Try our new research platform with insights from 80,000+ expert users

LogRhythm NDR [EOL] vs Trellix Network Detection and Response comparison

Exabeam and Trellix are both solutions in the Network Detection and Response (NDR) category. Additionally, 100% of Exabeam users are willing to recommend the solution, compared to 97% of Trellix users who would recommend it.
LogRhythm NDR [EOL]
Read 3 LogRhythm NDR [EOL] reviews
    100% willing to recommend
    Trellix Network Detection a...
    Read 39 Trellix Network Detection and Response reviews
    • 2,006 Views
    • 642 Comparison Views
    97% willing to recommend
     

    Comparison Buyer's Guide

    Download the report
    Executive SummaryUpdated on Jul 24, 2025

    Trellix Network Detection and Response and LogRhythm NDR [EOL] compete in the network security market. Trellix holds an advantage in pricing and customer support, while LogRhythm is superior in feature offerings.

    Features: Trellix Network Detection and Response provides robust threat detection capabilities, seamless integration with Trellix security solutions, and efficient threat management. LogRhythm NDR [EOL] is known for advanced analytics, comprehensive incident response features, and in-depth security coverage.

    Ease of Deployment and Customer Service: Trellix Network Detection and Response offers straightforward deployment and reliable customer support, enabling quick integration into existing infrastructure. LogRhythm NDR [EOL] involves a more complex deployment process but benefits from a dedicated support team.

    Pricing and ROI: Trellix Network Detection and Response offers competitive pricing with strong ROI through efficient threat management and low upfront costs. LogRhythm NDR [EOL] has higher setup costs but justifies them with significant ROI through extensive features and long-term returns.

    DOWNLOAD THE COMPLETE REPORT
    To learn more, read our detailed Network Detection and Response (NDR) Report (Updated: October 2025).
    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    Download the complete report
    Helped 869,785 peers since 2012

    Review summaries and opinions

    We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
     

    Categories and Ranking

    LogRhythm NDR [EOL]
    Average Rating
    8.0
    Reviews Sentiment
    7.0
    Number of Reviews
    3
    Ranking in other categories
    No ranking in other categories
    Trellix Network Detection a...
    Average Rating
    8.4
    Reviews Sentiment
    7.3
    Number of Reviews
    39
    Ranking in other categories
    Advanced Threat Protection (ATP) (13th), Network Detection and Response (NDR) (10th)
     

    Featured Reviews

    AshishDubey - PeerSpot reviewer
    A scalable and stable tool that offers users a great GUI
    Though I have not extensively worked on LogRhythm NDR, I know the need for a compute side since, in the past, we had required the compute side to deploy the solution in one of our company's client's infrastructure. The product's setup phase was easy and not complicated. The deployment process of LogRhythm NDR can vary between three and four weeks, depending on the skill set of the people involved in the deployment process. For deployment of the product, you have to purchase the license from LogRhythm, and you have to ensure that the compute side is ready for LogRhythm. After you deploy NDR and sensors in the premises of our company's customer on the SPAN and TAP port, and once the logs go through throughput, you can see the logs coming to LogRhythm NDR's console.
    Read full review
    BiswabhanuPanda - PeerSpot reviewer
    Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one
    The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.
    Read full review

    Quotes from Members

    We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
     

    Pros

    "It's an excellent security tool with a user-friendly interface that's easy for anyone to use."
    "It is a stable solution...It is a scalable solution."
    "The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly."
    "The most valuable feature of the solution stems from how it allows users to do the investigation part. Another important part of the product that is valuable is associated with how it gives information to users in the form of a storyline."
    "The features that I find most valuable are the MIR (Mandiant Incident Response) for checks on our inbound security."
    "The most valuable feature is MVX, which tests all of the files that have been received in an email."
    "It allows us to be more hands off in checking on emails and networking traffic. We can set up a bunch of different alerts and have it alert us."
    "The most valuable feature is the network security module."
    "Very functional and good for detecting malicious traffic."
    "Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch."
    "Its ability to find zero-day threats, malware and anything malicious has greatly improved my customer's organization, especially for protecting the users' browser."
    More Trellix Network Detection and Response pros
     

    Cons

    "There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction."
    "From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model."
    "The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training."
    "The solution's support needs to improve their support."
    "As far as future inclusions, it would be useful to display more threat intelligence, such as the actual area of the threat and the origin of the web crawling (Tor and Dark Web)."
    "Based on what we deployed, they should emphasize the application filtering and the web center. We need to look deeper into the SSM inspection. If we get the full solution with that module, we don't need to get the SSM database from another supplier."
    "We'd like the potential for better scaling."
    "Technical packaging could be improved."
    "It is an expensive solution."
    "I heard that FireEye recently was hacked, and a lot of things were revealed. We would like FireEye to be more secure as an organization. FireEye has to be more protective because it is one of the most critical devices that we are using in our environment. They have a concept called SSL decryption, but that is only the packet address. We would like FireEye to also do a lot of decryption inside the packet. Currently, FireEye only does encryption and decryption of the header, but we would like them to do encryption and decryption of the entire packet."
    "They can maybe consider supporting some compliance standards. When we are configuring rules and policies, it can guide whether they are compliant with a particular compliance authority. In addition, if I have configured some rules that have not been used, it should give a report saying that these rules have not been used in the last three months or six months so that I disable or delete those rules."
    More Trellix Network Detection and Response cons
     

