No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm NDR [EOL] vs Trellix Network Detection and Response comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 26, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm NDR [EOL]
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Trellix Network Detection a...
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
53
Ranking in other categories
Advanced Threat Protection (ATP) (6th), Network Detection and Response (NDR) (4th)
 

Featured Reviews

Monsur Ahmed - PeerSpot reviewer
Software management at Midland Bank
Robust cybersecurity with user-friendly interface, efficient threat detection through network traffic analysis, and seamless integration with threat intelligence
For new users, navigating the platform can be challenging, especially if they lack experience with the OEM or the product itself. Understanding its origin, implementation procedures, and troubleshooting database issues can pose difficulties. However, once users gain familiarity and resolve any initial problems, the overall experience becomes more positive. Overall, I would rate it eight out of ten.
Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's an excellent security tool with a user-friendly interface that's easy for anyone to use."
"The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly."
"It is a stable solution...It is a scalable solution."
"The biggest impact Trellix Network Detection and Response has had on our organization is improved visibility across our environment and better confidence during investigations, as security analysts can understand suspicious behavior more clearly instead of depending solely on isolated alerts."
"We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement and that nothing else was infected. It helped us correlate the events and feel confident in our containment."
"After deploying Trellix Network Detection and Response, we saw a noticeable improvement in our security operations, as threat detection and incident times were reduced by 40 to 50 percent, the security team spent significantly less time manually analyzing network traffic, and we were able to identify suspicious activity that previously went unnoticed, leading to faster containment of potential incidents and improved overall response efficiency."
"It is a good product to implement, especially where the existing technology fails to detect zero day attacks."
"The real-time alerts from Trellix Network Detection and Response reduced our average incident detection time from several hours to under thirty minutes, allowing the team to contain threats much faster."
"It is stable and quite protective. It has a lot of features to scan a lot of malicious things and vulnerabilities."
"Because of what the FireEye product does, it has significantly decreased our meantime in being able to identify and detect malicious threats."
"The most valuable feature is MVX, which tests all of the files that have been received in an email, using virtual machines to test the behavior of the files and determine whether they are malicious in nature, blocking any abnormal activity and recording the hash value to submit to the cloud and add to the blacklist."
 

Cons

"From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model."
"The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training."
"There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction."
"FireEye’s main feature is its sandboxing or threat emulation capabilities to detect malware with extra add-ons such as signature-based IPS or endpoint protection, but these features are lacking compared to most IPS or endpoint vendors."
"To improve Trellix Network Detection and Response, I suggest enhancing reporting customization; the reports can be much better, and I should have the ability to customize them much more freely."
"It is not a very secure product."
"The product is pricey. We'd like it to cost less. Not all customers can afford it."
"There is a lot of room for Improvement in the offering, from cost to functionality. It is pretty straightforward to implement which is an advantage. However, it falls short in pricing, detection capabilities, and, most importantly, reporting and policy management."
"The world is currently shifting to AI, but FIreEye is not following suit."
"Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents."
"It doesn't connect with the cloud, advanced machine learning is not there."
 

Pricing and Cost Advice

"There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion."
"The tool costs are two million rupees for 5000 users."
"When looking at the market and comparing it with other vendors, the cost seems relatively high."
"The user fee is not as high but the maintenance fee is expensive."
"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."
"Its price is a bit high. A small customer cannot buy it. Its licensing is on a yearly basis."
"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
"The pricing is a little high."
"It's an expensive solution."
"We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."
"Pricing and licensing are reasonable compared to competitors."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
919,088 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
17%
Outsourcing Company
16%
Financial Services Firm
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise11
Large Enterprise23
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...
What needs improvement with FireEye Network Security?
Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...
What is your primary use case for FireEye Network Security?
Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...
 

Also Known As

LogRhythm MistNet
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

EMW, Conduent, University of Massachusetts, Deloitte Canada, Central Bank of Barbados, Coalfire
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Darktrace, TrendAI, Vectra AI and others in Network Detection and Response (NDR). Updated: October 2026.
919,088 professionals have used our research since 2012.