Trellix DLP offers comprehensive data protection with advanced management features, ensuring compliance and data security across endpoints and networks. It integrates seamlessly into existing systems with centralized management for effective monitoring, data classification, and incident prevention.
| Product | Mindshare (%) |
|---|---|
| Trellix DLP | 2.5% |
| Microsoft Purview Data Loss Prevention | 5.7% |
| Forcepoint Data Loss Prevention | 4.4% |
| Other | 87.4% |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 2 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 146 |
| Midsize Enterprise | 60 |
| Large Enterprise | 183 |
Trellix DLP provides a robust data loss prevention platform that includes endpoint protection, web and network security, and customizable reporting through its centralized ePolicy Orchestrator. With machine learning capabilities, it enhances data classification and monitoring, ensuring protection across devices, cloud services, and applications. Trellix also supports compliance with security frameworks and integrates with third-party solutions, providing ease of installation via API services. Despite some areas needing improvement, such as support and Mac OS compatibility, Trellix remains a strong choice for organizations prioritizing data protection.
What Are Trellix DLP's Key Features?In industries like manufacturing, Trellix DLP is used for incident monitoring and protection against data leaks, particularly of sensitive personal and financial information. Organizations benefit from its capabilities to block unauthorized uploads and monitor document movements effectively, while also leveraging its third-party integrations and application monitoring features for comprehensive data security measures.
| Author info | Rating | Review Summary |
|---|---|---|
| Senior SAP Basis Consultant at Cloudlink solutions | 3.5 | I use Trellix DLP for SMB security solutions and appreciate its unified console and easy setup, though it falls short compared to Forcepoint. It's stable, scalable, and fairly priced, earning a solid seven out of ten. |
| Senior Technical Engineer at Safezone Secure Solutions Private Limited | 4.0 | We've been distributing Trellix DLP for years due to its effective incident monitoring and evidence storing. It enables data control in apps and integrates well with third-party classifiers. Though improving machine learning is needed, the solution delivers a reasonable ROI. |
| Cyber Security Sales Executive at EVSPL | 4.0 | I use Trellix DLP for robust data protection, preventing leaks with customizable policies and real-time alerts. It has strengthened our security, provided good ROI, and offers solid support, though I'd like more advanced AI anomaly detection. |
| Technical Consultant at Vincacyber | 4.5 | We use Trellix DLP to protect sensitive data like PII across various channels. Its valuable features include data classification and integration capabilities, though improvements are needed in exporting data and console performance. Competitive pricing enhances its appeal in India. |
| Sr. System Engineer at Zensar Technologies | 5.0 | We use Trellix DLP for upload blocking and data protection through screen capture and web protection. However, we face challenges with applying policies on Azure systems. The lack of LDAP integration with Azure complicates our implementation. |
| Senior Cyber Security Specialist Architect at a outsourcing company with 11-50 employees | 4.0 | I implement Trellix DLP to secure data, utilizing the CIA principles for straightforward protection. The UI needs modernization, and regional support could improve. The solution is used by mature companies valuing data loss prevention, and deployment isn't limited to specific providers. |
| Senior Security Engineer at Omerika | 4.0 | I have used Trellix DLP for data loss prevention, appreciating its simplicity and comprehensive coverage across web, email, and endpoints. However, it lacks Mac OS support and sometimes impacts performance. Compared to Proofpoint, Trellix is easier to manage. |
| Senior Technical Support Engineer at Hitachi Systems, Ltd. | 2.5 | I have implemented Trellix DLP for comprehensive data security but noticed it lacks deep drive DLP and quick incident reporting. Its centralized ePolicy Orchestrator is beneficial, but high CPU usage impacts performance compared to competitors like Forcepoint. |
| Assitanat Manager at AavasFinanciersLtd | 4.0 | I use Trellix DLP for securing customer data, but it lacks support for Mozilla Firefox and its multi-architectures. Improvements are needed in SSL inspection and nighttime support response. I previously explored solutions like GTB Technologies and Forcepoint. |
| Technical Support Executive at Safezone Secure Solutions Private Limited | 4.0 | I use Trellix DLP in a Windows environment for its unified console, simplifying system management. While Mac OS support and a cloud-based encryption feature would be improvements, the security return is beneficial. I also considered Teramind for dedicated DLP features. |
I worked in a service industry, partnering with many medium and small SMB customers to help them implement the solution they require, such as security solutions for their endpoints.
