Try our new research platform with insights from 80,000+ expert users

FileAudit vs Trellix ESM comparison

IS Decisions and Trellix are both solutions in the Security Information and Event Management (SIEM) category. IS Decisions is ranked #64, while Trellix is ranked #17 with an average rating of 8.4. IS Decisions holds a 0.3% mindshare in SIEM, compared to Trellix’s 1.1% mindshare. Additionally, 100% of IS Decisions users are willing to recommend the solution, compared to 76% of Trellix users who would recommend it.
FileAudit
Read 3 FileAudit reviews
  • 533 Views
  • 293 Comparison Views
100% willing to recommend
Trellix ESM
Read 38 Trellix ESM reviews
  • 1,573 Views
  • 1,431 Comparison Views
76% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 18, 2024

Trellix ESM and FileAudit are both solid options for enterprise security management. FileAudit seems to have the upper hand in feature richness and cost-efficiency, despite Trellix ESM's strong customer support.

Features: Trellix ESM offers comprehensive threat detection, robust incident response capabilities, and a strong support system. FileAudit provides detailed file auditing, easy-to-navigate reporting, and higher feature granularity valued by users.

Room for Improvement:Trellix ESM could enhance its integration capabilities with other security tools. Also, users find the alert system and advanced settings of FileAudit requiring improvement. Both can focus on their respective areas to upgrade user experience.

Ease of Deployment and Customer Service: Trellix ESM is noted for its straightforward deployment process and exceptional customer service. FileAudit also offers an easy deployment but has mixed reviews regarding customer support responsiveness.

Pricing and ROI: Users state that Trellix ESM has a higher initial setup cost but provides significant ROI through enhanced security measures. FileAudit has a lower setup cost and offers compelling ROI through comprehensive auditing capabilities, making it more cost-efficient.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed FileAudit vs. Trellix ESM Report (Updated: September 2025).
Buyer's Guide
FileAudit vs. Trellix ESM
September 2025
Download the complete report
Helped 869,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

FileAudit
Ranking in Security Information and Event Management (SIEM)
64th
Average Rating
9.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
Log Management (52nd)
Trellix ESM
Ranking in Security Information and Event Management (SIEM)
17th
Average Rating
7.4
Reviews Sentiment
7.0
Number of Reviews
38
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Security Information and Event Management (SIEM) category, the mindshare of FileAudit is 0.3%, up from 0.1% compared to the previous year. The mindshare of Trellix ESM is 1.1%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Trellix ESM1.1%
FileAudit0.3%
Other98.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

AntoSebastin - PeerSpot reviewer
A scalable SIEM solution for monitoring a user's activity in the file server
The most valuable features of the solution are its quick and simple features related to advanced permissions for files, allowing for what permission needs to be granted to the users when it comes to the monitoring folder in the solution. If someone who has been denied permission to use a particular folder tries to go to that folder, then the administrator gets a notification. In general, the administrator can easily gather and maintain records if a person who has been denied permission to a particular confidential folder tries to access it.
Read full review
Daniel Durian - PeerSpot reviewer
Helps to monitor and detect cyberattacks
The tool's effectiveness depends on how you define your log sources. To build visibility of incoming and outgoing traffic, you need logs from perimeter defense, firewalls, web application firewalls, and endpoint protection. With good traffic visibility, incident response time is really quick. Trellix ESM provides situation awareness. On the dashboard, I can see outbound and inbound communications to known threat hosts, IPS/IDS activity, and threat intelligence of the perimeter defense in the firewall. This information helps preempt attacks.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a good and stable solution...It is a scalable solution."
"Alerting upon file changes is the most valuable aspect of the product."
"Our customer acquires the complete report which is kept for future auditing purposes."
"The tool's effectiveness depends on how you define your log sources. To build visibility of incoming and outgoing traffic, you need logs from perimeter defense, firewalls, web application firewalls, and endpoint protection. With good traffic visibility, incident response time is really quick."
"The most valuable feature is the correlation rules."
"The ease of use is the most valuable feature. Over the years I have always been using this solution and have become comfortable with it."
"It enables us to detect malicious threats, issues, or vulnerabilities in our network."
"Compared to other solutions, the user interface is good."
"The product’s most valuable feature is log monitoring."
"It is a good central viewpoint for issues. These can then be investigated in more detail on the subnet server(s)/endpoints."
"It has good technical support, which is available around the clock. You can call up anytime and get whatever you want. My queues are resolved."
More Trellix ESM pros
 

