Trellix Advanced Threat Defense vs Trellix Network Detection and Response comparison

Why PeerSpot?

Trellix Advanced Threat Defense and Trellix Network Detection and Response are both solutions in the Advanced Threat Protection (ATP) category. Trellix Advanced Threat Defense is ranked #22 with an average rating of 9.0, while Trellix Network Detection and Response is ranked #6 with an average rating of 8.5. Trellix Advanced Threat Defense holds a 2.1% mindshare in ATP, compared to Trellix Network Detection and Response’s 4.1% mindshare. Additionally, 76% of Trellix Advanced Threat Defense users are willing to recommend the solution, compared to 98% of Trellix Network Detection and Response users who would recommend it.

Trellix Advanced Threat Def...

Read 9 Trellix Advanced Threat Defense reviews

1,935 Views
1,645 Comparison Views

76% willing to recommend

Trellix Network Detection a...

Read 53 Trellix Network Detection and Response reviews

5,632 Views
3,041 Comparison Views

98% willing to recommend

Trellix Advanced Threat Def...

Trellix Network Detection a...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 1, 2024

Trellix Network Detection and Response and Trellix Advanced Threat Defense compete in the network security category. Trellix NDR seems to have the upper hand in pricing and customer support, while Trellix ATD justifies higher expenses with its robust feature set.

Features: Trellix Network Detection and Response provides advanced anomaly detection, seamless integration capabilities, and enhanced network visibility. Trellix Advanced Threat Defense focuses on deep malware analysis, machine-learning capabilities, and comprehensive threat protection.

Room for Improvement: Trellix NDR could enhance its features with deeper threat intelligence integration and more comprehensive threat response capabilities. Additional automation in threat management would be beneficial. Trellix ATD may benefit from improvements in user-friendliness, reducing its steep learning curve, and optimizing configuration processes. It could also expand its threat intelligence capabilities.

Ease of Deployment and Customer Service: Trellix Network Detection and Response offers streamlined deployment, easily integrating with existing systems. Users find it straightforward and efficient. Trellix Advanced Threat Defense, despite offering robust support and documentation, poses a steeper learning curve due to complex configurations but benefits from expansive support resources.

Pricing and ROI: Trellix Network Detection and Response aligns with tighter budgets, offering more favorable initial setup costs and substantial ROI through effective threat detection. Trellix Advanced Threat Defense, requiring greater upfront investment, provides significant long-term returns with superior threat protection capabilities.

To learn more, read our detailed Trellix Advanced Threat Defense vs. Trellix Network Detection and Response Report (Updated: September 2026).

Buyer's Guide

Trellix Advanced Threat Defense vs. Trellix Network Detection and Response

September 2026

Download the complete report

Helped 918,957 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

22nd

Average Rating

7.8

Reviews Sentiment

5.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Network Detection a...

Ranking in Advanced Threat Protection (ATP)

6th

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Network Detection and Response (NDR) (4th)

Mindshare comparison

As of October 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Trellix Advanced Threat Defense is 2.1%, up from 1.6% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Mindshare Distribution
Product	Mindshare (%)
Trellix Network Detection and Response	4.1%
Trellix Advanced Threat Defense	2.1%
Other	93.8%

Advanced Threat Protection (ATP)

Featured Reviews

Philippe Panardie

RSSI at SDIS49

Ensuring long-term reliability while seeking internal email management enhancements

Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.

Read full review

Twinkle Solanki

Business development executive at Digitaltrack solution Pvt Ltd

Continuous network insight has improved early threat detection and streamlined investigations

Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product is expensive, but it is better than the rest of them in the industry."

"I see ROI, as it stops in excess of twenty-five malware events per month, all of which could be critical to the business."

"The features I find most valuable are: the management, the ability for automatic remediation of threats and it can successfully detect a threat, and to act upon it."

"I recommend this solution because of its ease of use."

"It is very scalable."

"It is stable and reliable."

"If a system admin can put in the patience to read and constantly update the ePO system in terms of rules, enforcing them at regular intervals, you can safely go to sleep every night."

"It was easy to set up initially."

