No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Network Detection and Response Logo

Trellix Network Detection and Response Reviews

Vendor: Trellix
4.2 out of 5
Leave a review

What is Trellix Network Detection and Response?

Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.

Get the Trellix Network Detection and Response Buyer's Guide and find out what your peers are saying about Trellix Network Detection and Response, Microsoft Defender for Endpoint, Darktrace and more!
Trellix Network Detection and Response is the #7 ranked solution in top Network Detection and Response (NDR) solutions and #10 ranked solution in top Advanced Threat Protection (ATP) solutions. PeerSpot users give Trellix Network Detection and Response an average rating of 8.4 out of 10. Trellix Network Detection and Response is most commonly compared to Microsoft Defender for Endpoint: Trellix Network Detection and Response vs Microsoft Defender for Endpoint. Trellix Network Detection and Response is popular among the small business segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a manufacturing company, accounting for 17% of all views.
Buyer's Guide
Trellix Network Detection and Response
May 2026
Get the report
Helped 899,052 peers since 2012

Featured Trellix Network Detection and Response reviews

Read more reviews

Trellix Network Detection and Response mindshare

Product category:
Advanced Threat Protection (ATP)
As of June 2026, the mindshare of Trellix Network Detection and Response in the Advanced Threat Protection (ATP) category stands at 4.1%, up from 4.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response4.1%
Palo Alto Networks WildFire7.3%
Microsoft Defender for Office 3656.5%
Other82.1%
Advanced Threat Protection (ATP)

PeerResearch reports based on Trellix Network Detection and Response reviews

TypeTitleDate
CategoryAdvanced Threat Protection (ATP)Jun 11, 2026Download
ProductReviews, tips, and advice from real usersJun 11, 2026Download
ComparisonTrellix Network Detection and Response vs Palo Alto Networks WildFireJun 11, 2026Download
ComparisonTrellix Network Detection and Response vs Microsoft Defender for Office 365Jun 11, 2026Download
ComparisonTrellix Network Detection and Response vs Proofpoint Email ProtectionJun 11, 2026Download
Suggested products
TitleRatingMindshareRecommending
Microsoft Defender for Endpoint4.15.8%95%213 interviewsAdd to research
Darktrace4.1N/A95%84 interviewsAdd to research
 
 
Key learnings from peers
Last updated Jun 10, 2026

Valuable Features

Trellix Network Detection and Response provides strong network visibility, threat detection, and immediate response capabilities. Its sandboxing technology and MVX engine efficiently detect and respond to zero-day threats. Automation in response, integration with other security tools, behavior analysis, and the ability to handle east-west traffic are highly valued by users. Features like IP blocking, detailed forensic analysis, Yara rules editing, and application filtering offer further threat defense enhancements.
  • "Trellix Network Detection and Response has positively impacted our organization by making our security team more confident and responsible, knowing that the network is being watched all the time, allowing us to respond to threats much faster than we used to."
  • "Trellix Network Detection and Response has positively impacted my organization by creating a better safeguard and protecting us from threats."
  • "After deploying Trellix Network Detection and Response, we saw a noticeable improvement in our security operations, as threat detection and incident times were reduced by 40 to 50 percent, the security team spent significantly less time manually analyzing network traffic, and we were able to identify suspicious activity that previously went unnoticed, leading to faster containment of potential incidents and improved overall response efficiency."

Room for Improvement

Trellix Network Detection and Response needs improvement in several areas. Integration with other vendors' firewalls, AI capabilities, and threat intelligence should be enhanced. Better documentation, dashboard customization, and streamlined cloud-native support are needed. Expedited customer support, improved UI, and reduced alert noise would benefit users. Advanced machine learning, seamless integration with McAfee and FireEye, and improved analytics are also areas requiring attention. Dashboard flexibility and reporting capabilities should be enhanced for better user experience.
  • "To improve Trellix Network Detection and Response, I suggest enhancing reporting customization; the reports can be much better, and I should have the ability to customize them much more freely."
  • "Trellix Network Detection and Response is a powerful tool with areas that need improvement, such as dashboard customization options and reporting flexibility."
  • "I believe Trellix Network Detection and Response can be improved by integrating machine learning into its detection response capabilities."

ROI

Trellix Network Detection and Response provides a substantial return on investment through prevention of breaches and reduction in manual monitoring. It effectively decreases threat investigation time and enhances security, allowing for larger environments to be managed without extra resources. Users report high satisfaction due to cost savings and increased efficiency. Enhanced security posture inspires confidence, although immediate savings may not be evident. Companies have observed ROI increases of up to 200%, attributing this to its automated detections and streamlined threat management.

