TrendAI Deep Security Reviews

I use the solution in my company to reduce SMB attacks on the data center site and ensure data center protection from flooding and threats.

For server security purposes, I like the product's firewall. The firewall has three features we use in our company, of which one controls flooding, the other blocks unwanted ports, and the third allows us to control traffic via Deep Security if the firewall port is open from the switch or router side.

In our company's infrastructure, we have not faced any challenges with the product. Considering the lack of issues or challenges faced with the use of the product in our company's environment, I feel that it is a good solution.

Sometimes, the product is not very stable, but it is something that depends on the infrastructure in which the tool is used. The aforementioned area can be considered for improvement.

If Trend Micro Deep Security wants to implement some new features in it, then I would say that it should focus from a networking point of view and see how to control network traffic specifically coming from external to internal traffic on the servers.

I have been using Trend Micro Deep Security for two years. My company operates as a system integrator for Trend Micro.

If I consider my company's infrastructure, everything is good with the product because we have enabled the threat protection systems to control our environment, so we don't see any suspicious activities.

I rate the solution's stability as ten out of ten.

Scalability-wise, it is a good tool, and I rate the solution as nine out of ten.

When it comes to technical support, I would say that none of the products are bad, and all the tools are usually good. There are a few areas where certain modifications or changes are required, and it is something that varies from client to client. In my opinion, all products, including Symantec and Trend Micro, are good. Based on the infrastructure of users and what they want to implement, there are a few things that Trend Micro should understand. I rate the technical support an eight out of ten.

I work with Trend Micro Endpoint Security with Apex One. I also use Symantec.

If I consider my company's infrastructure, everything is good with the product because we have enabled the threat protection systems to control our environment, so we don't see any suspicious activities.

I rate the solution's stability as ten out of ten.

The solution is deployed on the cloud.

Symantec and Trend Micro Deep Security are good products, and I don't have any issues with either of the solutions, specifically from a technical perspective.

The costs associated with both the products are taken care of by the sales department or management in our company. Symantec and Trend Micro Deep Security have features that are almost 80 to 90 percent similar. The only area where Symantec needs to improve is related to the remote capabilities it offers.

The product's intrusion prevention system works fine, but we have not implemented any other policies in our company. In our company, we use the default policy in our environment to deal with and prevent intrusions, so we have not customized any policies associated with the intrusion prevention system. With the default policies in place, whenever there is some traffic coming in, the tool will automatically detect, allow, or take action based on the signatures.

I have learned many things while using the product, including the fact that it is very important for a company to decide what they want before purchasing a solution.

I rate the tool a nine out of ten.

The virtual patching features of Trend Micro Deep Security are very good. If you're running an unpatched server and you need to do n-1 patching, you need to wait for a month for the patch to be rolled out. That one month is a long time for an attacker to do an attack. Virtual patching is a wonderful feature where we do a recommendation scan and an internal assessment on the server, and it updates the IPS signatures to block any attack. I have seen instances where it has prevented attacks on the end-of-support servers such as 2018 R2, and many years ago, even 2007 servers that were end-of-support. It certainly helped there.

Another big advantage of Trend Micro at the time was that it supported Linux. Nowadays, most of the vendors seem to be supporting the Linux operating system, but Trend Micro was the initial organization that started supporting Linux and anti-malware solutions. It only had the anti-malware solution. It didn't do file integrity monitoring or other things.

Trend Micro Deep Security is easy to use and deploy.

I've not worked with CrowdStrike Falcon, but one of our customers also had CrowdStrike Falcon on some of the devices. I was only supporting Trend Micro. They had a ransomware attack, but Trend Micro didn't detect that particular ransomware attack, whereas CrowdStrike did. I was not a big fan of CrowdStrike till then, but when I saw that Trend Micro couldn't detect that particular attack but CrowdStrike could, my opinion changed. All the servers with Trend Micro were impacted, but all the devices on which CrowdStrike agents were running weren't impacted. CrowdStrike detected and blocked the attack immediately. From that perspective, I have high regard for CrowdStrike because the role of an EDR is to detect and respond immediately and block an attack. Containment is the first priority. Trend Micro can give numerous ifs and buts about why it couldn't detect that attack, and even though I'm a fan of Trend Micro and have extensive experience with Trend Micro Deep Security and Trend Micro Apex One, in that particular instance, CrowdStrike literally beat Trend Micro.

A disadvantage of Trend Micro as compared to CrowdStrike is that it doesn't work well with other solutions. If you have McAfee for anti-malware and IPS and the firewall of Trend Micro, they don't go very well. I had challenges deploying it with Carbon Black as well as McAfee and Symantec. It's because of the way Trend Micro works. It integrates with the NIC driver, so if two agents are running, it doesn't work well because they both want to integrate with the NIC driver.

