Cyber security consultant at a tech vendor with 10,001+ employees
Real User
Top 20
Aug 15, 2025
There is a question regarding suggestions for additional tools or functions for McAfee ePolicy Orchestrator, and whether the functionality part is completely satisfactory.
Some drawbacks include difficulty in supporting improvements because we don't get proper response from Trellix support, so there is a need to improve the support.In using McAfee ePolicy Orchestrator as an on-premise solution, we face challenges such as login issues and stopped services, where Trellix does not provide prompt responses. They request time for logs for analysis, and after about 10 to 11 days, this ticket was finally closed.
We would like to see more integration with different platforms and extend this to other platforms. We are migrating to the cloud and want to extend it from our on-premises setup to the cloud.
The product is more expensive than other competitor tools. It would be highly beneficial if the metrics or dashboards could be customized in a future version of the product. The product could also be easier to integrate and operate.
Lead Engineer at a tech services company with 10,001+ employees
Real User
Top 5
Jan 30, 2024
There are challenges regarding the compatibility and agent functionality of the product. The aforementioned area can be considered for improvement. The setup and deployment phases need to be improved. The issues with the integration capabilities of the product, specifically the ones that are deployed on an on-premises model, need to be improved.
Learn what your peers think about McAfee ePolicy Orchestrator. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
The areas of concern where improvements are needed are related to the product's assignment policy and tag assignment, where users can assign the policies with the help of tags and sort out the systems.
There's one room for improvement. We need to consolidate multiple features into one console. It would be beneficial to have all the important features on a single platform. Instead of using separate agents for tasks like antivirus and demos, it would be better to have a unified agent that can handle everything. I would like a unified agent that can handle multiple tasks. Another useful feature would be an email solution. It could be helpful. Also, having the capability to check for data vulnerabilities would be a great addition. In the future release, I would like to have a feature that checks for vulnerabilities
Technical Engineer at a tech services company with 1,001-5,000 employees
Real User
Apr 10, 2023
McAfee ePolicy Orchestrator needs to upgrade the technology; it's like their area function is not quite as good as compared to other market vendors. So they have to work on it.
The way that ePolicy launches the updates is very slow. It would be great if that was faster. They need to enhance their vulnerability scanner so we can be more secure. The most tedious part of the product is when you block USBs. To make an exception for a user means you have to deal with a very difficult user interface. It would be better if they fixed that so only the administrator could click it somewhere and give permission. Right now, the user has to send a keyword, then the administrator has to use that keyword to make the exception for the user. It's very complicated for the user to do. They don't know how to do that. They could use some cell phone MDM to control the cell phones and the tablets and stuff. They don't have that. They need better integration with MDM devices.
The solution is difficult to tune to avoid false positives. The product could use a better upgrade path for customers, as there is no clear way for them to update to newer versions.
Cyber Security Consultant at a computer software company with 51-200 employees
Real User
May 18, 2022
McAfee ePolicy Orchestrator requires a lot of manual work. For example, if you use Symantec DLP, only one policy is needed, and you can apply it to all of the channels that are an endpoint, like the web or email. With McAfee, you need to create separate rules for all of those channels. One policy for email, one policy for web, and so on. I would like to see McAfee reduce the amount of manual work required. In the next release, I would like to see an integration with third-party solutions for classification. We find that implementation is limited for some products. I would like an open API that we can integrate with other classification tools.
Technical Support Engineer at Professional Technologies Kenya
Reseller
Apr 27, 2022
There are some features available with the on-premise version that are unfortunately not available on cloud such as encryption. For now, there is only management for native encryption and not full drive encryption. I'd like to see more integration and a lighter antivirus; most of the complaints from customers relate to the search utilization. There needs to be more integration. Customers want to see MVISION Cloud integrated with things like SIEM, whether it's Microsoft, Fortinet, or something else.
Information Security Officer at a financial services firm with 501-1,000 employees
Real User
Feb 18, 2022
I can't speak to what is missing from the latest version. We have an old version and in the coming weeks, we are going to upgrade to the latest version. We have to see on that one if there are any missing features. One thing that I don't like is that McAfee products change very often and upgrade very often. The annoying thing that I have noticed is that these new products do not work anymore on older Windows versions. Let's say a new version of antivirus does not install on Windows 8. You have to implement an older McAfee in an old version of Windows.
The rollout to cover the online resources, such as SharePoint, One Drive, and Office 365 doesn't seem to have a very clear path. There is a lot of different information all over the place and there's probably a need to have some technical ability to understand how to bring solutions to fruition. There doesn't seem to be any documentation in place to guide you. Unless you are a technical person, it's very difficult to bring that solution to fruition. The product is good but they just have to document how to use the different products and bring them into one platform, one solution. You shouldn't need to be a technical person to do that. You can roll out to all of the endpoints easily, but now if I need to protect the online cloud resources like SharePoint sites or SharePoint libraries, that is where the biggest worry is because people feel things like the cloud contains threats. They're not concerned with how to do it or to make sure that they have visibility and protection. This is where it gets a little bit tricky, but even McAfee themselves are not giving a very clear road map or very clear documentation to know this is how to go about it, and this is how to achieve it. Again, we do not have to have a technical background to be able to synchronize. I think that they should drop their high costs of training. Many people will train themselves and still sell the product. They implement their product and they will recommend it. If they make the training available then the uptake will be higher.
