No more typing reviews! Try our Samantha, our new voice AI agent.

Proofpoint Email Protection vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.0
Proofpoint Email Protection delivers high ROI by reducing phishing incidents, enhancing efficiency, and decreasing security-related workloads and costs.
Sentiment score
6.6
Trellix Network Detection enhances ROI by boosting breach prevention, automating detections, and improving security investigation efficiency and client satisfaction.
The ideal situation would be to have all these portals combined into one unified dashboard.
Information Security Architect at Loews Hotels
After Proofpoint Email Protection, phishing has been completely eliminated, so it is working very efficiently.
Security Engineer at News Corp
Instead of individually logging into five portals, we can log into one and they all connect as if we had logged into all of them.
SOC at a financial services firm with 201-500 employees
The time was reduced because of the automated detections.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
Security Engineer at Digitaltrack
It has saved us money and time, and the overall investment has been profitable.
Network & Security Lead at Net-International
 

Customer Service

Sentiment score
7.2
Proofpoint Email Protection garners mixed reviews for support, praised for efficiency but criticized for communication and solution thoroughness.
Sentiment score
7.3
Trellix Network Detection and Response support receives mixed reviews, praised for supportiveness but criticized for delay and engineer access.
I am familiar with the granular policy control feature of Proofpoint Email Protection, and I find their support excellent for modifying those policies.
Senior Cybersecurity Specialist at a retailer with 10,001+ employees
Even the engineers have been helpful, and if we open a case, they get back to us right away.
Information Security Analyst at a government with 11-50 employees
We always contact them if we need support, whether it's for setting up features or technical support, which is very responsive.
System Administrator at Tutt Bryant Group
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
They help and support us promptly, allowing us to resolve issues immediately.
Network & Security Lead at Net-International
 

Scalability Issues

Sentiment score
7.3
Proofpoint Email Protection excels in scalability, efficiently managing diverse traffic with flexible cloud-based architecture, despite cost and complexity reports.
Sentiment score
7.7
Trellix's scalability, aided by cloud solutions, allows easy handling of vast demands, requiring upgrades for future growth.
Proofpoint is scalable for multi-site organizations with thousands of users.
Products and solutions director at ITVikings
The solution provides a graphical representation and dashboard view showing how many threats are getting blocked on a daily and monthly basis.
Information Technology Team Lead at a manufacturing company with 1,001-5,000 employees
Proofpoint Email Protection is considered to be highly scalable, designed for large enterprises, with a cloud-based architecture that offers an enormous number of options, including multi-organization support and high-volume email handling.
Senior Solution Delivery Lead Cybersecurity at International Olympic Committee – IOC
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
Cyber Security Engineer at a retailer with 51-200 employees
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response is scalable.
Network & Security Lead at Net-International
 

Stability Issues

Sentiment score
8.2
Proofpoint Email Protection provides high stability and reliability with robust features, minimal downtime, and efficient high-volume handling.
Sentiment score
7.9
Trellix Network Detection and Response is stable and reliable, with minor issues quickly resolved and high user confidence.
If Proofpoint Email Protection has an outage, we are either not receiving emails or not blocking the right threats.
Senior Security Engineer at Cloudflare
Regarding the stability and performance of Proofpoint Email Protection, I have not experienced any crashes, downtimes, or performance issues.
Cyber Security Engineer at a financial services firm with 10,001+ employees
Proofpoint Email Protection is very stable and reliable, as it remains accessible at all times without issues, ensuring that data is available in real time.
Principal Consultant at Infosys
Trellix Network Detection and Response is somewhat stable but there is a bit of downtime sometimes during the off-hours.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Room For Improvement

Proofpoint users seek improved search, AI, reporting, support, and integrations, with enhanced phishing protection, customization, and cost-effectiveness.
Trellix NDR needs improvements in AI, customization, documentation, dashboard flexibility, reporting, and pricing, addressing user interface challenges.
The older legacy user interface just took a little to work with, and the new unified interface, as it was able to do more and more of the functionality of the old one, the product just got easier and easier to use.
Sr Security Engineer at a comms service provider with 201-500 employees
In addition to the UI improvements, I would appreciate an increase in the speed of the tasks being processed on the pod.
Security Specialist at a leisure / travel company with 10,001+ employees
There are pros and cons to that, but I would suggest maintaining a good balance between security protection and operational impact.
Senior Security Engineer at Cloudflare
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Network & Security Lead at Net-International
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Presales Manager
 

Setup Cost

Proofpoint Email Protection is pricier than competitors, but users appreciate its comprehensive security and features justifying the cost.
Trellix Network Detection and Response is seen as costly by users, though some justify it with reliable threat detection.
Customers pay around $90,000 yearly for a 1,000-user organization, with the subscription license being the main expense, apart from implementation fees.
Products and solutions director at ITVikings
Given my other experience with other vendors, I think they are a bit on the high end and a bit on the pricey end for the email security functionality that we were using.
Sr Security Engineer at a comms service provider with 201-500 employees
Although it is a bit costly compared to Mimecast, Defender, and Cofense Vision, it is efficient and strong in security, so I do not mind the cost because I will not reduce my security risk.
Senior Solution Delivery Lead Cybersecurity at International Olympic Committee – IOC
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Network & Security Lead at Net-International
I wanted something that was not too price-heavy like SentinelOne but also not much cheaper like Kaspersky.
Cyber Security Engineer at a retailer with 51-200 employees
The price for Trellix Network Detection and Response is reasonable.
IT Manager at Gigabit Technologies Pvt Ltd
 

