Trellix Active Response is designed for efficient endpoint protection and incident handling, with features like advanced analytics and user behavior monitoring. It allows swift identification of vulnerabilities and supports effective incident management through seamless system commands.
| Product | Mindshare (%) |
|---|---|
| Trellix Active Response | 0.6% |
| CrowdStrike Falcon | 7.7% |
| Microsoft Defender for Endpoint | 6.0% |
| Other | 85.7% |
Trellix Active Response typically offers a transparent pricing model with no setup costs, ensuring a smooth integration process for users. Pricing methods usually involve subscription-based models, accommodating per-user or per-endpoint licensing options. The pricing range varies based on the specific features and level of support required, catering to diverse organizational needs and budgets.
Focused on enabling secure corporate workstations, Trellix Active Response offers quick incident responses, comprehensive threat hunting, and defense visualization. The system prioritizes rapid log collection and correlation via the ePO dashboard, aiming to protect approximately 1,300 endpoints, especially on remote worker desktops and laptops. While it brings robust monitoring and investigation capabilities, the solution seeks improvements in analytics, interface clarity, and memory performance. There is a need for enhanced integration with on-premises deployments and AI functionalities.
What are the key features of Trellix Active Response?In corporate settings, Trellix Active Response is deployed for endpoint security, particularly for remote workstations that require robust protection. Companies transitioning from existing setups to Trellix benefit from its integration capabilities and threat hunting efficiency, supporting better management of active response tasks. Industry users appreciate the visual dashboard for improved threat response.
Trellix Active Response was previously known as McAfee Active Response.
Liquor Control Board of Ontario
| Author info | Rating | Review Summary |
|---|---|---|
| Senior Manager Operational Technology and Cyber Security at Eskom Ltd | 4.0 | We use Trellix Active Response primarily for desktop endpoints, benefiting from its alerts that enhance threat detection and response efficiencies. Improvement is needed for operational technology devices. We see an ROI but didn't evaluate alternatives or use prior solutions. |
| Information Security Engineer at Nhq Distribution Ltd | 4.0 | I've used Trellix Active Response for nine years; it offers strong incident response, quick investigation reporting, and threat visualization, though the dashboard could be clearer. Setup has improved, and I rate it an eight out of ten. |
| IT Security Manager at Telecommunications Services of Trinidad & Tobago Limited (TSTT) | 3.0 | I'm in early stages with Active Response, hoping for automation and remote visibility. Setup was easy, but I found the UI not analytical enough and the price higher than expected. My initial rating is 6/10, and I advise thorough testing. |
| IT Security Manager at Telecommunications Services of Trinidad & Tobago Limited (TSTT) | 3.5 | We find McAfee improved with better analytics and a lighter footprint than older versions. However, it's not truly lightweight, lacks some features, and we're ultimately seeking a more advanced, unified next-gen AV solution with stronger AI. |
| Senior Manager Information Technology at a pharma/biotech company with 10,001+ employees | 3.0 | I find this EDR solution good, stable, and scalable, with straightforward setup. However, I am experiencing support issues and find its high resource consumption, especially memory, a significant concern. |
