No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Network Detection and Response Logo

Trellix Network Detection and Response Reviews

Vendor: Trellix
4.2 out of 5
Leave a review

What is Trellix Network Detection and Response?

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Get the Trellix Network Detection and Response Buyer's Guide and find out what your peers are saying about Trellix Network Detection and Response, Microsoft Defender for Endpoint, Darktrace and more!
Trellix Network Detection and Response is the #9 ranked solution in top Network Detection and Response (NDR) solutions and #13 ranked solution in top Advanced Threat Protection (ATP) solutions. PeerSpot users give Trellix Network Detection and Response an average rating of 8.4 out of 10. Trellix Network Detection and Response is most commonly compared to Microsoft Defender for Endpoint: Trellix Network Detection and Response vs Microsoft Defender for Endpoint. Trellix Network Detection and Response is popular among the large enterprise segment, accounting for 44% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 15% of all views.
Buyer's Guide
Trellix Network Detection and Response
April 2026
Get the report
Helped 892,287 peers since 2012

Featured Trellix Network Detection and Response reviews

Read more reviews

Trellix Network Detection and Response mindshare

Product category:
Advanced Threat Protection (ATP)
As of April 2026, the mindshare of Trellix Network Detection and Response in the Advanced Threat Protection (ATP) category stands at 3.8%, up from 3.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response3.8%
Palo Alto Networks WildFire7.5%
Microsoft Defender for Office 3656.9%
Other81.8%
Advanced Threat Protection (ATP)

PeerResearch reports based on Trellix Network Detection and Response reviews

TypeTitleDate
CategoryAdvanced Threat Protection (ATP)Apr 30, 2026Download
ProductReviews, tips, and advice from real usersApr 30, 2026Download
ComparisonTrellix Network Detection and Response vs Palo Alto Networks WildFireApr 30, 2026Download
ComparisonTrellix Network Detection and Response vs Microsoft Defender for Office 365Apr 30, 2026Download
ComparisonTrellix Network Detection and Response vs Proofpoint Email ProtectionApr 30, 2026Download
Suggested products
TitleRatingMindshareRecommending
Microsoft Defender for Endpoint4.15.4%95%215 interviewsAdd to research
Darktrace4.1N/A95%84 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Trellix Network Detection and Response excels in detecting zero-day attacks using its powerful sandboxing technology and MVX engine. Its user-friendly dashboard enhances visibility and simplifies management. Integration capabilities with various security tools provide seamless operation for organizations. Comprehensive threat detection and response along with storytelling-based investigation capabilities set it apart. Users highlight its effective incident reporting, strong automation, and the ability to handle complex security scenarios efficiently, ensuring greater protection and control over their network environments.
  • "FireEye has placed us in the position to proactively counter malicious threats; we now don’t have to take a user offline in order to rebuild their PC following an attack."
  • "Once we had a chance to do our own due diligence, it was clear that there is really nothing else that compares with the FireEye appliance."
  • "By every measure, the FireEye Network Threat Prevention Platform has exceeded our expectations."

Room for Improvement

Trellix Network Detection and Response needs better integration and network visibility. Customizability and management could be improved. False positives are frequent, requiring more effective filtering and reporting capabilities. Cloud connectivity and machine learning features are lacking. SSL support and documentation should be enhanced. Improved threat intelligence sharing and cross-vendor integration are needed. Greater AI intelligence, a streamlined dashboard, and responsive technical support are desired. Better threat detail explanation and multi-IOC handling are suggested for improvement.
  • "The support from FireEye Network Security is not very good."
  • "The support is somewhat lacking with long response times."
  • "Its documentation can be improved. The main problem that I see with FireEye is the documentation."

ROI

Clients and organizations experienced nearly 200% more return than anticipated with Trellix Network Detection and Response. It effectively prevents breaches and attacks, reducing response time by days and boosting staff productivity. Users noted a significant reduction in time needed to identify threats, with a mature organization reporting analysis time decreased by tenfold. Satisfaction levels are high as it precludes network incidents, eliminating the need for reactive measures.