Valuable Features

Proofpoint Email Protection excels in threat detection, management, and integration, enhancing security and reducing workloads with user-friendly tools.
Trellix Network Detection excels in threat detection, APT handling, real-time visibility, and seamless integration to enhance security management.
Without Proofpoint Email Protection, most of these emails would have come through, slipped through Exchange, gotten into the user's mailbox, and created a lot of trouble for the organization.
Cyber Security Engineer at IT Naturally
Proofpoint Email Protection has positively impacted my organization by ensuring we are not at risk of a breach through email.
Release lead at a financial services firm with 10,001+ employees
TAP alerts, where Proofpoint Email Protection scans emails and sends alerts, provide the ability to review suspicious emails and validate them in a sandbox environment.
Infrastructure Analyst at a consultancy with 51-200 employees
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Network & Security Lead at Net-International
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Presales Manager
 

Categories and Ranking

Proofpoint Email Protection
Ranking in Advanced Threat Protection (ATP)
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
105
Ranking in other categories
Email Security (1st), Digital Risk Protection (3rd), Office 365 Protection (1st), Secure Email Gateway (SEG) (1st)
Trellix Network Detection a...
Ranking in Advanced Threat Protection (ATP)
10th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
49
Ranking in other categories
Network Detection and Response (NDR) (7th)
 

Mindshare comparison

As of June 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Proofpoint Email Protection is 3.6%, down from 11.7% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Proofpoint Email Protection3.6%
Trellix Network Detection and Response4.1%
Other92.3%
Advanced Threat Protection (ATP)
 

Featured Reviews

Siva_Prasad - PeerSpot reviewer
Principal Consultant at Infosys
Email defenses have reduced phishing incidents and protect sensitive data across our enterprise
As things are evolving and threats develop in unpredictable ways, Proofpoint must adopt AI solutions and agentic solutions more aggressively and provide them to customers as part of service offerings. Inbuilt AI solutions would add more value and make Proofpoint a more premium choice for customers. With the help of AI solutions, agentic AI, and generative AI capabilities, the product would be more efficient than it currently is. Filtering false positives is highly challenging because it is impossible for humans to identify which emails are genuine and which are spam. Proofpoint should focus more on this area with back-end agents or other tools. Proofpoint should decide which emails are genuine and which are spam so it is not a challenge for end users. When receiving an email, end users should not have to determine whether to respond or not. Proofpoint should not release such spam emails and should strictly block such spam and spoof emails based on connection IPs. Currently, false positives occur in the product, and while this occurs in every product, it is an area where Proofpoint can focus on improving and reducing false positives. One email is enough for an end user to be deceived and lose money, so addressing this area is critical.
Hassan Sheikh - PeerSpot reviewer
Network & Security Lead at Net-International
Integrated sensors have improved traffic inspection and now provide resilient east-west threat control
I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities. Additionally, incorporating failover kits integrated into the sensors could be beneficial. It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features. While Trellix Network Detection and Response sensors are highly capable, I think it would be advantageous to include features such as Layer 7 profiles, application profile filters, web filters, IDx, IP feature sets, signature detection features, and routing and switching capabilities all in one device. While the user interface of Trellix Network Detection and Response is very good, I suggest implementing a customizable dashboard. Additionally, there should be report generation for critical attacks and high alert severities, displayed graphically on the dashboard, and providing options to extract files in Excel format for better visibility.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
899,125 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
7%
Comms Service Provider
6%
Manufacturing Company
17%
Financial Services Firm
13%
Comms Service Provider
10%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise24
Large Enterprise58
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise9
Large Enterprise22
 

Questions from the Community

What is your experience regarding pricing and costs for Proofpoint Email Protection?
I would say that the pricing for Proofpoint Email Protection is a little costly compared to other email tools, but it is worth it.
What needs improvement with Proofpoint Email Protection?
I believe Proofpoint Email Protection can be improved; currently, it does not allow organizations to create their own IP listings, so whatever comes into Proofpoint is what helps to remove spam and...
What is your primary use case for Proofpoint Email Protection?
My main use case for Proofpoint Email Protection is working as an anti-spam and phishing analyst, where I need to protect the organization and public users from spam and phishing. In my daily work,...
What is your experience regarding pricing and costs for FireEye Network Security?
The price for Trellix Network Detection and Response is reasonable. The pricing is reasonable, and I do not need to bargain with Trellix or customers.
What needs improvement with FireEye Network Security?
The negative aspect is support. When I need urgent support from Trellix, there is a response after four hours or three hours, which is my main concern regarding the negative point of Trellix Networ...
What is your primary use case for FireEye Network Security?
I am working with Trellix Network Detection and Response as part of my overall experience with these products today. Trellix Network Detection and Response is used for threat and response use cases...
 

Also Known As

Proofpoint Enterprise Protection, Proofpoint Digital Protection
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Blocket, University of Waterloo, Lincoln Memorial University, WellSpan Health, U-Haul, Carestream Health, Westinghouse
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Proofpoint Email Protection vs. Trellix Network Detection and Response and other solutions. Updated: April 2026.
899,125 professionals have used our research since 2012.