We complete installations of Trellix DLP based on customer demand whenever there's a requirement for implementation.
The best thing about Trellix DLP is its unified console that allows us to manage all products from endpoint protection to email protection, DLP, and many more, including SIM.
I have worked with SentinelOne and I will work with Trellix DLP, Sophos, and Broadcom.
If I compare Trellix DLP with other solutions such as Forcepoint, Trellix DLP isn't up to the mark.
There is room for improvement for Trellix DLP to match the quality of other vendors' DLP solutions.
It is stable, and many of my customers are happy with the solution and have a good experience.
I believe Trellix DLP is definitely a scalable solution.
I would rate my experience with the technical support of Trellix DLP around seven to seven and a half.
Positive
I don't have experience working with CrowdStrike tools such as Falcon Cloud Security, Falcon LogScale, or Falcon Sandbox.
I'm not using MDR from SentinelOne.
The initial setup of Trellix DLP is easy since all products can be managed from one console, and enabling DLP features is straightforward if endpoint protection is already installed.
The return on investment with Trellix DLP depends on the customer and their expectations, as we go with their demand and requirement.
The pricing for Trellix DLP is good, and it always wins when compared to other solutions.
I have experience working with SentinelOne XDR, EDR, and XDR.
Trellix DLP also offers EDR, XDR, and DLP solutions.
The platform can be on the cloud, but the end users typically have their own devices installed with DLP on-premises.
On a scale from one to ten, I rate Trellix DLP a seven.
We have been distributing Trellix DLP solutions for around 5 to 6 years because we have our DLP customers. When going for fresh leads, we insist on Trellix DLP solutions if they have a Windows environment. We definitely recommend Trellix DLP because it has many features, and when it comes to on-premises solutions, it has the best incident monitoring and evidence storing capacity. Data evidence is essential. If somebody shares something, we will be able to look at what files they had and what those contents are. This particular feature we highlight to every customer, making it a key selling point for Trellix DLP.
The main use cases would be incident monitoring and incident storing to look through the contents. Registering the documents enables fingerprinting so you can monitor wherever they go, whether they are sent via mail or through a browser. That is one of the benefits. With application monitoring, many solutions have control over data in applications. For example, remote access applications or instant messaging applications have access, but in most solutions, they are predefined, and to add a custom-based application, it takes some time. You need to have a call with tech support to add that application. However, with Trellix DLP, we can directly create a user-based classifier and application channel in the definitions and block the data leakage of sensitive data through that application.
Another part involves custom classifications; we can also integrate third-party classifiers, such as Titus and Mimecast.
We handle data security parts including DLP Encryption, EDR, and external endpoint security, including Trellix Endpoint Security.
The document registration feature enables fingerprinting of documents for monitoring their movement through email or browser. Application monitoring provides control over data in applications, with the ability to directly create user-based classifiers and application channels without requiring technical support intervention.
The solution includes custom classifications and integration capabilities with third-party classifiers. The Machine Learning capability assists with classification capabilities, though there is room for improvement in data discovery accuracy.
The Machine Learning capability could be improved, particularly in data discovery. When given sensitive data expressions, the system retrieves files that are not always related. The system should adhere strictly to the given expression rather than just focusing on keywords within the expression.
In endpoint features, while the detection rate is good, there could be improvements in remediation and rollback solutions during attacks. Other solutions now include such options since providing 100% security is impossible.