McAfee ePolicy Orchestrator (McAfee ePO) is the most advanced, extensible, and scalable centralized security management software in the industry. Unifying security management through an open platform, McAfee ePO makes risk and compliance management simpler and more successful for organizations of all sizes.
There is a question regarding suggestions for additional tools or functions for McAfee ePolicy Orchestrator, and whether the functionality part is completely satisfactory.
We are not utilizing the real-time data correlation in McAfee ePolicy Orchestrator.
Some drawbacks include difficulty in supporting improvements because we don't get proper response from Trellix support, so there is a need to improve the support.In using McAfee ePolicy Orchestrator as an on-premise solution, we face challenges such as login issues and stopped services, where Trellix does not provide prompt responses. They request time for logs for analysis, and after about 10 to 11 days, this ticket was finally closed.
We would like to see more integration with different platforms and extend this to other platforms. We are migrating to the cloud and want to extend it from our on-premises setup to the cloud.
The product is more expensive than other competitor tools. It would be highly beneficial if the metrics or dashboards could be customized in a future version of the product. The product could also be easier to integrate and operate.
There are challenges regarding the compatibility and agent functionality of the product. The aforementioned area can be considered for improvement. The setup and deployment phases need to be improved. The issues with the integration capabilities of the product, specifically the ones that are deployed on an on-premises model, need to be improved.
The areas of concern where improvements are needed are related to the product's assignment policy and tag assignment, where users can assign the policies with the help of tags and sort out the systems.
McAfee ePolicy Orchestrator should improve its integration with other tools.
There's one room for improvement. We need to consolidate multiple features into one console. It would be beneficial to have all the important features on a single platform. Instead of using separate agents for tasks like antivirus and demos, it would be better to have a unified agent that can handle everything. I would like a unified agent that can handle multiple tasks. Another useful feature would be an email solution. It could be helpful. Also, having the capability to check for data vulnerabilities would be a great addition. In the future release, I would like to have a feature that checks for vulnerabilities
McAfee ePolicy Orchestrator needs to upgrade its technology since the solution's EDR function is not good compared to other vendors in the market.
McAfee ePolicy Orchestrator needs to upgrade the technology; it's like their area function is not quite as good as compared to other market vendors. So they have to work on it.
The installation process is quite difficult and requires technical support.
The way that ePolicy launches the updates is very slow. It would be great if that was faster. They need to enhance their vulnerability scanner so we can be more secure. The most tedious part of the product is when you block USBs. To make an exception for a user means you have to deal with a very difficult user interface. It would be better if they fixed that so only the administrator could click it somewhere and give permission. Right now, the user has to send a keyword, then the administrator has to use that keyword to make the exception for the user. It's very complicated for the user to do. They don't know how to do that. They could use some cell phone MDM to control the cell phones and the tablets and stuff. They don't have that. They need better integration with MDM devices.
McAfee ePolicy Orchestrator could improve by supporting container microservices, such as Docker and Kubernetes.
The solution is difficult to tune to avoid false positives. The product could use a better upgrade path for customers, as there is no clear way for them to update to newer versions.
McAfee ePolicy Orchestrator requires a lot of manual work. For example, if you use Symantec DLP, only one policy is needed, and you can apply it to all of the channels that are an endpoint, like the web or email. With McAfee, you need to create separate rules for all of those channels. One policy for email, one policy for web, and so on. I would like to see McAfee reduce the amount of manual work required. In the next release, I would like to see an integration with third-party solutions for classification. We find that implementation is limited for some products. I would like an open API that we can integrate with other classification tools.
There are some features available with the on-premise version that are unfortunately not available on cloud such as encryption. For now, there is only management for native encryption and not full drive encryption. I'd like to see more integration and a lighter antivirus; most of the complaints from customers relate to the search utilization. There needs to be more integration. Customers want to see MVISION Cloud integrated with things like SIEM, whether it's Microsoft, Fortinet, or something else.
I can't speak to what is missing from the latest version. We have an old version and in the coming weeks, we are going to upgrade to the latest version. We have to see on that one if there are any missing features. One thing that I don't like is that McAfee products change very often and upgrade very often. The annoying thing that I have noticed is that these new products do not work anymore on older Windows versions. Let's say a new version of antivirus does not install on Windows 8. You have to implement an older McAfee in an old version of Windows.
The rollout to cover the online resources, such as SharePoint, One Drive, and Office 365 doesn't seem to have a very clear path. There is a lot of different information all over the place and there's probably a need to have some technical ability to understand how to bring solutions to fruition. There doesn't seem to be any documentation in place to guide you. Unless you are a technical person, it's very difficult to bring that solution to fruition. The product is good but they just have to document how to use the different products and bring them into one platform, one solution. You shouldn't need to be a technical person to do that. You can roll out to all of the endpoints easily, but now if I need to protect the online cloud resources like SharePoint sites or SharePoint libraries, that is where the biggest worry is because people feel things like the cloud contains threats. They're not concerned with how to do it or to make sure that they have visibility and protection. This is where it gets a little bit tricky, but even McAfee themselves are not giving a very clear road map or very clear documentation to know this is how to go about it, and this is how to achieve it. Again, we do not have to have a technical background to be able to synchronize. I think that they should drop their high costs of training. Many people will train themselves and still sell the product. They implement their product and they will recommend it. If they make the training available then the uptake will be higher.