Try our new research platform with insights from 80,000+ expert users
Trellix Active Response Logo

Trellix Active Response Reviews

Vendor: Trellix
3.4 out of 5
Start review

What is Trellix Active Response?

Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.

Get the Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Active Response, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
Trellix Active Response is the #47 ranked solution in EDR tools. PeerSpot users give Trellix Active Response an average rating of 6.8 out of 10. Trellix Active Response is most commonly compared to CrowdStrike Falcon: Trellix Active Response vs CrowdStrike Falcon. Trellix Active Response is popular among the large enterprise segment, accounting for 69% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a government, accounting for 17% of all views.
Buyer's Guide
Endpoint Detection and Response (EDR)
January 2025
Get the category report
Helped 852,764 peers since 2012

Featured Trellix Active Response reviews

Read more reviews

Trellix Active Response mindshare

As of May 2025, the mindshare of Trellix Active Response in the Endpoint Detection and Response (EDR) category stands at 0.2%, up from 0.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 
 
Key learnings from peers

Valuable Features

Trellix Active Response receives praise for its real-time monitoring capabilities, efficient threat detection, and robust automated response features. Users appreciate its intuitive dashboard and comprehensive reporting tools. Enhanced endpoint visibility and effective integration with other security tools are highlighted as key strengths.
  • "The alerts provided by Trellix Active Response are its most valuable feature."
  • "The alerts provided by Trellix Active Response are its most valuable feature."
  • "We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response gives us that visibility and lets us automate a number of those events."

Room for Improvement

Trellix Active Response requires improvement in areas such as reducing its heaviness and enhancing white-listing and black-listing capabilities. Users desire centralized components in both cloud and on-premise deployments with improved user behavior analytics and AI features. There are concerns about support quality and EDR-related slowdown issues. The interface could be more analytical. Resource consumption should be lower. There's a need for optimization in operational technology and engineering automation systems similar to normal endpoints.
  • "The only area for improvement is regarding operational technology devices, specifically the engineering automation systems."
  • "I also expected Active Response 's user interface to be much more analytical."
  • "While the product is good, we are currently facing support issues."

ROI

Users highlighted significant improvements in threat detection and response times with Trellix Active Response, noting a measurable drop in incident resolution timeframes. Several users observed enhanced operational efficiency and cost savings attributed to proactive threat management capabilities. They also commended the intuitive interface and robust integration features, emphasizing its impact on streamlining cybersecurity workflows. An increase in the security team's productivity and a more effective allocation of resources were frequently mentioned benefits.

Pricing

Trellix Active Response typically offers a transparent pricing model with no setup costs, ensuring a smooth integration process for users. Pricing methods usually involve subscription-based models, accommodating per-user or per-endpoint licensing options. The pricing range varies based on the specific features and level of support required, catering to diverse organizational needs and budgets.

  • "Our costs were somewhere around $600K in Trinidad dollars, which might be about $100K US. We have the ETP plus the EDR. Our recent renewal was 1800 licenses as opposed to the full amount. Our transaction cost was about $600K Trinidad dollars, which is somewhere around $90-100K US."

Popular Use Cases

Organizations utilize Trellix Active Response chiefly for endpoint protection on corporate laptops and desktops. This replaces existing McAfee on-prem solutions, focusing on workstations rather than servers. Trellix monitors tools used by employees during daily tasks, ensuring security for remote workers and enabling coverage of approximately 1,300 endpoints once fully deployed. Its application is geared predominantly toward safeguarding remote operations and facilitating a secure digital environment in professional settings.

Service and Support

Users report satisfaction with Trellix Active Response's customer support. Technical support is considered reliable and issues are resolved without problems, though interactions have reduced since the pandemic. Users work with partners and McAfee, finding assistance satisfactory but noting some delays. Previous experiences suggest room for improvement. Technical support receives a score of seven out of ten, indicating users see potential for enhanced service. Relationships with partners remain stable despite the current global situation.

Deployment

Trellix Active Response's initial setup was facilitated by on-site engineers, using global policies and training for a smooth process. Challenges involved outdated versions needing manual updates. Deployment occurred in phases, initially covering a sample of one hundred, then expanding organization-wide over two weeks. Dedicated staff manage operations and governance. Another team managed the setup with Microsoft SCCM. Rated between eight and nine in ease, the deployment took three to six months, including user acceptance tests.

Scalability

Users mention Trellix Active Response as highly effective in handling large volumes of data with seamless integration. They appreciate its ability to easily scale for growing business requirements, noting strong performance and reliability. Some also highlight quick setup and straightforward deployment, making it a valuable tool for extensive security frameworks.

Stability

Users feel Trellix Active Response provides reliable performance and remains stable even under heavy use. They appreciate its consistent uptime and note that it rarely crashes. Some find it performs well in complex environments, handling large datasets efficiently. However, a few mention occasional delays during peak usage. The general sentiment emphasizes its robustness and dependability in various operational contexts.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Government
17%
Financial Services Firm
14%
Comms Service Provider
11%
University
9%
Aerospace/Defense Firm
8%
Media Company
5%
Energy/Utilities Company
5%
Real Estate/Law Firm
5%
Logistics Company
3%
Non Profit
3%
Outsourcing Company
3%
Construction Company
3%
Educational Organization
3%
Pharma/Biotech Company
2%
Wholesaler/Distributor
2%
Recreational Facilities/Services Company
2%
Manufacturing Company
2%
Import And Exporter
2%
Computer Software Company
2%
Transportation Company
2%

Compare Trellix Active Response with alternative products

Go!