The flexibility varies across environments. Enterprise customers find the product performs well without affecting their data, with scans running as scheduled. However, SMB customers experience some performance issues during scanning.
Since EDR is integrated, users must access the EDR console to check endpoint detections. It would be beneficial if this functionality were incorporated within the EPO console, as the current threat graphs link doesn't display endpoint threat graphs.
We have been distributing Trellix DLP solutions for around 5 to 6 years and continue to maintain our DLP customer base.
The solution is stable and does not have glitching issues.
There are no limitations regarding scalability; the solution is sufficiently scalable.
The technical support from Trellix was excellent previously, but since the rebranding, it needs improvement.
When cases are raised, partners perform initial L1 or L2 troubleshooting. However, ticket resolution times are often too long, with new engineers sometimes requesting the same logs repeatedly. This creates challenges, especially for enterprise customers with strict SLAs.
We previously used McAfee but have transitioned everything to Trellix DLP now.
The installation process is quite easy, especially with AD connectors for group policy installations for bulk setups.
Trellix DLP provides return on investment for enterprise customers, with approximately 20% ROI for enterprises.
The solution is currently affordable and not considered expensive.
The solution features both a dashboard and workspace, which is beneficial. The workspace provides updates on endpoints facing escalated attacks, allowing users to monitor endpoint updates and threat attacks. With EDR integration, users can check policy configurations and identify potential loopholes.
The flexibility varies between SMB and enterprise environments. Enterprise customers report minimal impact during scans, while SMB customers may experience some performance issues during scanning.
Previously held certifications have expired, and there have been challenges accessing the partner portal after the transition to Trellix. Access to the partner portal is important as enterprise customers often request certified professionals.
On a scale of 1-10, this solution rates at 8.
I use Trellix DLP for protecting my data from being stolen or from theft. The main use case of DLP is that you can keep your doors and windows open, and it will protect your data. The data will not go anywhere it's not supposed to, according to DLP policies. This is also my customer's use case.
A file was about to be emailed externally and Trellix DLP detected the sensitive data, stopped the transmission, and sent us an alert. It gave us crucial time to intervene and secure the information.
Another scenario was when we had a contractor accidentally trying to upload a confidential project document to a public cloud. Trellix DLP flagged it. Trellix DLP not only blocked the upload, but it also logged the attempt and gave us a detailed report so we could follow up with the person.
In my experience, the best features are the customizable policies, the real-time alerts, and the granular reporting. They give us a lot of control and visibility over sensitive data.
I rely on real-time alerts the most. They help me catch any potential data leaks as they happen so I can respond quickly and prevent any risk before they escalate.
Trellix DLP has really strengthened our security posture. We have seen a sharp decrease in data leaks and it has made compliance audits much smoother. Plus, it has boosted trust with both our customers and our partners, which has been invaluable.
If I could add something, I think it would be even more advanced AI-driven anomaly detection. That way it could proactively spot unusual patterns even before data leak attempts happen.
I have been working in the IT field for almost one year and ten months.
Trellix DLP is good and I have not experienced stability issues.
We have been using Trellix DLP from the very start, and I have not experienced scalability issues.
The customer support has been great. They are very responsive and they have dedicated teams that help us quickly troubleshoot any issues. This has been a big plus.
I previously used Trend Micro DLP and Proofpoint DLP.
For our last audit, we used Trellix DLP to automatically generate all the required reports, which took us just a few hours. Before Trellix DLP, we had to manually compile data from different systems, and it often took days with a much higher risk of errors.
We are a reseller.
We have seen a return on investment. For instance, we have reduced incident response time by about thirty percent and we estimate that we have saved around fifty thousand dollars annually by preventing potential breaches and reducing manual compliance work.
From my experience, the pricing was fairly competitive. The initial setup cost was moderate and the licensing is flexible. We pay per user and there were some volume discounts, so it scaled pretty well as we grew.
I am aware of twenty alternate solutions.