    Pricing and Cost Advice

    "There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion."
    "When looking at the market and comparing it with other vendors, the cost seems relatively high."
    "The tool costs are two million rupees for 5000 users."
    "The tool is a bit pricey."
    "When I compare this solution to its competitors in the market, I find that it is a little expensive."
    "Pricing and licensing are reasonable compared to competitors."
    "We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."
    "Because of what the FireEye product does, it has significantly decreased our mean time in being able to identify and detect malicious threats. The company that I work with is a very mature organization, and we have seen the meantime to analysis decrease by at least tenfold."
    "FireEye is comparable to other products, such as HX, but seems expensive. It may cause us to look at other products in the market."
    "Its price is a bit high. A small customer cannot buy it. Its licensing is on a yearly basis."
    "The user fee is not as high but the maintenance fee is expensive."
    More Trellix Network Detection and Response pricing and cost advice
    report
    See which vendors are best for you
    Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
    See recommendations
    869,785 professionals have used our research since 2012.
     

    Top Industries

    By visitors reading reviews
    No data available
    Financial Services Firm
    12%
    Comms Service Provider
    12%
    Manufacturing Company
    11%
    Government
    9%
     

    Company Size

    By reviewers
    Large Enterprise
    Midsize Enterprise
    Small Business
    No data available
    By reviewers
    Company SizeCount
    Small Business19
    Midsize Enterprise8
    Large Enterprise19
     

    Questions from the Community

    What do you like most about LogRhythm NDR?
    It is a stable solution...It is a scalable solution.
    See all answers
    What is your experience regarding pricing and costs for LogRhythm NDR?
    The tool costs are two million rupees for 5000 users.
    See all answers
    What needs improvement with LogRhythm NDR?
    The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training.
    See all answers
    What do you like most about FireEye Network Security?
    We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
    See all answers
    What is your experience regarding pricing and costs for FireEye Network Security?
    While I do not handle pricing directly, it is known that there is a variety of customers with different licensing needs, which depends on the organization's size and policy.
    See all answers
    What needs improvement with FireEye Network Security?
    The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response. Networking often involves complexity that c...
    See all answers
     

    Comparisons

    NetWitness NDR vs LogRhythm NDR [EOL] Logo
    NetWitness NDR vs LogRhythm NDR [EOL]
    Compared 100% of the time
    More LogRhythm NDR [EOL] Competitors
    Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
    Palo Alto Networks WildFire vs Trellix Network Detection and Response
    Compared 13% of the time
    Fortinet FortiSandbox vs Trellix Network Detection and Response Logo
    Fortinet FortiSandbox vs Trellix Network Detection and Response
    Compared 10% of the time
    Trend Micro Deep Discovery vs Trellix Network Detection and Response Logo
    Trend Micro Deep Discovery vs Trellix Network Detection and Response
    Compared 8% of the time
    Darktrace vs Trellix Network Detection and Response Logo
    Darktrace vs Trellix Network Detection and Response
    Compared 6% of the time
    Zabbix vs Trellix Network Detection and Response Logo
    Zabbix vs Trellix Network Detection and Response
    Compared 6% of the time
    More Trellix Network Detection and Response Competitors
     

    Product Reports

    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    LogRhythm NDR [EOL] reportDownload LogRhythm NDR [EOL] product report
    Buyer's Guide
    Trellix Network Detection and Response
    September 2025
    Trellix Network Detection and Response reportDownload Trellix Network Detection and Response product report
     

    Also Known As

    LogRhythm MistNet
    FireEye Network Security, FireEye
     

    Overview

    LogRhythm NDR [EOL] was an innovative approach to network detection and response, facilitating enhanced threat monitoring and incident response.

    LogRhythm NDR [EOL] offered comprehensive detection capabilities that enabled organizations to quickly identify and investigate network anomalies. It integrated seamlessly with security operations, providing meaningful insights and analysis for better threat management. The adaptable technology ensured it remained relevant despite the evolving threat landscape.

    What were the key features?
    • Real-time Monitoring: Offers continuous oversight to promptly detect any suspicious activities
    • Anomaly Detection: Identifies irregular patterns to pre-empt potential cyber threats
    • Integration Capabilities: Easily integrates with existing security infrastructure for enhanced efficiency
    • Threat Intelligence: Leverages advanced data to assess and respond to security incidents
    What benefits did LogRhythm NDR [EOL] offer?
    • Speedy Incident Response: Facilitates quick actions against detected threats to minimize risks
    • Cost Efficiency: Reduces potential financial losses by improving threat detection and response
    • Enhanced Security Posture: Strengthens defense mechanisms against sophisticated attacks
    • Operational Streamlining: Improves workflow efficiency with integrated security operations

    LogRhythm NDR [EOL] found its place in diverse industries like finance and healthcare where it bolstered compliance and regulatory efforts. Its adaptable nature made it suitable for implementation across sectors with high-security demands.

    Exabeam

    Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.

    Trellix
     

    Sample Customers

    EMW, Conduent, University of Massachusetts, Deloitte Canada, Central Bank of Barbados, Coalfire
    FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
    Buyer's Guide
    Network Detection and Response (NDR)
    October 2025
    Download Free Report
    Find out what your peers are saying about Darktrace, Vectra AI, Trend Micro and others in Network Detection and Response (NDR). Updated: October 2025.
    DOWNLOAD NOW
    869,785 professionals have used our research since 2012.
    See our list of best Network Detection and Response (NDR) vendors.

    We monitor all Network Detection and Response (NDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.