More Trellix Advanced Threat Defense pros

"It protects from signature-based attacks and signature-less attacks. The sandboxing technology, invented by FireEye, is very valuable. Our customers go for FireEye because of the sandboxing feature. When there is a threat or any malicious activity with a signature, it can be blocked by IPS. However, attacks that do not have any signatures and are very new can only be blocked by using the sandboxing feature, which is available only in FireEye. So, FireEye has both engines. It has an IPS engine and a sandbox engine, which is the best part. You can get complete network protection by using FireEye."

"Initially, we didn't have much visibility around what is occurring at our applications lower level. For instance, if we are exposed to any malicious attacks or SQL injections. But now we've integrated FireEye with Splunk, so now we get lots of triggers based on policy content associated with FireEye. The solution has allowed for growth and improvement in our information security and security operations teams."

"FireEye is so effective at blocking attacks that we were even able to defer an upgrade of our IPS solution, saving a significant amount of money."

"After all of our testing was conducted we felt confident that this was the right approach to safeguard the bank from advanced malware, zero-day and targeted attacks."

"It allows us to be more hands off in checking on emails and networking traffic, as we can set up a bunch of different alerts and have it alert us, giving us a better view of our network and our email environment."

"After deploying Trellix Network Detection and Response, we saw a noticeable improvement in our security operations, as threat detection and incident times were reduced by 40 to 50 percent, the security team spent significantly less time manually analyzing network traffic, and we were able to identify suspicious activity that previously went unnoticed, leading to faster containment of potential incidents and improved overall response efficiency."

"The POC quickly revealed areas for improvement and potential threats that the traditional defenses had utterly missed."

"Trellix Network Detection and Response has positively impacted my organization by significantly reducing the time to detect as we also were experimenting with the automation systems."

More Trellix Network Detection and Response pros

Cons

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

"We'd like them to be better at dealing with script threats."

"This product does the job, but it is not flexible enough to do new environments yet."

"Some of our customers have mentioned the lack of a tool that would allow for remote capabilities without being attached to the internet."

"This solution needs to be made "cloud ready"."

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

"The only problem we can have is that as we have no API interface, there is no inspection of internal mail."

"It was not complex, but there are things to look out for, because it's an intense product. It scans intensely and there are major obstacles to overcome if it scans while users are using a network, then it is not a good thing."

More Trellix Advanced Threat Defense cons

"Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents."

"To improve Trellix Network Detection and Response, I suggest enhancing reporting customization; the reports can be much better, and I should have the ability to customize them much more freely."

"The customer service is not that good."

"The analytics could be better. It seems heavily influenced by the McAfee and FireEye integration, and that integration still isn't seamless."

"I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities."

"It is an expensive solution."

"Certain features in Trellix Network Detection and Response, such as using AL-type commands, may initially pose a challenge for those unfamiliar with such commands. However, once users become accustomed to the system, it becomes easier to use."

"The support from FireEye Network Security is not very good."

More Trellix Network Detection and Response cons

Pricing and Cost Advice

"The product is expensive, but it is better than the rest of them in the industry."

"Our licensing fees for this solution are approximately one million dollars per year."

"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."

"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."

"The tool is a bit pricey."

"When I compare this solution to its competitors in the market, I find that it is a little expensive."

"The pricing is a little high."

"It's an expensive solution."

"Because of what the FireEye product does, it has significantly decreased our mean time in being able to identify and detect malicious threats. The company that I work with is a very mature organization, and we have seen the meantime to analysis decrease by at least tenfold."

"Pricing and licensing are reasonable compared to competitors."

More Trellix Network Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

918,957 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

16%

Outsourcing Company

16%

Financial Services Firm

12%

Manufacturing Company

17%

Outsourcing Company

16%

Financial Services Firm

11%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	4
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	11
Large Enterprise	23

Questions from the Community

What needs improvement with McAfee Advanced Threat Defense?

I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...

See all answers

What is your primary use case for McAfee Advanced Threat Defense?

We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...

See all answers

What advice do you have for others considering McAfee Advanced Threat Defense?

See all answers

What is your experience regarding pricing and costs for FireEye Network Security?

My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...

See all answers

What needs improvement with FireEye Network Security?

Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...

