Try our new research platform with insights from 80,000+ expert users

LogRhythm NDR [EOL] vs Trellix Network Detection and Response comparison

Exabeam and Trellix are both solutions in the Network Detection and Response (NDR) category. Additionally, 100% of Exabeam users are willing to recommend the solution, compared to 97% of Trellix users who would recommend it.
LogRhythm NDR [EOL]
Read 3 LogRhythm NDR [EOL] reviews
    100% willing to recommend
    Trellix Network Detection a...
    Read 39 Trellix Network Detection and Response reviews
    • 2,006 Views
    • 642 Comparison Views
    97% willing to recommend
     

    Comparison Buyer's Guide

    Download the report
    Executive SummaryUpdated on Jul 24, 2025

    Trellix Network Detection and Response and LogRhythm NDR [EOL] compete in the network security market. Trellix holds an advantage in pricing and customer support, while LogRhythm is superior in feature offerings.

    Features: Trellix Network Detection and Response provides robust threat detection capabilities, seamless integration with Trellix security solutions, and efficient threat management. LogRhythm NDR [EOL] is known for advanced analytics, comprehensive incident response features, and in-depth security coverage.

    Ease of Deployment and Customer Service: Trellix Network Detection and Response offers straightforward deployment and reliable customer support, enabling quick integration into existing infrastructure. LogRhythm NDR [EOL] involves a more complex deployment process but benefits from a dedicated support team.

    Pricing and ROI: Trellix Network Detection and Response offers competitive pricing with strong ROI through efficient threat management and low upfront costs. LogRhythm NDR [EOL] has higher setup costs but justifies them with significant ROI through extensive features and long-term returns.

    DOWNLOAD THE COMPLETE REPORT
    To learn more, read our detailed Network Detection and Response (NDR) Report (Updated: October 2025).
    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    Download the complete report
    Helped 869,785 peers since 2012

    Review summaries and opinions

    We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
     

    Categories and Ranking

    LogRhythm NDR [EOL]
    Average Rating
    8.0
    Reviews Sentiment
    7.0
    Number of Reviews
    3
    Ranking in other categories
    No ranking in other categories
    Trellix Network Detection a...
    Average Rating
    8.4
    Reviews Sentiment
    7.3
    Number of Reviews
    39
    Ranking in other categories
    Advanced Threat Protection (ATP) (13th), Network Detection and Response (NDR) (10th)
     

    Featured Reviews

    AshishDubey - PeerSpot reviewer
    A scalable and stable tool that offers users a great GUI
    Though I have not extensively worked on LogRhythm NDR, I know the need for a compute side since, in the past, we had required the compute side to deploy the solution in one of our company's client's infrastructure. The product's setup phase was easy and not complicated. The deployment process of LogRhythm NDR can vary between three and four weeks, depending on the skill set of the people involved in the deployment process. For deployment of the product, you have to purchase the license from LogRhythm, and you have to ensure that the compute side is ready for LogRhythm. After you deploy NDR and sensors in the premises of our company's customer on the SPAN and TAP port, and once the logs go through throughput, you can see the logs coming to LogRhythm NDR's console.
    Read full review
    BiswabhanuPanda - PeerSpot reviewer
    Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one
    The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.
    Read full review

    Quotes from Members

    We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
     

    Pros

    "It's an excellent security tool with a user-friendly interface that's easy for anyone to use."
    "It is a stable solution...It is a scalable solution."
    "The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly."
    "Improved our systems and our customers' by providing better malware protection, defense against zero-day threats, and improved network security."
    "It protects from signature-based attacks and signature-less attacks. The sandboxing technology, invented by FireEye, is very valuable. Our customers go for FireEye because of the sandboxing feature. When there is a threat or any malicious activity with a signature, it can be blocked by IPS. However, attacks that do not have any signatures and are very new can only be blocked by using the sandboxing feature, which is available only in FireEye. So, FireEye has both engines. It has an IPS engine and a sandbox engine, which is the best part. You can get complete network protection by using FireEye."
    "The features that I find most valuable are the MIR (Mandiant Incident Response) for checks on our inbound security."
    "Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch."
    "The solution can scale."
    "Initially, we didn't have much visibility around what is occurring at our applications lower level. For instance, if we are exposed to any malicious attacks or SQL injections. But now we've integrated FireEye with Splunk, so now we get lots of triggers based on policy content associated with FireEye. The solution has allowed for growth and improvement in our information security and security operations teams."
    "Over the thirteen years of using the product, we have not experienced a single compromise in our environment. During the COVID period, we faced numerous DDoS attacks, and the tool proved highly effective in mitigating these threats."
    "The server appliance is good."
    More Trellix Network Detection and Response pros
     

    Cons

    "There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction."
    "The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training."
    "From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model."
    "The initial setup was complex because of the nature of our environment. When it comes to the type of applications and functions which we were looking at in terms of identifying malicious threats, there would be some level of complexity, if we were doing it right."
    "It would be a good idea if we could get an option to block based upon the content of an email, or the content of a file attachment."
    "The problem with FireEye is that they don't allow VM or sandbox customization. The user doesn't have control of the VMs that are inside the box. It comes from the vendor as-is. Some users like to have control of it. Like what type of Windows and what type of applications and they have zero control over this."
    "It would be great if we could create granular reports based on the protocols, types of attacks, regions of attack, etc. Also we would like to easily be able to add exceptions to rules in cases of false positives."
    "Certain features in Trellix Network Detection and Response, such as using AL-type commands, may initially pose a challenge for those unfamiliar with such commands. However, once users become accustomed to the system, it becomes easier to use."
    "If you want to search the hashes in the environment, you need to put in IOCs one by one, making it a very hectic job."
    "It is very expensive, the price could be better."
    "Based on what we deployed, they should emphasize the application filtering and the web center. We need to look deeper into the SSM inspection. If we get the full solution with that module, we don't need to get the SSM database from another supplier."
    More Trellix Network Detection and Response cons
     

