Trellix Network Detection and Response and Gigamon Deep Observability Pipeline compete in the network security and visibility category. Trellix appears to have the upper hand due to its advanced threat detection capabilities, though both products show strengths and weaknesses in different areas.
Features: Trellix Network Detection and Response offers zero-day protection, robust sandboxing, and deep malware analysis, providing significant network visibility and ease of maintenance. Gigamon Deep Observability Pipeline excels with packet filtering, encryption enhancements, and improved network visibility, although it lacks intelligence for traffic flow analysis.
Room for Improvement: Trellix requires enhancements in file replication, machine learning integration, and better customization for sandboxes and VMs. Its analytics are impacted by the McAfee and FireEye integration, necessitating further refinement. Gigamon needs to address cloud monitoring challenges and integrate traffic flow visibility features to minimize dependency on other tools.
Ease of Deployment and Customer Service: Trellix offers flexible deployment options across on-premises and public cloud environments, scoring high in customer service with extensive contact options and a dependable support network. Gigamon focuses on on-premises and hybrid cloud setups, with good technical support, though customer service opinions vary, indicating room for improvement.
Pricing and ROI: Both Trellix and Gigamon are perceived as expensive but provide high ROI. Trellix's pricing reflects its comprehensive threat detection capabilities, justified by effectively preventing breaches. Gigamon's pricing is considered high; however, its network visibility enhancements are acknowledged as valuable, significantly reducing response times and increasing productivity.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
Gigamon Deep Observability Pipeline is a comprehensive network visibility solution that provides real-time insights into network traffic. It offers SSL inspection and mobile network monitoring for traffic monitoring purposes. The solution optimizes networks, aids in security inspection, and improves firewall performance. It is praised for its performance, power, straightforward integration, stability, and ease of initial setup.
With Gigamon, organizations can gain complete visibility into their network traffic, identify potential threats, and take proactive measures to prevent them. The solution is ideal for organizations of all sizes, including enterprises, service providers, and government agencies.
Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.