Pricing

Trellix Network Detection and Response is perceived as slightly expensive by many users, with some highlighting high maintenance and setup costs. Licensing is typically annual and can be costly for smaller organizations. Although the product is considered pricey, many believe it offers value comparable to other market solutions. Some users find its costs justified by its robust capabilities, stating it's competitive in performance despite higher pricing. Saas and cloud options are available to accommodate diverse organizational needs.
  • "The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
  • "The tool is a bit pricey."
  • "When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."

Popular Use Cases

Trellix Network Detection and Response is primarily used for network intrusion detection, threat identification, anomaly detection, and network visibility enhancement. It's integrated with firewalls and other security tools to detect and block malicious traffic. The tool monitors network activity, secures internet links, and assists in forensic analysis. Organizations employ it for endpoint protection, threat intelligence, and to support enterprise security infrastructure, focusing on zero-day threats and advanced persistent threat detection.

Service and Support

Trellix Network Detection and Response customer service and technical support are generally well-regarded, with responsive and knowledgeable assistance available through multiple contact options. Some find technical support restrictive and improvement is needed in high-severity incident response. Issues with looping messages between support and the engineering team are noted. Customer service ratings vary between six to nine out of ten, with disparities in experiences occasionally mentioned. Users appreciate the supportive nature and adherence to service agreements.

Deployment

Trellix Network Detection and Response's initial setup is generally simple, requiring minimal time and support. Most users found the process straightforward, with some handling it independently without needing external assistance. While a majority reported ease, a few faced complexities due to environmental factors. Deployment times varied from minutes to days, depending on organization size and network setup. Integration with existing systems was typically smooth, aided by Trellix services if needed.

Scalability

Trellix Network Detection and Response demonstrates strong scalability, accommodating varied user bases and network requirements. Customers have utilized it effectively across different industries and bandwidths, often requiring only additional licenses or configurations for expansion. While some find it challenging to integrate with legacy systems, many have scaled efficiently without substantial issues, supporting large-scale environments and high user counts. With appropriate planning and deployment, it supports diverse organizational needs and performance requirements consistently.

Stability

Trellix Network Detection and Response demonstrates high stability with a few performance issues. Users note it can crash occasionally, but it's reliable and robust under various conditions, handling temperatures up to 50 degrees. Stability meets organizational requirements, though some report minor problems with memory, CPU, and monthly limitations. It's important to have skilled technicians for deep system maintenance. Frequent updates and responsive support enhance user confidence in its performance.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Network Detection and Response Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business19
Midsize Enterprise8
Large Enterprise19
By reviewers
By visitors reading reviews
Company SizeCount
Small Business180
Midsize Enterprise49
Large Enterprise150
By visitors reading reviews

Top industries

By visitors reading reviews
Manufacturing Company
17%
Financial Services Firm
13%
Comms Service Provider
10%
Government
7%
Outsourcing Company
5%
Computer Software Company
5%
Healthcare Company
4%
Insurance Company
4%
Construction Company
3%
Marketing Services Firm
3%
Educational Organization
3%
Energy/Utilities Company
2%
Performing Arts
2%
Real Estate/Law Firm
2%
Retailer
2%
Legal Firm
2%
Logistics Company
2%
Media Company
2%
Transportation Company
2%
Wholesaler/Distributor
1%
University
1%
Non Profit
1%
Pharma/Biotech Company
1%
Hospitality Company
1%
Aerospace/Defense Firm
1%
Recreational Facilities/Services Company
1%
Non Tech Company
1%

Compare Trellix Network Detection and Response with alternative products

Go!

Learn more about Trellix Network Detection and Response

Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.

What key features does Trellix offer?
  • Zero-Day Attacks Detection: Identifies and mitigates unknown threats.
  • APTs Detection: Detects advanced persistent threats through sophisticated techniques.
  • MVX Engine: Uses virtual machines for behavioral analysis.
  • Sandboxing: Adds a layer of threat protection.
  • Real-Time Response: Offers immediate threat mitigation and context.
  • User-Friendly Dashboard: Enhances visibility with application filtering.
What are the benefits of Trellix Network Detection and Response?
  • Enhanced Usability: Integrates easily with other platforms for seamless operations.
  • Detailed Context: Real-time packet capture provides in-depth threat analysis.
  • Comprehensive Threat Protection: Covers both signature-based and signature-less threats.
  • Improved Visibility: Offers clear dashboard analytics for network monitoring.

Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.

Trellix Network Detection and Response was previously known as FireEye Network Security, FireEye.

