No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Network Detection and Response Logo

Trellix Network Detection and Response Reviews

Vendor: Trellix
4.2 out of 5
Leave a review

What is Trellix Network Detection and Response?

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Get the Trellix Network Detection and Response Buyer's Guide and find out what your peers are saying about Trellix Network Detection and Response, Microsoft Defender for Endpoint, Darktrace and more!
Trellix Network Detection and Response is the #7 ranked solution in top Network Detection and Response (NDR) solutions and #10 ranked solution in top Advanced Threat Protection (ATP) solutions. PeerSpot users give Trellix Network Detection and Response an average rating of 8.4 out of 10. Trellix Network Detection and Response is most commonly compared to Microsoft Defender for Endpoint: Trellix Network Detection and Response vs Microsoft Defender for Endpoint. Trellix Network Detection and Response is popular among the small business segment, accounting for 48% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a manufacturing company, accounting for 17% of all views.
Buyer's Guide
Trellix Network Detection and Response
May 2026
Get the report
Helped 899,283 peers since 2012

Featured Trellix Network Detection and Response reviews

Read more reviews

Trellix Network Detection and Response mindshare

Product category:
Advanced Threat Protection (ATP)
As of June 2026, the mindshare of Trellix Network Detection and Response in the Advanced Threat Protection (ATP) category stands at 4.1%, up from 4.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response4.1%
Palo Alto Networks WildFire7.3%
Microsoft Defender for Office 3656.5%
Other82.1%
Advanced Threat Protection (ATP)

PeerResearch reports based on Trellix Network Detection and Response reviews

TypeTitleDate
CategoryAdvanced Threat Protection (ATP)Jun 15, 2026Download
ProductReviews, tips, and advice from real usersJun 15, 2026Download
ComparisonTrellix Network Detection and Response vs Palo Alto Networks WildFireJun 15, 2026Download
ComparisonTrellix Network Detection and Response vs Microsoft Defender for Office 365Jun 15, 2026Download
ComparisonTrellix Network Detection and Response vs Proofpoint Email ProtectionJun 15, 2026Download
Suggested products
TitleRatingMindshareRecommending
Microsoft Defender for Endpoint4.15.8%95%213 interviewsAdd to research
Darktrace4.1N/A95%84 interviewsAdd to research
 
 
Key learnings from peers
Last updated Jun 14, 2026

Valuable Features

Trellix Network Detection and Response offers valuable features such as network visibility, threat detection, and behavior analysis. Users appreciate its real-time monitoring, deep analysis for malware detection, and integration with other security tools. Trellix's ability to detect zero-day attacks, provide automated responses, and reduce investigation time enhances security operations. The MVX engine and logging capabilities offer strong protection against intrusions and advanced threats. Centralized monitoring and threat intelligence integration further improve organizational security posture.
  • "Trellix Network Detection and Response has positively impacted our organization by improving our ability to identify threats earlier in the attack lifecycle and providing better visibility into network activity across the organization."
  • "Trellix Network Detection and Response has positively impacted our organization by making our security team more confident and responsible, knowing that the network is being watched all the time, allowing us to respond to threats much faster than we used to."
  • "Trellix Network Detection and Response has positively impacted my organization by creating a better safeguard and protecting us from threats."

Room for Improvement

Trellix Network Detection and Response needs improvement in areas like integration with third-party vendors, dashboard customization, and support access. Enhanced machine learning, simplified UI, and better documentation are also desired. Users seek reduced alert noise, more flexible reporting capabilities, and advanced AI use cases. Effective management of the appliance and improved threat intelligence depth are necessary. Additionally, improvements in network visibility, security, and pricing adjustments are recommended by users seeking comprehensive capabilities.
  • "To improve Trellix Network Detection and Response, I suggest enhancing reporting customization; the reports can be much better, and I should have the ability to customize them much more freely."
  • "Trellix Network Detection and Response is a powerful tool with areas that need improvement, such as dashboard customization options and reporting flexibility."
  • "I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities."

ROI

Trellix Network Detection and Response delivers a strong return on investment by preventing breaches and attacks, reducing investigation and response times, and enhancing security efficiency. Users achieve significant savings in time and resources and handle more threats without increasing headcount. Automated detections lower manual monitoring, enabling faster threat resolution and decreasing false positives. Organizations see improvements in operational efficiency and network visibility, with some experiencing up to 200% ROI, resulting in higher satisfaction and productivity.

