gigabit Technologies Pvt Ltd4.5I find Trellix NDR excellent for threat detection, response, and forensic analysis, noting its strong integration, threat intelligence, and ROI. My only concern is the slow support response time, but overall, it's a valuable and easy-to-deploy solution.
Senior technical consultant at Hitachi Systems Micro Clinic4.5I've used Trellix Network Detection and Response for several years, appreciating its in-depth investigation capabilities and solid detection. Despite its effectiveness, the integration with McAfee and FireEye needs improvement. The solution can be expensive due to storage requirements.
Information Security Engineer at Nhq Distribution Ltd4.0I use Trellix Network Detection and Response for network intrusion detection, benefiting from its automatic incident response feature. While effective, it needs a more responsive Central Management Console, improved AI, and better technical support to enhance its utility.