No more typing reviews! Try our Samantha, our new voice AI agent.

Proofpoint Email Protection vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.1
Proofpoint Email Protection reduces phishing and false positives, enhances security, saves time, lowers costs, and improves operational efficiency.
Sentiment score
6.9
Trellix NDR boosts productivity and ROI, reduces threat response time, and is valued for preventing attacks and breaches.
The ideal situation would be to have all these portals combined into one unified dashboard.
Information Security Architect at Loews Hotels
After Proofpoint Email Protection, phishing has been completely eliminated, so it is working very efficiently.
Security Engineer at News Corp
The time required for email investigations and responses has changed with Proofpoint Email Protection's visibility and automation.
Sr Security Engineer at a comms service provider with 201-500 employees
The time was reduced because of the automated detections.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
It has saved us money and time, and the overall investment has been profitable.
Network & Security Lead at Net-International
 

Customer Service

Sentiment score
7.1
Proofpoint Email Protection is valued for responsiveness and usefulness, though some users experience inconsistent support and documentation issues.
Sentiment score
7.2
Trellix Network Detection and Response support is mostly effective, with some users noting communication delays and areas for improvement.
I am familiar with the granular policy control feature of Proofpoint Email Protection, and I find their support excellent for modifying those policies.
Senior Cybersecurity Specialist at a retailer with 10,001+ employees
Even the engineers have been helpful, and if we open a case, they get back to us right away.
Information Security Analyst at a government with 11-50 employees
We always contact them if we need support, whether it's for setting up features or technical support, which is very responsive.
System Administrator at Tutt Bryant Group
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
They help and support us promptly, allowing us to resolve issues immediately.
Network & Security Lead at Net-International
 

Scalability Issues

Sentiment score
7.5
Proofpoint Email Protection offers highly scalable, flexible architecture, efficiently managing high-volume traffic and supporting various business sizes and domains.
Sentiment score
7.3
Trellix Network Detection and Response effectively scales in cloud environments, smoothly handling diverse user bases and existing configurations.
Proofpoint is scalable for multi-site organizations with thousands of users.
Products and solutions director at ITVikings
The solution provides a graphical representation and dashboard view showing how many threats are getting blocked on a daily and monthly basis.
Information Technology Team Lead at a manufacturing company with 1,001-5,000 employees
Proofpoint Email Protection is considered to be highly scalable, designed for large enterprises, with a cloud-based architecture that offers an enormous number of options, including multi-organization support and high-volume email handling.
Senior Solution Delivery Lead Cybersecurity at International Olympic Committee – IOC
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response is scalable.
Network & Security Lead at Net-International
Trellix Network Detection and Response is designed to scale based on our workloads, and it performs well when we scale.
Cyber Security Engineer II (Vulnerability & Threat Management) at FICO
 

Stability Issues

Sentiment score
8.2
Proofpoint Email Protection is highly stable, reliable, and well-supported, with rare minor lags, rated nearly ten by users.
Sentiment score
7.7
Trellix Network Detection is praised for stability and reliability, though some face downtime and memory or CPU issues.
If Proofpoint Email Protection has an outage, we are either not receiving emails or not blocking the right threats.
Senior Security Engineer at Cloudflare
Regarding the stability and performance of Proofpoint Email Protection, I have not experienced any crashes, downtimes, or performance issues.
Cyber Security Engineer at a financial services firm with 10,001+ employees
Proofpoint Email Protection is very stable and reliable, as it remains accessible at all times without issues, ensuring that data is available in real time.
Principal Consultant at Infosys
Trellix Network Detection and Response is somewhat stable but there is a bit of downtime sometimes during the off-hours.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Room For Improvement

Proofpoint Email Protection requires interface improvement, enhanced AI, better support, integration, pricing, false positive reduction, and training.
Trellix Network Detection and Response needs enhancements in customization, integration, support, threat intelligence, and AI capabilities to reduce false positives.
The older legacy user interface just took a little to work with, and the new unified interface, as it was able to do more and more of the functionality of the old one, the product just got easier and easier to use.
Sr Security Engineer at a comms service provider with 201-500 employees
In addition to the UI improvements, I would appreciate an increase in the speed of the tasks being processed on the pod.
Security Specialist at a leisure / travel company with 10,001+ employees
There are pros and cons to that, but I would suggest maintaining a good balance between security protection and operational impact.
Senior Security Engineer at Cloudflare
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Network & Security Lead at Net-International
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Presales Manager
 

Setup Cost

Enterprise users find Proofpoint Email Protection costly but value its robust security, though some seek cheaper alternatives.
Trellix Network Detection and Response is costly, yet valued for quality threat detection, appealing to larger enterprises over smaller clients.
Customers pay around $90,000 yearly for a 1,000-user organization, with the subscription license being the main expense, apart from implementation fees.
Products and solutions director at ITVikings
Given my other experience with other vendors, I think they are a bit on the high end and a bit on the pricey end for the email security functionality that we were using.
Sr Security Engineer at a comms service provider with 201-500 employees
Although it is a bit costly compared to Mimecast, Defender, and Cofense Vision, it is efficient and strong in security, so I do not mind the cost because I will not reduce my security risk.
Senior Solution Delivery Lead Cybersecurity at International Olympic Committee – IOC
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Network & Security Lead at Net-International
The price for Trellix Network Detection and Response is reasonable.
IT Manager at Gigabit Technologies Pvt Ltd
I am sure the ROI was definitely fine for this because we were using this tool for three years.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Valuable Features