Pricing

Trellix Network Detection and Response pricing is often considered high, particularly maintenance fees, making it challenging for smaller enterprises. While some find the setup smooth and licensing straightforward, others feel the cost could be more competitive. Users appreciate the robust security capabilities but express concerns over affordability compared to alternatives. Pricing varies based on organizational needs and package features. Overall, the investment is seen as justified by the platform's quality and comprehensive threat detection capabilities.
  • "The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
  • "The tool is a bit pricey."
  • "When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

Popular Use Cases

Trellix Network Detection and Response is primarily used for threat detection and response, monitoring network traffic, and identifying suspicious behavior. Organizations use it for endpoint and network protection, integrating with firewalls for threat intel, detecting zero-day threats, and enabling forensic analysis. It provides network visibility, incident response, and forensic investigation. Users leverage its capabilities for monitoring network activity, blocking malicious traffic, and enhancing security against various attack vectors.

Service and Support

Trellix Network Detection and Response's customer service is generally praised for being prompt, responsive, and supportive, offering multiple contact options and detailed documentation. Technical support is noted for being knowledgeable and effective but can be restrictive and slow, particularly during high-severity incidents. Some users highlight that technical assistance is based in India and involves dealing with Trellix's engineering team. Satisfaction varies, with ratings often between eight and nine out of ten, although a few users suggest room for improvement.

Deployment

The setup process for Trellix Network Detection and Response is generally straightforward and uncomplicated. Many users report a quick deployment, completed within days, with minimal complexity. Integration with existing systems is handled efficiently, requiring little ongoing maintenance. While some encountered initial complexities or bugs, these were resolved with professional guidance. Efficient plug-and-play installations, user-friendly interfaces, and manageable pricing structures contribute positively to user satisfaction with initial deployment experiences.

Scalability

Trellix Network Detection and Response showcases high scalability across various environments. Users report smooth upgrades and effective handling of increasing demands. The solution adjusts well to different network sizes and configurations. Some mention scalability limitations with features, while others highlight seamless performance with adequate resource allocation. Users note its capability to scale efficiently by adding licenses or modules, with minimal issues encountered with scalability across diverse industries.

Stability

Trellix Network Detection and Response exhibits strong stability with consistent performance. Users appreciate its reliability, facing minimal issues, mostly resolved quickly. Feedback indicates it operates well in high-temperature environments with robust hardware performance. Although some occasionally experience downtime, especially during off-hours or complex operations, stability ratings are high, averaging eight to nine out of ten. Users note occasional performance issues but find them solvable, appreciating timely updates and responsive vendor support.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Network Detection and Response Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business19
Midsize Enterprise9
Large Enterprise19
By reviewers
By visitors reading reviews
Company SizeCount
Small Business185
Midsize Enterprise49
Large Enterprise150
By visitors reading reviews

Top industries

By visitors reading reviews
Manufacturing Company
17%
Financial Services Firm
13%
Comms Service Provider
9%
Government
7%
Outsourcing Company
6%
Computer Software Company
5%
Healthcare Company
4%
Construction Company
4%
Insurance Company
4%
Marketing Services Firm
3%
Educational Organization
3%
Energy/Utilities Company
3%
Performing Arts
2%
Real Estate/Law Firm
2%
Retailer
2%
Media Company
2%
Logistics Company
2%
Transportation Company
2%
Legal Firm
2%
Wholesaler/Distributor
1%
University
1%
Non Profit
1%
Pharma/Biotech Company
1%
Hospitality Company
1%
Aerospace/Defense Firm
1%
Recreational Facilities/Services Company
1%
Non Tech Company
1%

Compare Trellix Network Detection and Response with alternative products

Go!

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?
  • Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
  • APTs Detection: Detects advanced persistent threats through sophisticated techniques.
  • MVX Engine: Uses virtual machines for behavioral analysis.
  • Sandboxing: Adds a layer of threat protection.
  • Real-Time Response: Offers immediate threat mitigation and context.
  • User-Friendly Dashboard: Enhances visibility with application filtering.
What are the benefits of Trellix Network Detection and Response?
  • Enhanced Usability: Integrates easily with other platforms for seamless operations.
  • Detailed Context: Real-time packet capture provides in-depth threat analysis.
  • Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
  • Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix Network Detection and Response was previously known as FireEye Network Security, FireEye.

