Sangfor Endpoint Secure vs Trellix Active Response comparison

Sangfor and Trellix are both solutions in the Endpoint Detection and Response (EDR) category. Sangfor is ranked #17 with an average rating of 8.2, while Trellix is ranked #45 with an average rating of 8.0. Sangfor holds a 0.7% mindshare in EDR, compared to Trellix’s 0.2% mindshare. Additionally, 100% of Sangfor users are willing to recommend the solution, compared to 50% of Trellix users who would recommend it.

Sangfor Endpoint Secure

Read 11 Sangfor Endpoint Secure reviews

1,586 Views
1,570 Comparison Views

100% willing to recommend

Trellix Active Response

Read 5 Trellix Active Response reviews

364 Views
349 Comparison Views

50% willing to recommend

Sangfor Endpoint Secure

Trellix Active Response

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Trellix Active Response and Sangfor Endpoint Secure compete in advanced threat detection and endpoint protection. Trellix has a slight edge due to its superior integration and automation capabilities.

Features: Trellix Active Response offers advanced threat detection, automation capabilities, and comprehensive reporting. Sangfor Endpoint Secure provides robust protection against malware, detailed monitoring features, and a user-friendly experience.

Room for Improvement: Trellix Active Response could benefit from more streamlined updates, better scalability for large enterprises, and enhanced user interface. Sangfor Endpoint Secure needs improved customer support, more frequent updates, and expanded integration capabilities.

Ease of Deployment and Customer Service: Trellix Active Response is praised for its straightforward deployment process, though it occasionally presents complexity. Its customer service is generally well-regarded. Sangfor Endpoint Secure is easy to deploy but can present occasional difficulties. Its customer service has received mixed reviews.

Pricing and ROI: Trellix Active Response is cost-effective with advanced features and automation, offering strong ROI. Sangfor Endpoint Secure is competitively priced and delivers good ROI but lacks some of Trellix's advanced features.

To learn more, read our detailed Sangfor Endpoint Secure vs. Trellix Active Response Report (Updated: July 2025).

Buyer's Guide

Sangfor Endpoint Secure vs. Trellix Active Response

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Sangfor Endpoint Secure

Ranking in Endpoint Detection and Response (EDR)

17th

Average Rating

8.2

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Active Response

Ranking in Endpoint Detection and Response (EDR)

45th

Average Rating

7.0

Reviews Sentiment

5.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Sangfor Endpoint Secure is 0.7%, up from 0.6% compared to the previous year. The mindshare of Trellix Active Response is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Shiraz Ali

Networking Solutions Specialist at GBM

Provides a unified and multi-layer security solution

I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities. Having a single, more user-friendly management console, like a one-window approach, would streamline the user experience and make it easier for administrators to handle security tasks more efficiently. Sangfor Endpoint Secure currently only allows one manager to control clients, and it lacks a backup system. It would be better if it supported a secondary manager for backup in case the primary one fails, ensuring uninterrupted service.

Read full review

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

Offers comprehensive incident visualization and quick response capabilities but requires clearer dashboard interface

I am an Information Security Engineer at NHQ Distribution Limited and a partner of Trellix. I work with different products in Trellix, including Trellix EDR, SDR, and MDR. Trellix Active Response is the EDR solution from Trellix that has moved from an on-premise solution to a cloud solution. The Trellix MDR solution is helpful for SOC analysis and is integrated with Trellix EDR and SDR capabilities, providing full visibility of threat detection and hunting and detection response correlating with other solutions like endpoint security and encryption. On a scale of one to ten, I rate Trellix Active Response an eight.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has a quick response time, threat intelligence, cybersecurity features, quick report generation, behavior analysis, dynamic detection, and quarantine features."

"What stands out to me is the dual-end user interface they provide."

"The tool's AI feature is helpful in endpoint security."

"The most valuable feature I have found in the system is its comprehensive end-to-end protection."

"The product's initial setup phase was straightforward."

"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."

"The tool's most valuable features are control access, endpoint security, and load balancing of ISPs."

"The real-time monitoring feature of Sangfor Endpoint Secure is truly real-time, with no delay compared to other solutions."

More Sangfor Endpoint Secure pros

"The alerts provided by Trellix Active Response are its most valuable feature."

"We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response gives us that visibility and lets us automate a number of those events."

"It's a little lighter compared to the older version, which was mostly signature-based."

"The solution is scalable."

Cons

"Sometimes, the VPN is not secure and doesn't work properly in Sangfor Endpoint Secure."

"Currently, the tool lacks reporting functionalities."

"It is complicated to establish a tunnel due to technical issues in the VPN system."

"When an issue occurs, the response time for first-level support and the time taken for meetings could be improved."

"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."

"I face issues while migrating from Kaspersky to Sangfor Endpoint Secure."

"Sangfor Endpoint Secure should include healing capabilities."

"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."

More Sangfor Endpoint Secure cons

"The only area for improvement is regarding operational technology devices, specifically the engineering automation systems."