Pricing

Enterprise users found Trellix Network Detection and Response pricing slightly high but comparable to competitors. Licensing is typically annual, with costs varying by organization size and needs. Some users noted the expense, particularly in maintenance fees and necessary Mbps packages. Despite being considered a bit pricey, many prioritize its effective threat detection over cheaper, less reliable alternatives. Partners with certain vendors, like Cisco, receive more favorable pricing, whereas it may be costlier than solutions like Palo Alto.
  • "The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
  • "The tool is a bit pricey."
  • "When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

Popular Use Cases

Trellix Network Detection and Response is primarily utilized for network intrusion detection, providing security for network environments and defending against attacks. It is implemented for monitoring network traffic, endpoint protection, and identifying zero-day vulnerabilities. Users employ it for threat investigations and forensic analysis, integrating with firewalls for enhanced threat intelligence. Trellix aids in blocking malicious traffic, scanning uploads and downloads, and supporting customer environments with XDR tools.

Service and Support

Customer service and support for Trellix Network Detection and Response receive positive feedback, typically rated between 8 and 10. Users appreciate the responsive technical support, though some suggest improvements. Support includes options like 24/7 premium service, chat, and multiple contact channels. While some users handle initial support internally, others rely on Trellix for advanced issues. Negative comments highlight delays and technical expertise gaps. FireEye platform support is responsive, but there is mention of restrictive maintenance policies.

Deployment

Trellix Network Detection and Response's initial setup is largely straightforward and user-friendly. Most found it simple, aided by comprehensive documentation and supportive technical staff. While some encountered complexity with specific technical environments, deployment often required minimal personnel and was accomplished swiftly. Trellix received mixed feedback on timeframes, with some completing setup in hours and others facing longer processes. Professional services and clear instructions contributed significantly to ease of integration within existing infrastructures.

Scalability

Trellix Network Detection and Response scales effectively with both cloud-based and appliance-based implementations. Many users experience no issues handling thousands of users and high bandwidth capacities. It supports diverse configurations across industries such as telecom and oil and gas. Scalability works smoothly in extensive networks, with easy deployment on high bandwidth infrastructures. Users emphasize its adaptability alongside numerous managed servers and workstations, achieving high scalability ratings and seamless transitions between capacity upgrades.

Stability

Trellix Network Detection and Response is generally stable, with minimal reported issues. Users find reliability strong and minimal problems occur unless delving deeper into specific system functions. It satisfies organizational requirements in both network and security terms. Some users note issues with memory, CPU, device crashes, and licensing, but generally find the solution robust and effective. Many rate its stability highly, noting the importance of regular updates to maintain performance.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Network Detection and Response Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business15
Midsize Enterprise7
Large Enterprise16
By reviewers
By visitors reading reviews
Company SizeCount
Small Business142
Midsize Enterprise51
Large Enterprise149
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
15%
Comms Service Provider
11%
Manufacturing Company
11%
Government
8%
Computer Software Company
6%
Healthcare Company
5%
Insurance Company
4%
Marketing Services Firm
3%
Construction Company
3%
Outsourcing Company
3%
Energy/Utilities Company
3%
Educational Organization
3%
Performing Arts
2%
Real Estate/Law Firm
2%
Logistics Company
2%
Legal Firm
2%
Retailer
2%
Wholesaler/Distributor
2%
Media Company
2%
Transportation Company
2%
University
2%
Non Profit
1%
Pharma/Biotech Company
1%
Non Tech Company
1%
Hospitality Company
1%
Aerospace/Defense Firm
1%

Compare Trellix Network Detection and Response with alternative products

Go!

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?
  • Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
  • APTs Detection: Detects advanced persistent threats through sophisticated techniques.
  • MVX Engine: Uses virtual machines for behavioral analysis.
  • Sandboxing: Adds a layer of threat protection.
  • Real-Time Response: Offers immediate threat mitigation and context.
  • User-Friendly Dashboard: Enhances visibility with application filtering.
What are the benefits of Trellix Network Detection and Response?
  • Enhanced Usability: Integrates easily with other platforms for seamless operations.
  • Detailed Context: Real-time packet capture provides in-depth threat analysis.
  • Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
  • Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix Network Detection and Response was previously known as FireEye Network Security, FireEye.