Trellix DLP is a very advanced level of DLP and a stable solution in the market, which serves both the enterprise segment as well as the SMB segment. I would definitely recommend it. If you are looking for a solution that offers strong data protection, customizable policies, and really solid support, Trellix DLP is definitely worth considering. I gave this product a rating of eight.
Customers using Trellix DLP are looking to ensure that their confidential data is not leaked from the organization through multiple data channels such as email, web channels, Cloud channels, clipboard, and printers, particularly focusing on protecting personal data such as PII or HIPAA data, Aadhaar Card, PAN Card, and bank details in India.
We are currently working with both the on-prem and the Cloud version of Trellix DLP.
The most valuable features of Trellix DLP include data classification, the ability to define custom queries, creating custom dashboards based on our needs, and the ability to create tasks to update agents automatically and deploy them from a single management console.
Trellix DLP's advanced reporting and analytical tools help our customers gain insights into data usage and potential vulnerabilities.
Trellix DLP can be integrated with our LDAP Active Directory to get user information based on OU wise, and it also integrates with third-party SIEM solutions.
The endpoint protection features of Trellix DLP are pretty good, offering signature-based detection and real-time scanning that helps identify threats or malicious applications in our system automatically based on predefined rules.
They need to improve the exporting feature in the incident tab because if we have more than 10,000 incidents, we are unable to export that data, and we would benefit from exporting more than 1000 rows and columns.
The pricing of Trellix DLP is negotiable, making it accessible for small companies who can benefit from this cost-optimizing and high-quality product.
During the initial setup of Trellix DLP, we faced challenges where the Trellix console buffers multiple times, taking time to reload when clicking on features, which needs improvement.
I've been working with Trellix DLP for more than 3 years.
Regarding scalability, I believe Trellix DLP adapts well to the growing needs of customers when they expand their infrastructure.
I have communicated with Trellix technical support whenever I face challenges, and they have been supportive.
Positive
During the initial setup of Trellix DLP, we faced challenges where the Trellix console buffers multiple times, taking time to reload when clicking on features, which needs improvement.
The benefits our customers see from using Trellix DLP include cost reduction, given its competitive pricing in India, and its growing popularity, as many organizations are familiar with Trellix after the switch from McAfee.
For the machine learning features in Trellix DLP, it has a live chat where we can ask the AI about any issues on the central management console, and the AI can reply to us.
In comparison to Trellix DLP on-prem, Trellix DLP Cloud has some limitations, particularly in LDAP and Active Directory integration.
Customers prefer the Cloud for time efficiency because going on-prem requires them to create their own server database, while in the Cloud, they can purchase a license and directly use the Cloud tenant.
Customers are primarily using Amazon as their Cloud provider.
Trellix DLP is a very good solution, easy to manage and handle, and newcomers find it user-friendly with an easy-to-use console and dashboard.
I'm happy with this ability to integrate, and we're getting positive feedback from our customers.
Trellix DLP helps fulfill the changing data protection needs of customers by offering predefined classifications, which reduces the time for creating multiple use cases, as it has already defined rules and channels that we can customize and edit.
Trellix DLP's advanced reporting and analytical tools help our customers gain insights into data usage and potential vulnerabilities, and if I find anything while managing the console as a security administrator, I can ask Trellix support to analyze further incidents, which they assist with.
I rate Trellix DLP 9 out of 10.
Use cases consist of upload blocking in our environment. We have configured policies based on classifications. There are different kinds of scenarios where we utilize screen capture, printer protection, and web protection. It depends on the requirements.
Speaking about valuable functionality of Trellix DLP, several features are noteworthy. These features are very useful for protecting company confidential data from being copied to another remote location or other sites.
The valuable features include screen capture, printer protection, web protection, and network protection. We are not using all these features. While we don't use network protection in our environment, we primarily use screen capture and web protection.