It's easy to deploy. I've deployed it for more than 12,000 devices, which includes endpoints and servers. It's easy to deploy and easy to manage. You can do it automatically through the script. The ease of implementation and ease of management are there, but there are a few challenges. Linux compatibility has some issues because it's a kernel-based rollout. Especially with CentOS, I face challenges. CentOS is now Red Hat, so if we are running CentOS, we have to deploy Red Hat agents and not CentOS agents. It's not that easy to manage on Linux. If it's a stable, standard Linux version, it works, but with beta versions, there are some challenges.

CrowdStrike had an advantage over Trend Micro when it came to pricing. Trend Micro had several modules, so it was a little priced up, but CrowdStrike was not. However, even CrowdStrike has increased their price now, so probably both of them are on par, but the number of modules that Trend Micro has is far more than CrowdStrike. It comes with file integrity monitoring, application control, and web reputation. It has outbound URL protection, and it also has ransomware protection for servers, whereas CrowdStrike Falcon is a straightforward solution. It isn't an apple-to-apple comparison. It's a big apple versus small apple kind of comparison.

My general advice to everyone is to first define your must-haves. What is it that you are looking for in a product? Nowadays, there are so many products with overlapping features, so you need to first decide what it is you are looking for. From a feature perspective, you should define must-haves and nice-to-have. 

You also need to test it out if you are running multiple products on the same server. You need to test it out on the utilization side because there is a huge utilization hit if you are running multiple agents on the same server. You need to work it out because Trend Micro, CrowdStrike, or any other agent would require a good amount of memory. There should be dedicated memory for them. If there is a 16-gig memory, at least 2-gig memory should be dedicated to them. There should be 2 gigs for it to just work and 8 gigs for the OS, so we are talking about a minimum of 10 gigs. If your servers are running on low memory, there'll be a huge utilization hit on the servers. Therefore, you need to choose the right agent. If you are running multiple agents, then you probably need to do a capacity evaluation before purchasing any of the tools. There are trial versions available, and PoCs are also available, so you can certainly check on it and see the utilization. Do proper homework before purchasing the tool. The tool is good, and it will perfectly work fine, but it also depends on the implementation.

At this time, I'd rate it an eight out of ten because of the challenge that I faced when I was dependent on this, but it couldn't protect the server. However, by now, Trend Micro would have fixed the problem that I faced a year ago. I know their Singapore EDR team. I worked with them, and they are quick in terms of fixing any bugs or issues. They would've definitely looked into it, but that was one instance for me where CrowdStrike outperformed Trend Micro.

In our company, all critical systems are connected to a Security Operation Center (SOC), and we use Trend Micro Deep Security on these servers. Our company is in the manufacturing industry, dealing with metals and mining processes, and many of our solutions are hosted on public IP and accessed from outside organizations' networks. Installing Trend Micro Deep Security helps us prevent ransomware attacks and other unauthorized access attempts. Since we are connected to SOC, we receive detailed information on any attempts to penetrate our systems from outside, apart from just letting us know if there are any vulnerabilities or not. Additionally, Trend Micro Deep Security provides features like sandboxing. However, we have not been able to utilize these features fully.

Since I wanted to know the additional features that Trend Micro Deep Security offers beyond what we currently use in our solution, I was trying to find a comparison between Trend Micro Deep Security and Trend Micro Apex One.

Virtualization and sandboxing are the two features available in the solution. I learned about these two features from our service provider, through whom we secured the license required for the solution. So, our service provider is a reseller and not directly related to Trend Micro. Also, I am yet to go through the technical documents of the solution since I couldn't find much information about the solution online.

Regarding the deployment process, we first conducted a study to identify potential vulnerabilities and cybersecurity requirements for the business. Once we clearly understood these objectives, we began exploring solutions that could meet them. We then evaluated options such as a Security Operations Center (SOC) and Trend Micro Deep Security as part of this process.

I haven't received any distribution emails from the Trend Micro team regarding recent vulnerabilities and their efforts to mitigate them. It would be helpful if they could send emails notifying their users about the recommended upgraded versions to address the newly discovered vulnerabilities. This is an area that could be improved from more of a marketing perspective than a technical aspect.

In our company, we have been using Trend Micro Deep Security for at least two years now. Presently, we are using the latest version. So, we keep updating the solution. We provide the solution to the servers on a public IP.

It is a stable solution.