Trellix Network Detection and Response customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Related questions

  • 55
How much do independent test results affect your security purchases?
  • 29
Holding Security Vendors Accountable
  • 34
What can businesses do to improve their security posture?
  • 37
When evaluating Advanced Threat Protection, what aspect do you think is the most important to look for?
  • 186
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 99
Compromise Assessment vs Threat Hunting
  • 53
What are the main evaluation criteria for you when choosing the right vendor for brand protection services?
  • 176
Why is ATP (Advanced Threat Protection) important for companies?

Product Categories

Product Categories
Advanced Threat Protection (ATP)
Network Detection and Response (NDR)

Popular Comparisons

Popular Comparisons
Microsoft Defender for Endpoint vs Trellix Network Detection and Response Logo
Microsoft Defender for Endpoint vs Trellix Network Detection and Response
Darktrace vs Trellix Network Detection and Response Logo
Darktrace vs Trellix Network Detection and Response
Microsoft Defender for Office 365 vs Trellix Network Detection and Response Logo
Microsoft Defender for Office 365 vs Trellix Network Detection and Response
Proofpoint Email Protection vs Trellix Network Detection and Response Logo
Proofpoint Email Protection vs Trellix Network Detection and Response
Vectra AI vs Trellix Network Detection and Response Logo
Vectra AI vs Trellix Network Detection and Response
Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
Palo Alto Networks WildFire vs Trellix Network Detection and Response
Cisco Secure Network Analytics vs Trellix Network Detection and Response Logo
Cisco Secure Network Analytics vs Trellix Network Detection and Response
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response Logo
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response Logo
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response
Anomali vs Trellix Network Detection and Response Logo
Anomali vs Trellix Network Detection and Response
Microsoft Defender for Identity vs Trellix Network Detection and Response Logo
Microsoft Defender for Identity vs Trellix Network Detection and Response
Palo Alto Networks VM-Series vs Trellix Network Detection and Response Logo
Palo Alto Networks VM-Series vs Trellix Network Detection and Response
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response Logo
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response Logo
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response
NetWitness NDR vs Trellix Network Detection and Response Logo
NetWitness NDR vs Trellix Network Detection and Response
See all alternatives
 
Trellix Network Detection and Response Reviews Summary
Author infoRatingReview Summary
Agente De Servicios Técnicos at a computer software company with 11-50 employees4.5I've used Trellix Network Detection and Response for six months and find it highly effective, user-friendly, and great for threat detection and integration, though I wish it offered more detailed threat explanations and containment options.
Senior technical consultant at Hitachi Systems Micro Clinic4.5I've used Trellix Network Detection and Response for several years, appreciating its in-depth investigation capabilities and solid detection. Despite its effectiveness, the integration with McAfee and FireEye needs improvement. The solution can be expensive due to storage requirements.
Information Security Engineer at Nhq Distribution Ltd4.0I use Trellix Network Detection and Response for network intrusion detection, benefiting from its automatic incident response feature. While effective, it needs a more responsive Central Management Console, improved AI, and better technical support to enhance its utility.
Information Security Senior Advisor at Eskom Ltd4.5I have used Trellix Network Detection and Response for thirteen years, finding it invaluable for blocking malicious traffic and supporting endpoint security. While some features are initially challenging, its automation capabilities greatly enhance our security operations against threats like DDoS attacks.
OT/ICS Information Security Specialist at SANS3.5In my company, we use Trellix Network Detection and Response for our endpoints. Although I've not used other solutions before, I believe its integration capabilities need improvement. No specific return on investment or cloud provider information was noted.
Senior Manager at a financial services firm with 10,001+ employees3.5I find Trellix Network Detection and Response primarily valuable for its NTAP features, which are easy to set up and stable, with helpful support. However, it needs improved SSL support and better scalability, and we're evaluating Check Point SandBlast Network.
System Engineer - Security Presales at Raya Integration4.5I rate FireEye Network Security 8/10; it's a very effective solution with an excellent sandbox. However, I wish for better integration with other firewalls and improved customer support, as I occasionally face memory issues.
information security at a insurance company with 201-500 employees2.5I use Trellix Network Detection and Response daily for threat investigations. Its valuable features include investigative support and providing information as a storyline. However, it lacks the ability to add multiple IOCs simultaneously, complicating searches within our environment.