Trellix ESM users highlight its ease of use, powerful dashboard views, efficient correlation and reporting capabilities. Integration with third-party threat feeds enhances anomaly detection, while advanced correlation and logging bolster security. Customization options like personalized views and alerts, along with a user-friendly interface, make it accessible. Preconfigured rules and threat monitoring streamline operations, and users appreciate its vendor support and automatic threat blocking based on severity. Effective deployment and reduced resource usage are notable advantages.
- "Scalability is quite easier with Trellix ESM, because all we need to do is add more receivers to it, so it can go to any point."
- "The strongest part of Trellix ESM is that we get quite good reports."
- "Trellix ESM utilizes fewer human resources and improves security and visibility."
Trellix ESM users desire enhanced stability, a more intuitive HTML5-based interface, and improved documentation. They find the need for better API development, enhanced integration with SaaS and cloud solutions, and more scalable resource efficiency. Users report performance issues, particularly with dashboards, and seek advanced analytics, AI features, enriched logging, and faster log scanning. McAfee ESM faces criticism regarding its technical support, speed, and outdated storage methodologies, impacting visibility and user experience. Enhanced case management, customizable dashboards, and reduced resource consumption are sought improvements.
- "We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that."
- "It is more difficult to operate Trellix ESM than other solutions."
- "The product is mature and needs little improvement, but we could enhance the customized dashboarding based on use cases."