    Pricing and Cost Advice

    "There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion."
    "When looking at the market and comparing it with other vendors, the cost seems relatively high."
    "The tool costs are two million rupees for 5000 users."
    "We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."
    "The pricing is a little high."
    "When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."
    "There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."
    "When I compare this solution to its competitors in the market, I find that it is a little expensive."
    "It's an expensive solution."
    "FireEye is comparable to other products, such as HX, but seems expensive. It may cause us to look at other products in the market."
    "Pricing and licensing are reasonable compared to competitors."
    More Trellix Network Detection and Response pricing and cost advice
    report
    See which vendors are best for you
    Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
    See recommendations
    869,785 professionals have used our research since 2012.
     

    Top Industries

    By visitors reading reviews
    No data available
    Financial Services Firm
    12%
    Comms Service Provider
    12%
    Manufacturing Company
    11%
    Government
    9%
     

    Company Size

    By reviewers
    Large Enterprise
    Midsize Enterprise
    Small Business
    No data available
    By reviewers
    Company SizeCount
    Small Business19
    Midsize Enterprise8
    Large Enterprise19
     

    Questions from the Community

    What do you like most about LogRhythm NDR?
    It is a stable solution...It is a scalable solution.
    See all answers
    What is your experience regarding pricing and costs for LogRhythm NDR?
    The tool costs are two million rupees for 5000 users.
    See all answers
    What needs improvement with LogRhythm NDR?
    The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training.
    See all answers
    What do you like most about FireEye Network Security?
    We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
    See all answers
    What is your experience regarding pricing and costs for FireEye Network Security?
    While I do not handle pricing directly, it is known that there is a variety of customers with different licensing needs, which depends on the organization's size and policy.
    See all answers
    What needs improvement with FireEye Network Security?
    The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response. Networking often involves complexity that c...
    See all answers
     

    Comparisons

    NetWitness NDR vs LogRhythm NDR [EOL] Logo
    NetWitness NDR vs LogRhythm NDR [EOL]
    Compared 100% of the time
    More LogRhythm NDR [EOL] Competitors
    Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
    Palo Alto Networks WildFire vs Trellix Network Detection and Response
    Compared 13% of the time
    Fortinet FortiSandbox vs Trellix Network Detection and Response Logo
    Fortinet FortiSandbox vs Trellix Network Detection and Response
    Compared 10% of the time
    Trend Micro Deep Discovery vs Trellix Network Detection and Response Logo
    Trend Micro Deep Discovery vs Trellix Network Detection and Response
    Compared 8% of the time
    Darktrace vs Trellix Network Detection and Response Logo
    Darktrace vs Trellix Network Detection and Response
    Compared 6% of the time
    Zabbix vs Trellix Network Detection and Response Logo
    Zabbix vs Trellix Network Detection and Response
    Compared 6% of the time
    More Trellix Network Detection and Response Competitors
     

    Product Reports

    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    LogRhythm NDR [EOL] reportDownload LogRhythm NDR [EOL] product report
    Buyer's Guide
    Trellix Network Detection and Response
    September 2025
    Trellix Network Detection and Response reportDownload Trellix Network Detection and Response product report
     

    Also Known As

    LogRhythm MistNet
    FireEye Network Security, FireEye
     

    Overview

    LogRhythm NDR [EOL] was an innovative approach to network detection and response, facilitating enhanced threat monitoring and incident response.

    LogRhythm NDR [EOL] offered comprehensive detection capabilities that enabled organizations to quickly identify and investigate network anomalies. It integrated seamlessly with security operations, providing meaningful insights and analysis for better threat management. The adaptable technology ensured it remained relevant despite the evolving threat landscape.

    What were the key features?
    • Real-time Monitoring: Offers continuous oversight to promptly detect any suspicious activities
    • Anomaly Detection: Identifies irregular patterns to pre-empt potential cyber threats
    • Integration Capabilities: Easily integrates with existing security infrastructure for enhanced efficiency
    • Threat Intelligence: Leverages advanced data to assess and respond to security incidents
    What benefits did LogRhythm NDR [EOL] offer?
    • Speedy Incident Response: Facilitates quick actions against detected threats to minimize risks
    • Cost Efficiency: Reduces potential financial losses by improving threat detection and response
    • Enhanced Security Posture: Strengthens defense mechanisms against sophisticated attacks
    • Operational Streamlining: Improves workflow efficiency with integrated security operations

    LogRhythm NDR [EOL] found its place in diverse industries like finance and healthcare where it bolstered compliance and regulatory efforts. Its adaptable nature made it suitable for implementation across sectors with high-security demands.

    Exabeam

    Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.

    Trellix
     

    Sample Customers

    EMW, Conduent, University of Massachusetts, Deloitte Canada, Central Bank of Barbados, Coalfire
    FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    Download Free Report
    Find out what your peers are saying about Darktrace, Vectra AI, Trend Micro and others in Network Detection and Response (NDR). Updated: October 2025.
    DOWNLOAD NOW
    869,785 professionals have used our research since 2012.
    See our list of best Network Detection and Response (NDR) vendors.

    We monitor all Network Detection and Response (NDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.