Cons

"The updates management and central management console could be improved."
"The DLP function, including installation of the agent on the workstation and controlling the DLP restrictions, are areas where the product lacks."
"Whenever someone cuts and paste, it shows as "file is deleted"."
"The product's stability is an area of concern where improvements are required."
"We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that."
"It is not a very advanced solution, and it is for very generic use cases. It cannot cope with the advanced requirements that we're going to have. For example, for multiple authentication failures, it is still based on Windows events for detecting multiple login failures, whereas other companies are going beyond and working on implementing two-factor authentication. It is time to correlate the two-factor authentication results with authentification failures, which is not happening with McAfee ESM. The performance of the tool should be improved because it is very slow. The data display on the console is very slow in McAfee ESM. Its data storage is still old-fashioned, and it should be improved and upgraded to the latest versions. They have to come up with some new ideas to match what other leaders in the same domain are doing. For example, in Splunk, when you search for information for the last 60 days or five months, it quickly shows the information, but that is not the case with McAfee. The results should be quicker and faster on the console. They should integrate some additional features such as User Behavior Analytics (UBA) and automation. The threat intelligence part should also be improved on McAfee."
"There are always multiple bugs in the product. For example, the console page was hanging multiple times. Afterwards, they released multiple upgrades for the same, multiple patches from McAfee."
"I would like to see good analytics in future releases."
"There are some banking and transactional cases that are local, South America transactions. I would like to see them add features that can be used locally, to make those transactions more reliable."
"The user interface could be more user-friendly."
"Tech support is required each time there is a system update of the solution."
More Trellix ESM cons
 

Pricing and Cost Advice

"FileAudit provides a trial license for 30 days, and after that, customers can choose between perpetual licensing or the annual-based licensing option offered by FileAudit."
"We pay for our licensing fees on a yearly basis, and there are no costs in addition to the standard licensing fees."
"The pricing is good, and they are competitive compared to providers such as RSA and IBM QRadar."
"The licensing cost is based on EPS."
"The pricing is fair."
"We renew our license annually."
"The price of McAfee ESM is higher than some of the other solutions. There are additional features that can be added at an additional fee."
"The product is slightly expensive."
"It is an inexpensive product. We purchase its yearly license."
More Trellix ESM pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
869,760 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
Read full review
 

Top Industries

By visitors reading reviews
No data available
Comms Service Provider
16%
Financial Services Firm
12%
Computer Software Company
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise24
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about McAfee ESM?
The solution's technical support is great.
See all answers
What is your experience regarding pricing and costs for McAfee ESM?
When discussing Trellix ESM pricing and licensing, if you consider some premium product, the pricing also has to be premium, however, enterprise customers who look for a premium product, alongside ...
See all answers
What needs improvement with McAfee ESM?
Areas of Trellix ESM that could be improved or enhanced include checking on the clients who are still on-prem, especially banks, as most are not moving everything to the cloud due to confidentialit...
See all answers
 

Comparisons

Fortinet FortiSIEM vs FileAudit Logo
Fortinet FortiSIEM vs FileAudit
Compared 54% of the time
ManageEngine File Audit Plus vs FileAudit Logo
ManageEngine File Audit Plus vs FileAudit
Compared 46% of the time
More FileAudit Competitors
OpenText Enterprise Security Manager vs Trellix ESM Logo
OpenText Enterprise Security Manager vs Trellix ESM
Compared 26% of the time
Splunk Enterprise Security vs Trellix ESM Logo
Splunk Enterprise Security vs Trellix ESM
Compared 16% of the time
IBM Security QRadar vs Trellix ESM Logo
IBM Security QRadar vs Trellix ESM
Compared 15% of the time
SentinelOne Singularity Complete vs Trellix ESM Logo
SentinelOne Singularity Complete vs Trellix ESM
Compared 13% of the time
LogRhythm SIEM vs Trellix ESM Logo
LogRhythm SIEM vs Trellix ESM
Compared 10% of the time
More Trellix ESM Competitors
 

Product Reports

Buyer's Guide
Security Information and Event Management (SIEM)
September 2025
FileAudit reportDownload FileAudit product report
Buyer's Guide
Trellix ESM
September 2025
Trellix ESM reportDownload Trellix ESM product report
 

Also Known As

No data available
McAfee ESM, NitroSecurity, McAfee Enterprise Security Manager
 

Overview

Agentless, remote and non-intrusive, FileAudit offers a simple more user-friendly way to safeguard and secure file access in a Windows environment. FileAudit provides real-time monitoring and alerting on all access (or access attempts). FileAudit also implements contextual functions such as mass access and alteration alerts, tracking source IP address information for remote data access, and providing granular time and date alerting parameters to monitor folder and file access at unusual or unexpected times.
IS Decisions

Make your organization more resilient and confident with Trellix Security Operations. Filter out the noise and cut complexity to deliver faster, more effective SecOps. Integrate your existing security tools and connect with over 650 Trellix solutions and third-party products.

Trellix
 

Sample Customers

CommuniCare Health Centre, DP World, BAE Systems, Moet Hennessy, Ernst & Young, Honda, Volswagon, VTech, GlakoSmithKline, Lockheed Martin, US Navy, University of Alabama, Ministry of Interior Saudi Arabia, Total
San Francisco Police Credit Union, Wªstenrot Gruppe, Volusion, California Department of Corrections & Rehabilitation, Government of New Brunswick, State of Colorado, Macquarie Telecom, Texas Tech University Health Sciences Center, Cologne Bonn Airport
Buyer's Guide
FileAudit vs. Trellix ESM
September 2025
Free Report: FileAudit vs. Trellix ESM
Find out what your peers are saying about FileAudit vs. Trellix ESM and other solutions. Updated: September 2025.
DOWNLOAD NOW
869,760 professionals have used our research since 2012.
See our FileAudit vs. Trellix ESM report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.