Trellix Network Detection and Response customers

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Related questions

  • 71
How much do independent test results affect your security purchases?
  • 48
Holding Security Vendors Accountable
  • 65
What can businesses do to improve their security posture?
  • 58
When evaluating Advanced Threat Protection, what aspect do you think is the most important to look for?
  • 241
What is your recommended cost-effective solution to detect and prevent APT attacks?
  • 144
Compromise Assessment vs Threat Hunting
  • 81
What are the main evaluation criteria for you when choosing the right vendor for brand protection services?
  • 206
Why is ATP (Advanced Threat Protection) important for companies?

Product Categories

Product Categories
Advanced Threat Protection (ATP)
Network Detection and Response (NDR)

Popular Comparisons

Popular Comparisons
Microsoft Defender for Endpoint vs Trellix Network Detection and Response Logo
Microsoft Defender for Endpoint vs Trellix Network Detection and Response
Darktrace vs Trellix Network Detection and Response Logo
Darktrace vs Trellix Network Detection and Response
Microsoft Defender for Office 365 vs Trellix Network Detection and Response Logo
Microsoft Defender for Office 365 vs Trellix Network Detection and Response
Proofpoint Email Protection vs Trellix Network Detection and Response Logo
Proofpoint Email Protection vs Trellix Network Detection and Response
Vectra AI vs Trellix Network Detection and Response Logo
Vectra AI vs Trellix Network Detection and Response
Palo Alto Networks WildFire vs Trellix Network Detection and Response Logo
Palo Alto Networks WildFire vs Trellix Network Detection and Response
Cisco Secure Network Analytics vs Trellix Network Detection and Response Logo
Cisco Secure Network Analytics vs Trellix Network Detection and Response
Anomali vs Trellix Network Detection and Response Logo
Anomali vs Trellix Network Detection and Response
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response Logo
Gigamon Deep Observability Pipeline vs Trellix Network Detection and Response
Palo Alto Networks VM-Series vs Trellix Network Detection and Response Logo
Palo Alto Networks VM-Series vs Trellix Network Detection and Response
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response Logo
Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response
Microsoft Defender for Identity vs Trellix Network Detection and Response Logo
Microsoft Defender for Identity vs Trellix Network Detection and Response
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response Logo
ThreatLocker Zero Trust Platform vs Trellix Network Detection and Response
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response Logo
Microsoft Defender Vulnerability Management vs Trellix Network Detection and Response
Digital Guardian vs Trellix Network Detection and Response Logo
Digital Guardian vs Trellix Network Detection and Response
See all alternatives
 
Trellix Network Detection and Response Reviews Summary
Author infoRatingReview Summary
Network & Security Lead at Net-International5.0I use Trellix NDR for IDS/IPS, boosting network performance by offloading traffic inspection from firewalls. It handles east-west threats and offers excellent ROI. I rated it 10/10 for its performance and efficiency, despite desiring machine learning integration.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees3.5I find Trellix NDR effective for threat detection and reducing alerts, providing good ROI due to its affordability. However, it suffers from excessive alert noise, poor documentation, and inadequate customer support, requiring significant improvements.
Cyber Security Engineer at a retailer with 51-200 employees4.0I use Trellix NDR for strong threat detection, valuing its intelligence and integration for improved security and time savings. While stable, I wish for better reporting, simpler policy management, and faster support, but it's a good mid-budget tool.
Cyber Security Engineer II (Vulnerability & Threat Management) at FICO4.0I value Trellix NDR for strong network visibility and detecting lateral movement, enhancing investigations when correlated with other tools. While setup and UI could improve, it scales well, offers good customer support, and performs faster, aiding compliance.
Presales Manager5.0I highly recommend Trellix NDR (10/10) for its excellent network visibility, threat detection, and compliance benefits. I believe pricing could improve, and more advanced AI/automation for proactive threat handling would make this crucial solution even better.
Security Engineer at Digitaltrack4.0Trellix NDR greatly enhances my organization's security posture and visibility, offering real-time threat detection and significantly faster incident response, reducing manual effort. My only suggestion is improving the UI for new users.
Technical Specialist at VDA Infosolutions Pvt. Ltd.4.5I've used Trellix NDR for three years for real-time threat detection and traffic analysis. It's stable, scalable, accurate, and provides clear alerts, enabling faster threat response. I rate it highly, though I envision future AI-based reporting.
Mentor Operations at eClinicalWorks4.5Trellix NDR vastly improves my organization's threat detection, especially for unknown behaviors, enhancing visibility and accelerating incident response. Setup was easy, support great, but dashboard customization and integrations could improve.