No more typing reviews! Try our Samantha, our new voice AI agent.

LogRhythm NDR [EOL] vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 26, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm NDR [EOL]
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Trellix Network Detection a...
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
54
Ranking in other categories
Advanced Threat Protection (ATP) (10th), Network Detection and Response (NDR) (7th)
 

Featured Reviews

AshishDubey - PeerSpot reviewer
Product manager at Tata Communications Ltd
A scalable and stable tool that offers users a great GUI
Though I have not extensively worked on LogRhythm NDR, I know the need for a compute side since, in the past, we had required the compute side to deploy the solution in one of our company's client's infrastructure. The product's setup phase was easy and not complicated. The deployment process of LogRhythm NDR can vary between three and four weeks, depending on the skill set of the people involved in the deployment process. For deployment of the product, you have to purchase the license from LogRhythm, and you have to ensure that the compute side is ready for LogRhythm. After you deploy NDR and sensors in the premises of our company's customer on the SPAN and TAP port, and once the logs go through throughput, you can see the logs coming to LogRhythm NDR's console.
Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly."
"It is a stable solution...It is a scalable solution."
"It's an excellent security tool with a user-friendly interface that's easy for anyone to use."
"It protects from signature-based attacks and signature-less attacks. The sandboxing technology, invented by FireEye, is very valuable. Our customers go for FireEye because of the sandboxing feature. When there is a threat or any malicious activity with a signature, it can be blocked by IPS. However, attacks that do not have any signatures and are very new can only be blocked by using the sandboxing feature, which is available only in FireEye. So, FireEye has both engines. It has an IPS engine and a sandbox engine, which is the best part. You can get complete network protection by using FireEye."
"The features that I find most valuable are the MIR (Mandiant Incident Response) for checks on our inbound security."
"Its ability to find zero-day threats, malware and anything malicious has greatly improved my customer's organization, especially for protecting the users' browser."
"Anyone who is looking for a complete network protection solution and does not have any budget issues should definitely go for it."
"The initial setup was straightforward, you can do it by yourself, you don't have to find a partner or a FireEye expert."
"After deploying Trellix Network Detection and Response, we saw a noticeable improvement in our security operations, as threat detection and incident times were reduced by 40 to 50 percent, the security team spent significantly less time manually analyzing network traffic, and we were able to identify suspicious activity that previously went unnoticed, leading to faster containment of potential incidents and improved overall response efficiency."
"It's a very simple solution and a very effective product in my network."
"It has provided us with better malware, intrusion and incident detection."
 

Cons

"From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model."
"The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training."
"There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction."
"Stability is fine as long as we don't go deeper into the system. Once we go deeper into the SSM, inspection, and decryption, we get some issues."
"FireEye Network Security should have better integration with other vendors' firewalls or proxies, such as Palo Alto and Fortinet. Files that are being submitted should happen through the API or automatically."
"Based on what we deployed, they should emphasize the application filtering and the web center. We need to look deeper into the SSM inspection. If we get the full solution with that module, we don't need to get the SSM database from another supplier."
"The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response."
"Certain features in Trellix Network Detection and Response, such as using AL-type commands, may initially pose a challenge for those unfamiliar with such commands. However, once users become accustomed to the system, it becomes easier to use."
"Trellix Network Detection and Response is stable but occasionally encounters performance issues, which we can fix quickly."
"It would be very helpful if there were better integration with other solutions from other vendors, such as Fortinet and Palo Alto."
"To improve Trellix Network Detection and Response, I suggest enhancing reporting customization; the reports can be much better, and I should have the ability to customize them much more freely."
 

Pricing and Cost Advice

"The tool costs are two million rupees for 5000 users."
"There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion."
"When looking at the market and comparing it with other vendors, the cost seems relatively high."
"Because of what the FireEye product does, it has significantly decreased our mean time in being able to identify and detect malicious threats. The company that I work with is a very mature organization, and we have seen the meantime to analysis decrease by at least tenfold."
"Pricing and licensing are reasonable compared to competitors."
"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."
"The pricing is a little high."
"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."
"When I compare this solution to its competitors in the market, I find that it is a little expensive."
"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
"FireEye is comparable to other products, such as HX, but seems expensive. It may cause us to look at other products in the market."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
16%
Financial Services Firm
13%
Comms Service Provider
9%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise11
Large Enterprise23
 

Questions from the Community

What needs improvement with LogRhythm NDR?
The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training.
What is your primary use case for LogRhythm NDR?
Our use cases are mostly for mining, telco, finance, and banking industries.
What is your experience regarding pricing and costs for FireEye Network Security?
The price for Trellix Network Detection and Response is reasonable. The pricing is reasonable, and I do not need to bargain with Trellix or customers.
What needs improvement with FireEye Network Security?
The negative aspect is support. When I need urgent support from Trellix, there is a response after four hours or three hours, which is my main concern regarding the negative point of Trellix Networ...
What is your primary use case for FireEye Network Security?
I am working with Trellix Network Detection and Response as part of my overall experience with these products today. Trellix Network Detection and Response is used for threat and response use cases...
 

Also Known As

LogRhythm MistNet
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

EMW, Conduent, University of Massachusetts, Deloitte Canada, Central Bank of Barbados, Coalfire
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Darktrace, TrendAI, Vectra AI and others in Network Detection and Response (NDR). Updated: June 2026.
900,644 professionals have used our research since 2012.