Learn more about Trellix Active Response

Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.

Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.

Trellix Active Response was previously known as McAfee Active Response.

Trellix Active Response customers

Liquor Control Board of Ontario

Related questions

  • 1,381
What is the biggest difference between EPP and EDR products?
  • 422
What is the difference between EDR and traditional antivirus?
  • 45
What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
  • 20
Which is the best EDR for a logistics company with 500-1000 employees?
  • 68
What is the best EDR or XDR product for a company with 9000 employees?
  • 107
What to choose: an endpoint antivirus, an EDR solution or both?
  • 415
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 158
How does EternalBlue work?
  • 234
What are the best on-premise Endpoint Security solutions for a Tech Services company with 10,000 employees?
  • 116
Which is better for Endpoint Security: EDR or XDR solutions?

Product Categories

Product Categories
Endpoint Detection and Response (EDR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Trellix Active Response Logo
CrowdStrike Falcon vs Trellix Active Response
Microsoft Defender for Endpoint vs Trellix Active Response Logo
Microsoft Defender for Endpoint vs Trellix Active Response
Trellix Endpoint Security (ENS) vs Trellix Active Response Logo
Trellix Endpoint Security (ENS) vs Trellix Active Response
Trellix Endpoint Detection and Response (EDR) vs Trellix Active Response Logo
Trellix Endpoint Detection and Response (EDR) vs Trellix Active Response
See all alternatives
 

Trellix Active Response reviews

Sort by:
ED
Senior Manager Operational Technology and Cyber Security at Eskom Ltd
Verified user of Trellix Active Response
Feb 24, 2025
Operational efficiencies increase with immediate threat alerts for endpoints

Pros

"The alerts provided by Trellix Active Response are its most valuable feature."

Cons

"The only area for improvement is regarding operational technology devices, specifically the engineering automation systems. "

What is our primary use case?

We use Trellix Active Response primarily for our endpoints, including desktop computers. It monitors all the tools that our users use for their day-to-day work.

What is most valuable?

The alerts provided by Trellix Active Response are its most valuable feature. They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly. These alerts have been beneficial in terms of operational efficiencies, enhancing our ability to detect and respond to potential threats.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (477 words)
LW
IT Security Manager at Telecommunications Services of Trinidad & Tobago Limited (TSTT)
Verified user of Trellix Active Response
Feb 26, 2021
Lighter with good stability and pretty good technical support

Pros

"It's a little lighter compared to the older version, which was mostly signature-based."

Cons

"There are some components on the cloud that should also reside in the on-prem deployment models but don't."

What is our primary use case?

We use McAfee for our corporate-issued laptops and desktops. We use a different product on the servers, however, our use case is mostly for workstations and laptops.

What is most valuable?

With the ADR parts of it or the Active Response parts of it, we're able to get a little more information compared to the older version. Such as analytics, user behavior analytics, triaging and meaningful reporting. 

It's a little lighter compared to the older version, which was mostly signature-based. It was very CPU intensive. Users used to complain about when the scan is running, that they couldn't do any work. That was one of the reasons which prompted us to upgrade, even though our intention was mostly to go to either Carbon Black or CrowdStrike.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (1585 words)
Buyer's Guide
Endpoint Detection and Response (EDR)
Download free report
Find out what your peers are saying about Endpoint Detection and Response (EDR). Updated January 2025
852,764 professionals have used our research since 2012.
LW
IT Security Manager at Telecommunications Services of Trinidad & Tobago Limited (TSTT)
Verified user of Trellix Active Response
Apr 17, 2022
It gives us visibility of remote workers and allows us to automate a number of events

Pros

"We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response gives us that visibility and lets us automate a number of those events. "

Cons

"I also expected Active Response 's user interface to be much more analytical. "

What is our primary use case?

Active Response provides endpoint protection for remote workers. It covers primarily laptops and desktops, not servers. Active Response  is replacing our existing on-prem McAfee solution, and it will protect about 1,300 endpoints when fully deployed. We haven't brought in everybody. Right now, we have a parallel implementation of the old system.

How has it helped my organization?

We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response  gives us that visibility and lets us automate a number of those events.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (450 words)
PeerSpot user
Senior Manager Information Technology at a pharma/biotech company with 10,001+ employees
Verified user of Trellix Active Response
Jun 8, 2021
Provides good security, but technical support should be improved and resource consumption lowered

Pros

"The solution is scalable. "

Cons

"While the product is good, we are currently facing support issues."

What is our primary use case?

We make use of the latest version.

What is most valuable?

I don't consider any one specific feature to be the most valuable, but I look at the advantages inherent in EDR holistically. 

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (212 words)