Try our new research platform with insights from 80,000+ expert users

Fortinet FortiEDR vs Palo Alto Networks WildFire vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.3
Fortinet FortiEDR offers enhanced security and ROI with minimal weekly effort, boosting visibility and customer satisfaction over four years.
Sentiment score
6.5
Palo Alto Networks WildFire provides cost-effective, centralized threat management, reducing security costs and improving efficiency in high-threat environments.
Sentiment score
8.5
Trellix Network Detection and Response exceeded expectations by improving threat prevention and detection, boosting productivity and reducing response times.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
 

Customer Service

Sentiment score
8.0
Fortinet FortiEDR's customer service is responsive but faces occasional delays due to broader reach and non-integrated support.
Sentiment score
7.0
Palo Alto Networks WildFire's support is responsive and expert but varies in availability and response time, especially for smaller companies.
Sentiment score
6.8
Trellix's support is praised for responsiveness, but improvements in expertise and incident response promptness are suggested by some.
For setting up some proper solutions for issues at the customer site, it can take about one week.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
The support is quite difficult to access promptly.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
 

Scalability Issues

Sentiment score
7.2
Fortinet FortiEDR is highly scalable for enterprises, though some limitations exist with external integrations and cloud environments.
Sentiment score
8.2
Palo Alto Networks WildFire efficiently scales for diverse environments, supporting thousands of users while integrating well with security modules.
Sentiment score
7.8
Trellix Network Detection and Response scales effectively in various industries, performing well in large enterprises without latency issues.
When implemented in a Fortinet environment with an existing firewall, FortiAnalyzer, and FortiManager, it is straightforward to install and scale by adding more EDR for endpoints.
Wildfire is highly scalable.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
 

Stability Issues

Sentiment score
8.0
Fortinet FortiEDR is stable and reliable but requires maintenance, with occasional issues like memory concerns and false alerts.
Sentiment score
8.5
Palo Alto Networks WildFire is highly rated for reliability, seamless integration, and effective network security performance without disruptions.
Sentiment score
7.7
Trellix Network Detection and Response is stable and reliable, with consistent performance and high user satisfaction despite occasional minor issues.
After that, I stopped scanning the Cisco AnyConnect and switched to Fortinet VPN. Everything worked fine afterward.
It performs filtering, malware blocking, and scanning.
The solution is scalable and stable.
 

Room For Improvement

Fortinet FortiEDR needs improved cloud security, automation, and user interface for better market acceptance and competitive advantage.
WildFire needs improvements in integration, user-friendliness, and pricing, along with better support, automation, and global availability.
Trellix Network Detection needs improved customization, integration, AI capabilities, support services, and a more user-friendly interface at reduced pricing.
Fortinet could consider reducing the minimum order quantity for EDR, currently set at 500 pieces.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
There are not any negative aspects; the only issue is the price when compared to others.
The support could be improved, as it takes a while to get assistance from the vendors.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
 

Setup Cost

Fortinet FortiEDR offers competitive pricing but may have high setup costs, with potential savings through Fortinet's channel model.
Palo Alto WildFire offers advanced threat protection, appealing to enterprises despite its high cost, potentially deterring smaller organizations.
Trellix Network Detection is costly but effective, with yearly licensing, discounts, and competitive pricing against some competitors like Palo Alto.
It's reasonably priced compared to other vendors' similar products.
I would rate it an eight out of ten in terms of affordability.
 

Valuable Features

Fortinet FortiEDR offers robust EDR capabilities, efficient resource use, and seamless integration, ensuring scalable, user-friendly cybersecurity for organizations.
Palo Alto Networks WildFire automates threat analysis, excels in sandboxing, and offers robust security with cloud-based, user-friendly features.
Trellix excels in threat protection with AI-driven analysis, automation, and enhanced visibility, benefiting security operations and incident management.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
 

Mindshare comparison

Endpoint Detection and Response (EDR)
Advanced Threat Protection (ATP)
Advanced Threat Protection (ATP)
 

Featured Reviews

Jovan Jovanovic - PeerSpot reviewer
Collects valuable endpoint data with good analytics and helpful scalability
This is a question for the partners who implement and install it. I am not involved in the implementation process, so I cannot suggest improvements. As mentioned, this is a query for my presales team, not me. I am part of the security team lead, focusing mainly on sales. Regarding the product, Fortinet could consider reducing the minimum order quantity for EDR, currently set at 500 pieces. In smaller markets like Serbia, Bosnia, Montenegro, and Slovenia, it can be challenging to find customers with 500 endpoints. My suggestion to Fortinet would be to lower this minimum order quantity to one.
AjayKumar17 - PeerSpot reviewer
Enhanced cybersecurity with advanced sandboxing and effective in controlling DNS issues
Improvements are needed in the UI part. The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings. This information should be integrated with the Dashboard so that system admins can see what is happening. Furthermore, technical support needs a lot of improvement, particularly in terms of responsiveness and adhering to service level agreements.
BiswabhanuPanda - PeerSpot reviewer
Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one
The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
865,576 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
9%
Government
8%
Financial Services Firm
8%
Computer Software Company
15%
Manufacturing Company
9%
Financial Services Firm
9%
Government
7%
Financial Services Firm
13%
Comms Service Provider
12%
Manufacturing Company
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What's the difference between Fortinet's FortiEDR and FortiClient?
I suggest Fortinet’s FortiEDR over FortiClient for several reasons. For starters, FortiEDR guarantees solid protectio...
What do you like most about Fortinet FortiEDR?
We have FortiEDR installed on all our systems. This protects them from any threats.
What is your experience regarding pricing and costs for Fortinet FortiEDR?
It's reasonably priced compared to other vendors' similar products.
How does Cisco Firepower NGFW Firewall compare with Palo Alto Networks Wildfire?
The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one conside...
Which is better - Wildfire or FortiGate?
FortiGate has a lot going for it and I consider it to be the best, most user-friendly firewall out there. What I like...
How does Cisco ASA Firewall compare with Palo Alto's WildFire?
When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advan...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. Wi...
What is your experience regarding pricing and costs for FireEye Network Security?
While I do not handle pricing directly, it is known that there is a variety of customers with different licensing nee...
What needs improvement with FireEye Network Security?
The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would...
 

Also Known As

enSilo, FortiEDR
No data available
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Financial, Healthcare, Legal, Technology, Enterprise, Manufacturing ... 
Novamedia, Nexon Asia Pacific, Lenovo, Samsonite, IOOF, Sinogrid, SanDisk Corporation
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: January 2025.
865,576 professionals have used our research since 2012.