Trellix Network Detection and Response customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Related questions

  • 71
How much do independent test results affect your security purchases?
  • 48
Holding Security Vendors Accountable
  • 66
What can businesses do to improve their security posture?
  • 58
When evaluating Advanced Threat Protection, what aspect do you think is the most important to look for?
  • 242
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 144
Compromise Assessment vs Threat Hunting
  • 81
What are the main evaluation criteria for you when choosing the right vendor for brand protection services?
  • 205
Why is ATP (Advanced Threat Protection) important for companies?

Product Categories

Product Categories
Advanced Threat Protection (ATP)
Network Detection and Response (NDR)

Popular Comparisons

Popular Comparisons
Microsoft Defender for Endpoint vs Trellix Network Detection and Response Logo
Microsoft Defender for Endpoint vs Trellix Network Detection and Response
Darktrace vs Trellix Network Detection and Response Logo
Darktrace vs Trellix Network Detection and Response
Microsoft Defender for Office 365 vs Trellix Network Detection and Response Logo
Microsoft Defender for Office 365 vs Trellix Network Detection and Response
Proofpoint Email Protection vs Trellix Network Detection and Response Logo
Proofpoint Email Protection vs Trellix Network Detection and Response
Vectra AI vs Trellix Network Detection and Response Logo
Vectra AI vs Trellix Network Detection and Response
Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
Palo Alto Networks WildFire vs Trellix Network Detection and Response
Cisco Secure Network Analytics vs Trellix Network Detection and Response Logo
Cisco Secure Network Analytics vs Trellix Network Detection and Response
Anomali vs Trellix Network Detection and Response Logo
Anomali vs Trellix Network Detection and Response
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response Logo
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response
Palo Alto Networks VM-Series vs Trellix Network Detection and Response Logo
Palo Alto Networks VM-Series vs Trellix Network Detection and Response
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response Logo
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response
Microsoft Defender for Identity vs Trellix Network Detection and Response Logo
Microsoft Defender for Identity vs Trellix Network Detection and Response
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response Logo
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response
Digital Guardian vs Trellix Network Detection and Response Logo
Digital Guardian vs Trellix Network Detection and Response
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response Logo
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response
See all alternatives
 
Trellix Network Detection and Response Reviews Summary
Author infoRatingReview Summary
Network & Security Lead at Net-International5.0I use Trellix NDR for IDS/IPS, boosting network performance by offloading traffic inspection from firewalls. It handles east-west threats and offers excellent ROI. I rated it 10/10 for its performance and efficiency, despite desiring machine learning integration.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees3.5I find Trellix NDR effective for threat detection and reducing alerts, providing good ROI due to its affordability. However, it suffers from excessive alert noise, poor documentation, and inadequate customer support, requiring significant improvements.
Cyber Security Engineer at a retailer with 51-200 employees4.0I use Trellix NDR for strong threat detection, valuing its intelligence and integration for improved security and time savings. While stable, I wish for better reporting, simpler policy management, and faster support, but it's a good mid-budget tool.
Cyber Security Engineer II (Vulnerability & Threat Management) at FICO4.0I value Trellix NDR for strong network visibility and detecting lateral movement, enhancing investigations when correlated with other tools. While setup and UI could improve, it scales well, offers good customer support, and performs faster, aiding compliance.
Assistant General Manager at Sunteck Realty Pvt Ltd4.5I use Trellix NDR for continuous network analysis, enhancing threat detection and visibility. It significantly streamlined investigations and proved stable, scalable, and reliable. I value its traffic analysis, though I'd like more reporting flexibility. It's a 9/10 solution.
Presales Manager5.0I highly recommend Trellix NDR (10/10) for its excellent network visibility, threat detection, and compliance benefits. I believe pricing could improve, and more advanced AI/automation for proactive threat handling would make this crucial solution even better.
Security Engineer at Digitaltrack4.0Trellix NDR greatly enhances my organization's security posture and visibility, offering real-time threat detection and significantly faster incident response, reducing manual effort. My only suggestion is improving the UI for new users.
Technical Specialist at VDA Infosolutions Pvt. Ltd.4.5I've used Trellix NDR for three years for real-time threat detection and traffic analysis. It's stable, scalable, accurate, and provides clear alerts, enabling faster threat response. I rate it highly, though I envision future AI-based reporting.