The main challenge we face is with our on-premises Trellix DLP implementation. While we can push the agent, we cannot apply the policy on Azure systems. We have escalated this issue to the Trellix team, but they haven't provided a proper solution. For Azure-joined systems, we need to create a different group and different policy to apply to those systems.
We are using local LDAP to identify users. However, Azure does not have LDAP, and we cannot integrate with the on-premises solution.
The installation is easy overall, but deployment on remote machines is more challenging because we cannot deploy the Trellix agent easily. The Trellix agent must be installed on the system before we can push or deploy other products. Once the agent is installed, deployment becomes straightforward. We are deploying Trellix DLP only on premises.
The product is stable without any significant issues.
As an on-premises solution, it is a scalable product without notable limitations.
The support from both the vendor and Trellix is excellent. Customers are satisfied with the quick response times. We receive responses from the Trellix team in a proper and timely manner.
Positive
We are exclusively using Trellix DLP in our environment.
Regarding integration capabilities, cloud integration with the on-premises solution should be implemented. Some cloud API features are not available in the on-premises solution, though they might be present in MVISION.
Currently, there are no AI features or integrations in Trellix DLP.
Regarding pricing, I am not aware of the costs as a different team handles that aspect.
On a scale of 1-10, this solution receives a rating of 10.
Unfortunately, it usually starts with a breach where some data is leaked or taken from the company by an insider or a user. In addition, it is companies that reach the maturity level where they see the value of making use of DLP.
The solution involves implementing the confidentiality, utility, and availability principles. Depending on its location, whether on a server or end-user, if I can use the CIA to find a load, and I can close the door for it, I can secure the data. For someone who understands how information security works, the implementation is straightforward, especially with understanding what policies and fingerprints to use in specific environments where it needs to be implemented.
Over the years, a lot has changed, so it is not that much at the moment. I know they are all working on changing the look and feel, the UI. It is always good to have a more modern look and feel than the old-school square blocks.
Other than that, it's mainly support. Having someone within a region who understands the countries and how they approach data and information security is sometimes where the problem lies. It's not always the product.
Altogether, I have used it for about five years.
On-premise, sometimes the databases didn't always populate the way they were supposed to, or something went wrong and caused a bit of a hiccup. It wasn't bad, as redundancies and things are in place. With the move to cloud provisioning, that is not a big problem anymore due to scalability on Trellix's side.
I would rate the solution seven out of ten based on my last experience within the last six months. It's a bit of a fallback, and I know they are working on improving scalability.
It depends on who I get. If I reach someone within the country who understands the environment, it is usually very good. I would rate it nine. Unfortunately, if I get someone across the language barrier with the cloud, it can be more difficult, but usually, it is good.
Positive
It used to be in the middle, tending towards the high end, especially in South Africa, where we need to convert from dollars to rands, making things very expensive quickly. Still, it's reasonable for what you get.
Different companies have different requirements, and sometimes you need to look at something else as well.
I rate the product an eight out of ten.
I used Trellix DLP for Data Loss Prevention (DLP). I have been working with Trellix in general for approximately ten to 11 years, and specifically with DLP for the last four years.
The most effective aspect of Trellix DLP is that it does what it's supposed to do. It is fairly simple to use compared to Proofpoint. The product covers web, email, and endpoint domains, providing a comprehensive package within one software suite. Trellix products are manageable through a centralized control center, meeting requirements from frameworks like PCI DSS.
Coverage for Mac OS is lacking as features like clipboard and print protection don't function as expected. The agents often affect endpoint performance negatively and do not behave consistently across all machines. Improved compatibility with Mac OS is needed due to ineffective policy applications.
I have been working with Trellix DLP for approximately four years.
Stability-wise, it is mostly fine since everything is cloud-based. However, the agents are the main issue as they can behave inconsistently across different versions of operating systems. The agents are the primary source of instability.
Trellix DLP is very scalable, especially with the cloud version as everything is managed in the cloud. Predefined agents for Windows and Mac OS are provided, allowing for streamlined operations.