It is a scalable solution. Considering the different price ranges available, one needs to buy a device. It needs device-based licensing. For instance, if 50 more devices in our organization require Trend Micro Deep Security, then I have to purchase 50 more licenses. So, scalability is not a challenge in the solution. Also, we have around 100 people in our organization using the solution.

The solution is being used very extensively in our organization. In the company where I work, we have only a single solution for all of our servers. That single solution is Trend Micro Deep Security. Also, we have been using Trend Micro Apex One for the past two or three years.

I need to check with my team to know whether we ever interacted with the solution's technical support team.

The solution's initial setup was straightforward. It's not kind of a cumbersome one.

The deployment process did not take more than two months post-order placement for the solution. So, Trend Micro Deep Security and SOC are two separate parts. For SOC's deployment, we took around six to nine months. Trend Micro Deep Security is a type of endpoint security solution which, post procurement, takes around four to six weeks to configure.

Regarding the solution's deployment model, the managing, monitoring and diagnostics part of the solution is on the cloud, while all of our clients have chosen an on-premises deployment model. Basically, the clients are installed on physical devices.

Previously we had support for a deployment and maintenance procedure from the service provider. Currently, the solution is managed by our team as it is deployed on-premises.

We need to make yearly payments for the solution's licensing. There are different pricing models, like subscription-based and perpetual. Our company has chosen perpetual pricing. So for us, multiple reassignments are possible. If I choose one license and assign it to one device, I can later remove it from that device and assign it to a different one. Given the requirements that our company has, the solution is not too expensive.

According to our process, our organization usually explores three solutions by making a detailed technical comparison. After that, based on the business requirements, pricing and technical ratings that our experts provide, we go ahead with one of them. I do not know which two solutions were compared with Trend Micro Deep Security.

Currently, my organization relies on Trend Micro Deep Security to meet its business needs in the cybersecurity space. It is important to stay vigilant and explore all possible cybersecurity interventions. Despite having access to many of the solution's features, my organization has not yet deployed them all. As our organization and its systems and solutions continue to grow, in our organization, we want to enable all of the solution's potential, which can provide us with security. Therefore, I was seeking to compare the additional features available within the solution to identify any that could provide significant security benefits to my organization.

I would definitely recommend the solution to those planning to use it. Overall, I rate the solution between eight to nine out of ten.

I use the solution to provide general security for my enterprise clients, primarily for servers. Deployments include cloud and on-prem. 

I've been deploying Trend Micro for my clients for a long time, which has been a significant factor in our security posture.

The solution's endpoint protection is the most valuable feature. 

The email relays and proxies could be improved. 

I've been using the solution for around 16 years.

The stability is very good. In my experience, everyone is in the same boat because every product has faults or challenges.

The product is scalable; I rate it eight out of ten for scalability. 

Technically speaking, the customer support is okay, but the responsiveness needs to be improved. I'm referring to the universal support, as the Israeli staff are excellent and always willing to help. However, opening a case and entering into a back-and-forth with emails takes too much time. It should be working more quickly and smoothly.

Neutral

The deployment is straightforward; I rate it nine out of ten for ease of setup. The time the solution takes to set up depends upon the deployment's scale and complexity, as well as the use case.

Trend Micro Deep Security is average compared to other products on the market; it's neither particularly expensive nor cheap.

I rate the solution nine out of ten; it's in the top three or top five products of its type. 

My advice to others considering the solution is that two major considerations when looking for a product are stability and vendor company experience. Trend has been around for ages and has a good reputation; this and the stability work in their favor.

We were using Trend Micro Deep Security for the sole purpose of virtual cloud management. It was the best VPM solution in the market, and other sites recognize the quality, such as the Gartner website.

The VPM is the most prized characteristic of Trend Micro Deep Security, which in addition addresses all zero-day vulnerabilities. This allows us to confidently transfer our system physically, as it presents to the external world, whether it be an intruder or a hacker, that our system is completely secure without any weak spots. Even if the latest security patches have not been installed or updated, the software virtually covers them for you.

There is room for improvement with Trend Micro Deep Security, as there are instances where installations may need to be redone. There seem to be glitches when working with older Windows servers, such as those from 2003 or 2005, requiring us to uninstall and reinstall the product to resolve the issue.

I have been using Trend Micro Deep Security for approximately two years.

The stability of Trend Micro Deep Security is highly reliable. The updates are done quickly.

Trend Micro Deep Security is highly scalable but requires licenses to be purchased for each endpoint that is configured. This may result in additional costs. However, it is compatible with a wide range of operating systems, including AIX, Linux, Windows Server, and Windows desktop operating systems.

