No more typing reviews! Try our Samantha, our new voice AI agent.

SonicWall Capture Advanced Threat Protection vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SonicWall Capture Advanced ...
Ranking in Advanced Threat Protection (ATP)
28th
Average Rating
7.8
Reviews Sentiment
7.4
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Trellix Network Detection a...
Ranking in Advanced Threat Protection (ATP)
17th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
41
Ranking in other categories
Network Detection and Response (NDR) (13th)
 

Mindshare comparison

As of May 2026, in the Advanced Threat Protection (ATP) category, the mindshare of SonicWall Capture Advanced Threat Protection is 2.1%, up from 0.9% compared to the previous year. The mindshare of Trellix Network Detection and Response is 4.1%, up from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response4.1%
SonicWall Capture Advanced Threat Protection2.1%
Other93.8%
Advanced Threat Protection (ATP)
 

Featured Reviews

MA
Technical Manager, NOC at TEXUM JORDAN
Has a good configuration but the price should be more competitive
Our primary use case of this solution is for security.  It's a good solution but the price is high. It also has an easy configuration. The feedback that we get from our customers is that it's a good product. Our customers are mostly smaller enterprises.  The price should be more competitive.  I…
Jose Vargas - PeerSpot reviewer
Agente De Servicios Técnicos at a computer software company with 11-50 employees
Has improved threat detection workflows and supports seamless customer monitoring
The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the alerting system."
"We get alert messages whenever there is a new threat. We are notified at the firewall level that things are blocked, which keeps us in our comfort zone."
"They have a large database of commonly known things that they can catch automatically, then they have anything which is questionable go to the sandbox and be examined there before going into our network."
"For the past four and a half years, we haven't had any breaches or issues of any kind."
"This is a solid solution that fills the requirements."
"I like this setup for a firewall. You can set things up very easily and you can automate items as well. It's a very robust firewall solution for enterprise as well as small businesses."
"The stability of the solution is good. We haven't had any breaches or crashes. It's been very stable for us."
"We use it for protection against viruses and ransomware attacks."
"It allows us to be more hands off in checking on emails and networking traffic. We can set up a bunch of different alerts and have it alert us."
"The installation phase was easy."
"Both for our clients and for ourselves, ROI was almost 200% more than we expected."
"Application categorization is the most valuable feature for us. Application filtering is very interesting because other products don't give you full application filtering capabilities."
"It is stable and quite protective. It has a lot of features to scan a lot of malicious things and vulnerabilities."
"Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall, and if you have these types of tools, your organization would benefit greatly."
"The most valuable feature is the view into the application."
"If we are receiving spam emails, or other types of malicious email coming from a particular email ID, then we are able to block them using this solution."
 

Cons

"SonicWall should promote their roadmap and improve their marketing to customers."
"I would like to have better documentation before starting with deployment because the deployment is a bit complex."
"Having an on-premise solution as well would be an option for some people, but they'll want to use a cloud solution for their sandboxing."
"The setup needs improvement. It needs to be made more user-friendly."
"We would like to get immediate alerts from the alerting system without using third-parties."
"SonicWall had a recent layoff. This is a concern for us, because now we are missing the local presence from both the engineering and sales side."
"Having an on-premise solution as well would be an option for some people, but they'll want to use a cloud solution for their sandboxing. Certain sites would want to keep all the checks done on an on-premise appliance. All the checking, rather than sending that up into a cloud engine."
"If anything at all, it would be some very minor updates that need to be done, but in terms of changes, nothing comes to mind."
"The product is pricey. We'd like it to cost less. Not all customers can afford it."
"The problem with FireEye is that they don't allow VM or sandbox customization. The user doesn't have control of the VMs that are inside the box."
"The support from FireEye Network Security is not very good."
"Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents."
"A lot of false positives."
"I heard that FireEye recently was hacked, and a lot of things were revealed. We would like FireEye to be more secure as an organization. FireEye has to be more protective because it is one of the most critical devices that we are using in our environment. They have a concept called SSL decryption, but that is only the packet address. We would like FireEye to also do a lot of decryption inside the packet. Currently, FireEye only does encryption and decryption of the header, but we would like them to do encryption and decryption of the entire packet."
"The analytics could be better. It seems heavily influenced by the McAfee and FireEye integration, and that integration still isn't seamless."
"There is a lot of room for Improvement in the offering, from cost to functionality. It is pretty straightforward to implement which is an advantage. However, it falls short in pricing, detection capabilities, and, most importantly, reporting and policy management."
 

Pricing and Cost Advice

"When you compare it with other solutions, they are cheaper and more economical."
"We get our value for our money."
"It's thirty dollars per user and we have 30 users."
"The best deal from SonicWall is to buy the HA pair. When you buy the initial one, you receive the second one at a significant discount. If there is an event and something happens to one firewall, then you have the second firewall to roll into. For the price, it's pretty to tough to beat and not a lot of other firewall vendors offer it. You battle for a discount on both. Where with SonicWall, if you buy one, the second one is at half price. It's pretty straightforward."
"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."
"Pricing and licensing are reasonable compared to competitors."
"The tool is a bit pricey."
"We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."
"The user fee is not as high but the maintenance fee is expensive."
"It's an expensive solution."
"Its price is a bit high. A small customer cannot buy it. Its licensing is on a yearly basis."
"Because of what the FireEye product does, it has significantly decreased our mean time in being able to identify and detect malicious threats. The company that I work with is a very mature organization, and we have seen the meantime to analysis decrease by at least tenfold."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
893,915 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
17%
Comms Service Provider
15%
Media Company
8%
Financial Services Firm
8%
Financial Services Firm
14%
Comms Service Provider
12%
Manufacturing Company
11%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise8
Large Enterprise19
 

Questions from the Community

What needs improvement with SonicWall Capture Advanced Threat Protection?
SonicWall Capture Advanced Threat Protection needs to reconsider the pricing, especially in the cloud environment. The product is good overall, but the GUI needs to be more stable. I chose nine out...
What is your primary use case for SonicWall Capture Advanced Threat Protection?
My main use case for SonicWall Capture Advanced Threat Protection is that it helps us with sandboxing for analyzing and inspecting unknown files and URLs. A quick specific example of how I've used ...
What advice do you have for others considering SonicWall Capture Advanced Threat Protection?
I advise others looking into using SonicWall Capture Advanced Threat Protection to consider that it is truly helpful and very important to have great sandboxing with advanced threat protection to s...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.
What needs improvement with FireEye Network Security?
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...
 

Also Known As

No data available
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Wonder Cement, Foster Clark Products
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about SonicWall Capture Advanced Threat Protection vs. Trellix Network Detection and Response and other solutions. Updated: April 2026.
893,915 professionals have used our research since 2012.