The customer service experience was positive, especially with premium support. We received prompt technical support and remote sessions when necessary. However, my earlier experiences with a basic level of support were not as satisfactory. The quality of support can vary based on region and support level.
Positive
I have also used Proofpoint and Netskope. Proofpoint is more complex to set up and requires various configurations for one goal. Trellix is simpler to use.
Setting up DLP is complex due to multiple components involved. However, the cloud version and two variations of the on-prem version were relatively easy to set up without too much trouble.
I have used Microsoft Proofpoint and found it more complex to set up as it requires more configurations.
My advice is to avoid using Mac OS as most security features do not work well with it. Have standardized operating systems and consistent security baselines. I rate Trellix DLP eight out of ten due to its comprehensive features and centralized management capabilities.
Positive
I use the solution in my company for data security, where our primary focus is on our customers' data. The tool is used to store customer information inside the organization.
The negative part of the product stems from the area revolving around certain browsers. The solution does not support Mozilla Firefox. Mozilla Firefox has multiple architectures while Trellix is a product that does not support multiple architectures.
When it comes to the parts where improvements are required in the product, I feel that Trellix needs to verify data through the SSL inspection process.
The support team's response time during the night is an area of concern where improvements are required.
I have been using Trellix DLP for three years. My company has a partnership with Trellix.
It is a very stable solution. Stability-wise, I rate the solution a nine out of ten.
I don't think the product is scalable.
There are around 3,000 to 4,000 users of the tool.
My company caters to the needs of mostly enterprise-sized customers.
The solution's technical support is good. During the night time, I have seen that there are some issues with the support offered by Trellix. I rate the technical support an eight out of ten.
Positive
In the past, I have dealt with the PoC phase of the DLP tool offered by GTB Technologies and Forcepoint. Trellix and Forcepoint offer similar products. I have not worked much with Forcepoint, but I know that it offers products similar to Trellix.
The tool's deployment process is easy, but I think the removal part is quite difficult. For example, if you and I have Trellix products, we will still need a third-party tool to remove the solution for remote users.
I did not face any challenges when implementing the product in my company.
For the tool's deployment part, I configure the server and deploy the product across the organization in a week or about seven to fifteen days.
There are only two people in my company who take care of the deployment and maintenance of the solution.
The tool's features I like the most in terms of data protection revolve around web uploads.
Trellix DLP is a good product that fulfills all the requirements of our company. The product's sub-division parts are good and it has also got quite a lot of things inside the store for users.
I rate the tool an eight out of ten.
The use cases are in Windows-based environment. All the features are available in DLP for that. Now, for Mac and browser-based applications, those controls won't work because I have some policies that wouldn't apply.
The main thing is it all comes in a single console. Emission, endpoint security, everything in one product, one agent. Nothing else like it. It makes system management much easier.
Mac OS support could be better.
In future releases, I would like to see like to see encryption available on the cloud-based version.
I have been using this solution for the past year.
It's been stable, yeah. We have Windows 10 and 11 systems enrolled, and they've been the most stable. With all the policies and configured policies, there haven't been any issues.
Scalability is feasible since it's on-premises. It's easy to scale there.
The customer support and service are good.
Positive
I prefer Teramind as it is a dedicated DLP solution with options and features specifically for DLP. It's designed for that purpose, with user access and everything aligned for that.
The initial setup was a bit difficult at first, but Trellix provided basic policies and models as examples. Once I went through those, it became easier.
We deployed it on a hybrid setup. Encryption is available for the on-premises version, but it isn't supported in the cloud version.
The deployment itself is easy. The integration and deployment process is straightforward. One thing to note is that with Windows 7 and older systems, some functionalities might not work due to their outdated architecture. Additional licenses are needed for those cases.
It's a return on security. For any security product, we're getting security in return.
Overall, I would rate the solution an eight out of ten.