Proofpoint Email Protection offers advanced AI threat detection, granular control, and seamless integration with Office 365 for comprehensive security.
Trellix NDR excels in zero-day detection, integrates with security platforms, reduces alert fatigue, and offers user-friendly threat analysis.
Without Proofpoint Email Protection, most of these emails would have come through, slipped through Exchange, gotten into the user's mailbox, and created a lot of trouble for the organization.
Cyber Security Engineer at IT Naturally
Proofpoint Email Protection has positively impacted my organization by ensuring we are not at risk of a breach through email.
Release lead at a financial services firm with 10,001+ employees
TAP alerts, where Proofpoint Email Protection scans emails and sends alerts, provide the ability to review suspicious emails and validate them in a sandbox environment.
Infrastructure Analyst at a consultancy with 51-200 employees
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Network & Security Lead at Net-International
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Presales Manager
 

Categories and Ranking

Proofpoint Email Protection
Ranking in Advanced Threat Protection (ATP)
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
100
Ranking in other categories
Email Security (1st), Digital Risk Protection (3rd), Office 365 Protection (1st), Secure Email Gateway (SEG) (2nd)
Trellix Network Detection a...
Ranking in Advanced Threat Protection (ATP)
17th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
45
Ranking in other categories
Network Detection and Response (NDR) (13th)
 

Mindshare comparison

As of May 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Proofpoint Email Protection is 3.9%, down from 12.0% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Proofpoint Email Protection3.9%
Trellix Network Detection and Response4.1%
Other92.0%
Advanced Threat Protection (ATP)
 

Featured Reviews

Vivek_Jaiswal - PeerSpot reviewer
Security Engineer at LTI Mindtree
Advanced email defenses have protected healthcare staff and simplified incident response
There are many things that could be improved, but once you are very well-known about this application, you could perform that improvement plan. There are many scenarios where I have worked with Proofpoint Email Protection where a requirement was not fulfilled due to the limitation of the product. For example, we have Report Phish automation. With Proofpoint Email Protection, we can configure Report Phish and forward the email to any email addresses or shared mailboxes that we provide in the configuration. That email is forwarded as is with whatever the user reports as a phishing email. However, some organizations do not want the reported phishing email to go as is into their ticketing tool because it might contain malicious attachments and malicious links that are not required to go into their internal organization. Proofpoint Email Protection has that limitation. They cannot forward or restrict, but could forward only limited information such as some header information, sender subject details, or only limited information. As it is, the email can be forwarded, not as limited information. Proofpoint TRAP solution also has limitations. It cannot create alert notifications for some specific requirements because Proofpoint works the way it is designed, and if you want it to work based on our requirement, that should not be possible. There is a scope of limitations here. There are many improvements that should be made. First, they should work on their false positive minimization. Proofpoint generally takes all emails, investigates them, and classifies them. There are many situations where legit emails are blocked because that domain is found to be under a malicious category somehow, but actually it is not. False positive minimization could be improved, and they could enhance their other applications or solutions. There are many things that they could improve from each application and each portal.
Hassan Sheikh - PeerSpot reviewer
Network & Security Lead at Net-International
Integrated sensors have improved traffic inspection and now provide resilient east-west threat control
I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities. Additionally, incorporating failover kits integrated into the sensors could be beneficial. It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features. While Trellix Network Detection and Response sensors are highly capable, I think it would be advantageous to include features such as Layer 7 profiles, application profile filters, web filters, IDx, IP feature sets, signature detection features, and routing and switching capabilities all in one device. While the user interface of Trellix Network Detection and Response is very good, I suggest implementing a customizable dashboard. Additionally, there should be report generation for critical attacks and high alert severities, displayed graphically on the dashboard, and providing options to extract files in Excel format for better visibility.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
895,399 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
8%
Comms Service Provider
6%
Financial Services Firm
14%
Comms Service Provider
12%
Manufacturing Company
11%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise23
Large Enterprise56
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise8
Large Enterprise21
 

Questions from the Community

What is your experience regarding pricing and costs for Proofpoint Email Protection?
This is not something that I deal with regarding pricing, setup cost, and licensing.
What needs improvement with Proofpoint Email Protection?
For a beginner level, someone who is very new to email security might find it difficult to manage as an admin. Navigation can be concerning because Proofpoint Email Protection has different console...
What is your primary use case for Proofpoint Email Protection?
Proofpoint Email Protection serves as our email security solution. The entire SOC team uses Proofpoint Email Protection. The granularity in admin access is different, so each team has their own acc...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.
What needs improvement with FireEye Network Security?
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...
What is your primary use case for FireEye Network Security?
My main use case for Trellix Network Detection and Response is providing support for our customers, and one of our customers has Trellix, so we had to provide monitoring or specific XDR tools for t...
 

Also Known As

Proofpoint Enterprise Protection, Proofpoint Digital Protection
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Blocket, University of Waterloo, Lincoln Memorial University, WellSpan Health, U-Haul, Carestream Health, Westinghouse
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Proofpoint Email Protection vs. Trellix Network Detection and Response and other solutions. Updated: April 2026.
895,399 professionals have used our research since 2012.