"There are some components on the cloud that should also reside in the on-prem deployment models but don't."

"I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration."

"While the product is good, we are currently facing support issues."

"I also expected Active Response 's user interface to be much more analytical."

Pricing and Cost Advice

"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."

"Sangfor Endpoint Secure is not a cheap solution."

"The solution is cheap. It is cheaper than other products by 15-20 percent."

"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."

"The product is expensive compared to other vendors."

"We were using Hyper-V. So, we switched to Sangfor because of the pricing."

"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."

"Our costs were somewhere around $600K in Trinidad dollars, which might be about $100K US. We have the ETP plus the EDR. Our recent renewal was 1800 licenses as opposed to the full amount. Our transaction cost was about $600K Trinidad dollars, which is somewhere around $90-100K US."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Government

Comms Service Provider

Government

18%

Comms Service Provider

13%

Financial Services Firm

10%

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Sangfor Endpoint Secure?

Sangfor Endpoint Secure has some good policy certificates.

See all answers

What needs improvement with Sangfor Endpoint Secure?

The interface has too many buttons, making it cluttered. It would be better if it were a simplified version with fewer buttons and a more consolidated layout.

See all answers

What is your primary use case for Sangfor Endpoint Secure?

Sangfor Endpoint Secure is easy to handle with its user-friendly interface. The four engines it utilizes for endpoint detection provide fewer false positives compared to other solutions. It is used...

See all answers

What is your experience regarding pricing and costs for McAfee Active Response?

Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.

See all answers

What needs improvement with McAfee Active Response?

For Trellix Active Response, there is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities o...

See all answers

What is your primary use case for McAfee Active Response?

The typical use case for Trellix Active Response is to provide quick incident response, as the product collects and correlates logs with the ePO dashboard, allowing customers to get visibility of t...

See all answers

Comparisons

Kaspersky Endpoint Detection and Response vs Sangfor Endpoint Secure

Compared 23% of the time

ESET Inspect vs Sangfor Endpoint Secure

Compared 10% of the time

CrowdStrike Falcon vs Sangfor Endpoint Secure

Compared 9% of the time

SentinelOne Singularity Complete vs Sangfor Endpoint Secure

Compared 8% of the time

Bitdefender GravityZone EDR vs Sangfor Endpoint Secure

Compared 8% of the time

More Sangfor Endpoint Secure Competitors

Trellix Endpoint Security Platform vs Trellix Active Response

Compared 55% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Active Response

Compared 45% of the time

More Trellix Active Response Competitors

Product Reports

Buyer's Guide

Sangfor Endpoint Secure

July 2025

Download Sangfor Endpoint Secure product report

Buyer's Guide

Endpoint Detection and Response (EDR)

January 2025

Download Trellix Active Response product report

Also Known As

No data available

McAfee Active Response

Overview

Organizations use Sangfor Endpoint Secure for endpoint protection and security management, managing devices, servers, and networks against malicious threats. It also assists in blocking websites, managing infrastructure, applications, antivirus needs, and aids in migrating to cloud environments.

Sangfor Endpoint Secure offers end-to-end protection, incorporating file protection, AI detection, behavior analysis, access control, and ISP load balancing. It facilitates VM migration with minimal downtime and includes a dual-end user interface for creating firewall rules, uploading images, and configuring VM settings. Enhancements such as Hyper-V capabilities, policy certificates, honeypot features, and next-generation firewall integrations are available. However, Sangfor Endpoint Secure could improve on console management, reporting functionalities, public cloud migration support, navigation, VPN system issues, licensing, update management, transitioning processes, and incorporating healing capabilities.

What are its most important features?

Comprehensive end-to-end protection including file protection
AI detection and behavior analysis
Access control and ISP load balancing
Ease of VM migration with minimal downtime
Streamlined dual-end user interface for firewall rules and VM settings
Hyper-V capabilities and policy certificates
Honeypot feature for attack detection and RDP protection
Integration with next-generation firewalls

What benefits or ROI should users look for?

Enhanced device, server, and network security from malicious threats
Simplified migration from on-premises to cloud environments
User-friendly navigation and management capabilities
Advanced detection and behavior analysis reducing potential threats
Streamlined enforcement of robust security policies

Sangfor Endpoint Secure is implemented across various industries to ensure comprehensive security management and protection. IT departments leverage its VM migration capabilities for seamless transitions to cloud environments. Healthcare organizations use it to secure sensitive patient data, while educational institutions utilize it for safeguarding academic records and personal information. Financial services employ it to protect critical transactional data and adhere to stringent compliance requirements.

Sangfor

Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.

Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.

Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.

Trellix

Sample Customers

Information Not Available

Liquor Control Board of Ontario

Buyer's Guide

Sangfor Endpoint Secure vs. Trellix Active Response

July 2025

Free Report: Sangfor Endpoint Secure vs. Trellix Active Response

Find out what your peers are saying about Sangfor Endpoint Secure vs. Trellix Active Response and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Sangfor Endpoint Secure vs. Trellix Active Response report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.