We had two people managing Trend Micro Deep Security in my organization.

Most of the time, the support provided by Trend Micro Deep Security was limited to sending us troubleshooting steps that were already available on their public sites, indicating a need for improvement in this area. However, their response time was very quick, with a reply to my ticket within minutes, depending on the level of escalation. Overall, they were quite supportive.

The initial setup of Trend Micro Deep Security was easy. The setup process is GUI-based and straightforward. With just a few clicks, it can be installed on a virtual machine, and network access is then required. After installation, users can access the web application interface and proceed from there.

The deployment took approximately 10 to fifteen days if I exclude the network accesses.

If you want to scale the solution you will have to adjust the license.

If you manage a large IT infrastructure with hundreds of servers, it is not feasible to address them all at once, making Trend Micro Deep Security an excellent choice for first-time users. I highly recommend this solution to enterprise-level or large organizations that are hosting numerous servers. It is extremely helpful and saves a lot of time. 

It is one of the best vulnerability management systems available on the market, providing fast management solutions.

I rate Trend Micro Deep Security for approximately a nine out of ten.

Our company uses Trend Micro for anti-malware support on servers and user PCs. Its normal anti-virus, file integrity monitoring, and threat prevention modules are also active in our systems.

The overall vision and execution of the vendor are really good. The solution has a low footprint and does not have a lot of impact on the host. The reporting mechanism is also good, and at any given point in time, we can see how many endpoints are compliant. The product support is also good.

The solution should focus on the EDR part and probably have an integrated data leak prevention module as well.

In future releases, the solution should provide one agent who takes care of EDR, end-point security, DLP, and application control.

I have been using Trend Micro Deep Security for more than five years.

It is a stable solution. I would rate its stability a ten out of ten.

The solution is scalable. I would rate its scalability a ten out of ten. Currently, the solution is being used by around 4,000 users in our organization.

The customer service and support team is good.

Positive

The initial setup is straightforward and only a matter of a couple of clicks. Once you have a design in place, deployment is not a challenge. In terms of time– one part goes into solution deployment and the other into solution adaptation. Solution deployment does not take much time; solution adaptation does.

The solution was deployed by consultants. I think one professional from the system integrator or the OEM and one in-house resource are enough for this deployment.

Moreover, it is just like any other IT solution in terms of maintenance. Since it is installed on a server host, whatever general maintenance is required for that host is what’s needed—just general IT maintenance. We have an in-house team of IT and security engineers who take care of the maintenance.

Just like in any other IT solution. General IT maintenance, we have an in-house team of IT and security engineers who take care of the maintenance.

Before deploying a solution, new users must refer to market research. For companies like ours, we select top-of-the-line products. Although this is the best product suiting our requirements, the decision should be based on individual evaluation.

Overall, I rate the solution an eight out of ten.

We use Trend Micro Deep Security for servers and not for endpoints. So when it comes to the server, the key feature or reason why we went for Deep Security is because of its virtual patching. Usually, the server owners don't tend to keep their servers updated with the latest Microsoft patches. Trend Micro Deep Security provides a layer of security and virtual patching. So even if the server is not patched manually, it ensures that it is protected through this virtual VM.

Virtual patching is one feature I found to be the most valuable in the solution.

In the solution, servers often go offline for various reasons, requiring us to manually check the cause or issue, such as connectivity issues, and to find out why the agent went offline. The aforementioned details are to be considered for improvement in the solution.

I would like the solution to improve its stability and ability to go online and offline.

I have experience with Trend Micro Deep Security for four years. Also, I am using the solution's latest version.

Stability-wise, I rate the solution an eight out of ten. No solution is fully secured or always up to the mark. All solutions have pros and cons.

It is a scalable solution. If required, we can scale it more. That's not an issue. Three engineers in my company use the solution.

Our company has contacted the technical support of the solution, and they were good.

The solution's initial setup process was straightforward. For deployment, we have more than a thousand servers. So, it took a month to roll out. One of the steps in the deployment process is leading the team involved in the technical part. We are deploying using Microsoft SAP. So through that, we push the agents to all the servers, and sometimes it requires a restart in some of the agent updates, and sometimes it doesn't require a restart. So, coordination is required during deployment.

For deployment and maintenance, four to five engineers are required.

Our company usually opts for vendor support and principal vendors also.

I would recommend the solution to those planning to use it. Overall, I rate the solution an eight out of ten.

Agentless protection is very good for certain use cases.

The agentless protection is very nice in Trend Micro.

The implementation is hard to deploy, and it should be easier. There is room for improvement here. 