See all answers

What is your primary use case for FireEye Network Security?

Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...

See all answers

Comparisons

NetWitness Platform vs Trellix Advanced Threat Defense

Compared 16% of the time

Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense

Compared 8% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 8% of the time

Digital Guardian vs Trellix Advanced Threat Defense

Compared 6% of the time

Red Canary vs Trellix Advanced Threat Defense

Compared 4% of the time

More Trellix Advanced Threat Defense Competitors

Palo Alto Networks WildFire vs Trellix Network Detection and Response

Compared 6% of the time

Fortinet FortiSandbox vs Trellix Network Detection and Response

Compared 5% of the time

Vectra AI vs Trellix Network Detection and Response

Compared 4% of the time

Cisco Secure Firewall vs Trellix Network Detection and Response

Compared 3% of the time

Anomali vs Trellix Network Detection and Response

Compared 3% of the time

More Trellix Network Detection and Response Competitors

Product Reports

Buyer's Guide

Trellix Advanced Threat Defense

October 2026

Download Trellix Advanced Threat Defense product report

Buyer's Guide

Trellix Network Detection and Response

October 2026

Trellix Network Detection and Response report

Download Trellix Network Detection and Response product report

Also Known As

McAfee Advanced Threat Defense

FireEye Network Security, FireEye

Overview

Trellix Advanced Threat Defense offers efficient threat detection and automatic threat remediation, featuring seamless management and integration with operating systems and extensions.

Providing robust malware defense, Trellix Advanced Threat Defense is easy to set up and use. Its components work collaboratively, with standout features like behavioral analysis, retro-inspection, and ePolicy Orchestration. Despite its strengths, users suggest improvements in Active Directory integration, cloud readiness, artificial intelligence, and faster sandboxing. The API interface and scalability need enhancement, while better compatibility with platforms like Cisco could elevate its function. Effective for server and endpoint security, it effectively blocks threats like WannaCry and disperses attack data through the DXL client quickly.

What are the notable features of Trellix Advanced Threat Defense?

Management and Automatic Threat Remediation: Facilitates seamless management and handling of threats.
Effective Threat Detection and Response: Delivers efficient and reliable threat detection capabilities.
Behavioral Analysis and Retro-Inspection: Offers advanced analysis for comprehensive threat identification.
ePolicy Orchestration: Streamlines processes for enhanced threat management.
Scalability and Price: Provides a stable and scalable solution at a competitive price point.

What key benefits can be identified from reviews?

Ease of Use and Setup: Known for its straightforward implementation and user-friendly interface.
Integration Capabilities: Works well with different operating systems and technologies like Palo Alto firewalls.
Threat Protection Efficiency: Proven effectiveness in stopping threats such as WannaCry.
Rapid Attack Information Dissemination: Utilizes the DXL client for quick data sharing.

Trellix Advanced Threat Defense is widely used across numerous industries for server and desktop protection, ensuring endpoint security and halting attacks without failure. Its integration with diverse technologies enhances protection in varied environments, making it a valuable tool in enterprise security management.

Trellix

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?

Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
APTs Detection: Detects advanced persistent threats through sophisticated techniques.
MVX Engine: Uses virtual machines for behavioral analysis.
Sandboxing: Adds a layer of threat protection.
Real-Time Response: Offers immediate threat mitigation and context.
User-Friendly Dashboard: Enhances visibility with application filtering.

What are the benefits of Trellix Network Detection and Response?

Enhanced Usability: Integrates easily with other platforms for seamless operations.
Detailed Context: Real-time packet capture provides in-depth threat analysis.
Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix

Sample Customers

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Buyer's Guide

Trellix Advanced Threat Defense vs. Trellix Network Detection and Response

September 2026

Free Report: Trellix Advanced Threat Defense vs. Trellix Network Detection and Response

Find out what your peers are saying about Trellix Advanced Threat Defense vs. Trellix Network Detection and Response and other solutions. Updated: September 2026.

DOWNLOAD NOW

918,957 professionals have used our research since 2012.

See our Trellix Advanced Threat Defense vs. Trellix Network Detection and Response report.

See our list of best Advanced Threat Protection (ATP) vendors.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.