Fortinet FortiEDR and Trellix Active Response are two prominent endpoint detection and response (EDR) tools. Trellix Active Response seems to have the upper hand due to its advanced analytics and automated responses, despite its higher cost.
Features: Fortinet FortiEDR offers integrated security measures, real-time threat intelligence, and automated incident response. Trellix Active Response provides advanced analytics, automated responses, and enhanced feature sets that users find compelling.
Room for Improvement: Fortinet FortiEDR needs to improve configuration flexibility and scalability, as well as user reviews. Trellix Active Response would benefit from a more straightforward setup process, better resource utilization, and enhanced user reviews.
Ease of Deployment and Customer Service: Fortinet FortiEDR's deployment is straightforward but challenging for large-scale implementations, and while customer service is responsive, it needs more technical expertise. Trellix Active Response has a more complex deployment, causing slower implementation times, but customer service offers in-depth support and faster issue resolution.
Pricing and ROI: Fortinet FortiEDR has competitive setup costs and favorable ROI based on user reviews. Trellix Active Response, although more expensive, justifies its higher setup cost with enhanced features and better long-term ROI according to user feedback.
While we haven't yet quantified the financial benefits, we recognize that there has been a return on investment, particularly with operational efficiencies provided by the alerts.
For setting up some proper solutions for issues at the customer site, it can take about one week.
When implemented in a Fortinet environment with an existing firewall, FortiAnalyzer, and FortiManager, it is straightforward to install and scale by adding more EDR for endpoints.
The scalability of Active Response is satisfactory.
After that, I stopped scanning the Cisco AnyConnect and switched to Fortinet VPN. Everything worked fine afterward.
Fortinet could consider reducing the minimum order quantity for EDR, currently set at 500 pieces.
We would like Trellix to optimize the technology for these systems similarly to how it is deployed for normal endpoints.
It's reasonably priced compared to other vendors' similar products.
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective.
They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly.
Fortinet FortiEDR is a real-time endpoint protection, detection, and automated response solution. Its primary purpose is to detect advanced threats to stop breaches and ransomware damage. It is designed to do so in real time, even on an already compromised device, allowing you to respond and remediate incidents automatically so your data can remain protected.
Fortinet FortiEDR Features
Fortinet FortiEDR has many valuable key features, including:
Fortinet FortiEDR Benefits
Some of the key benefits of using Fortinet FortiEDR include:
Reviews from Real Users
Below are some reviews and helpful feedback written by Fortinet FortiEDR users.
An Owner at a security firm says, "The features that I have found most valuable are the ability to customize it and to reduce its size. It lets you run in a very small window in terms of memory and resources on legacy cash registers. The customer has literally about 800 cash registers. That was the use case for Fortinet FortiEDR - to get that down into a tiny space. The only way to do that was to use this product because it had that ability to unbundle services that were a surplus.”
Chandan M., Chief Technical Officer at Provision Technologies LLP, mentions, “The ease of deployment and configuration is valuable. It's very easy compared to other vendors like Sophos. Sophos' configuration is complex. Fortinet is a lot easier to understand. You don't need a lot of admin knowledge to do the configuration.” He also adds, “The security is also very good and the firewall response is good.”
Harpreet S., Information Technology Support Specialist at Chemtrade Logistics, explains, "It notifies us if there's any suspicious file on any PC. If any execution or similar kind of thing is happening, it just alerts us. It doesn't only alert. It also blocks the execution until we allow it. We check whether the execution is legitimate or not, and then approve it or keep it blocked. This gives us a little bit of control over this mechanism. Fortinet FortiEDR is also very straightforward and easy to maintain."
DeAndre V., Senior Network Administrator at a financial services firm, states, “The dashboard is easy to follow and use. The deployment and uninstalling were easy. I like the detailed information about the path of a file that might be suspicious. Being able to check that out was easy to follow. Exceptions are easy to create and the interface is easy to follow with a nice appearance.
Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.
Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.
Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.