The implementation can be inflexible and not easy, as it requires knowledge of things like virtualization and administration on Windows.

I have been using Trend Micro Deep Security for two years. 

It is a stable solution. There is always room for stability.

I would rate the scalability a nine out of ten. 

The customer service and support team is good. 

I have also used Kaspersky and VMware. 

The deployment process was long. It took about two months for the last implementation I did.

A few teams are involved in the deployment and maintenance process, such as the team that changes the tools, the team that handles the solution, and the team that handles devices.

The license cost is based on the socket of the server's host and the number of hosts that will be integrated. I wouldn't give it a perfect ten because the license situation can be improved.

I would recommend it. It's a good antivirus solution and helps to secure the system and investments.

Overall, I would rate the solution a nine out of ten. 

We primarily use the solution for security and analysis. We provide the solution to our customers who want to protect endpoint security, and this offers a level of protection for endpoints. For customers using the solution for development and in the production environment, it can be used on the server.

It has application control, log integration, and monitoring. Everything there is in Deep Security. They can look at the product to see how it is working and what its usage is. 

The solution offers many good features, including application control, IPS engines, logging, anti-malware, and integrated monitoring. The IPS is the best.

It offers a good level of protection. 

It is easy to setup.

The solution is stable.

It can scale well.

Technical support is very good. 

We're using the manager and cloud security. The cloud security does have different features available.

If they continue to offer better protection, we can do a better job of offering protection at the first level.

Sometimes the patching is a bit slow.

We need to have them do a better job of protecting the servers. 

There needs to be a bit of maintenance time before running the solution on production.

The pricing could always be better. Some clients would appreciate it if the pricing was reduced. 

I've been using the solution for four years. 

The solution is stable. However, we have to do some workarounds. We need to keep monitoring to ensure it is stable. We need to keep up with everything and how it will work together in order to ensure security. We don't want to affect the applications before placing them in production mode, so we need to provide all of the requirements and policies before going live. 

The scalability depends on the customer. It can scale by storage or endpoints. There's no problem with extending it.

We have various clients on the solution. Some clients have different departments. We've had 60 to 70 customers on the solution, and we provide the solution to them according to their needs. 

Technical support is very helpful and responsive. They work based on priorities. If it is more critical, they move the ticket up. We get answers within a day or two depending on the severity. 

We find the solution very easy to set up, even for enterprises. We can set it up on primary and secondary servers.

Based on the requirements of the customer, we'll deploy the solution to match their needs.

We can install and implement the solution within one to two hours. It can be set up in 20 minutes; however, testing the use cases takes one to two hours on top of that. 

We always recommend a check of the servers before beginning. Whether it is Windows or Linux, we make sure we implement the latest security measures. 

We give the clients a checklist and go through everything once we begin the installation. Then we deal with the dependencies and the connectivity. 

I'm able to assist clients with the implementation.

Licensing depends on the requirements. You can extend the license and grow it if you need to.

The solution isn't overly expensive. However, it can vary from quarter to quarter. 

I'm on the technical team, so I can't speak to the exact cost. 

I'm an implementor. We provide the endpoint and server security.

I'd recommend the solution to other users. 

I would rate the product nine out of ten. 

It is mainly an antivirus product for both desktops as well as servers. It has additional modules which can be enabled in fast manner. It uses the same agent and additional modules like FIM, Filing Integrity Management and ELP services. 

The product is easy to implement and easy to integrate with additional advanced services.

It's scalable.

It has been mostly quite stable. 

Technical support in Europe is good.

They are working to improve the solution. For example, nowadays, they're offering cloud based EDR which addresses a lot of this scalability challenges like storage requirements, et cetera. We'd like to see extended capacity in the on-premises versions. 

They recently put out some more additions which I have yet to explore. They've already addressed a lot of previous concerns. 

We'd like the cloud model to have better pricing. 

I've used the solution for more than four years. 

It is very stable. That said, there are certain agent problems. Once in a while we see certain agents get corrupted, so we clean up the agent and we need to install the agents again. However, that is rare. 

It is scalable within some limitations of compromise. For example, since its an on-premise, there will be servers limitations. If you need to scale to large areas, then you need additional hosting solutions to extend the capacity. Otherwise, it's a good tool for scalability.

Within Europe the technical support services are very good. I have not worked in other regions, however, within Europe the support was fantastic. They respond very fast.

We deployed the solution to about 3,000 servers. We had is implemented in lesss than three months. 

The pricing on the cloud model could be better. It's a bit high.

It is very stable product and it's easy to deploy and easy to maintain. It is recommended as a product.

I'd rate the solution ten out of ten.