TrustRadius: an HG Insights company

Microsoft Defender for Endpoint vs. Trellix Enterprise Security Manager

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Trellix Enterprise Security Manager

    Score8.6 out of 10
    N/ATrellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
    Pricing
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Editions & Modules
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Considered Both Products
    Microsoft
    No answer on this topic
    Trellix (FireEye + McAfee)
    Chose Trellix Enterprise Security Manager
    Other evaluated products: Microsoft Defender and Symantec
    - McAffee has more comprehensive integrated tools that better serve our infrastructure
    - Analysts found the use of the tool more intuitive
    Incentivized
    Key User Insights
    Would buy again
    98%
    Would buy again
    117 Answers
    No answers on this topic
    Delivers good value for the price
    98%
    Delivers good value for the price
    109 Answers
    No answers on this topic
    Happy with the feature set
    94%
    Happy with the feature set
    113 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    98%
    Lived up to sales and marketing promises
    96 Answers
    No answers on this topic
    Implementation went as expected
    95%
    Implementation went as expected
    103 Answers
    No answers on this topic
    Features
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Endpoint Security
    Comparison of Endpoint Security features of Microsoft Defender for Endpoint and Trellix Enterprise Security Manager
    Feature
    Microsoft Defender for Endpoint
    8.3
    56 Ratings
    3% below category average
    Trellix Enterprise Security Manager
    -
    Ratings
    Anti-Exploit Technology7.653 Ratings00 Ratings
    Endpoint Detection and Response (EDR)9.155 Ratings00 Ratings
    Centralized Management8.955 Ratings00 Ratings
    Hybrid Deployment Support7.110 Ratings00 Ratings
    Infection Remediation9.454 Ratings00 Ratings
    Vulnerability Management7.252 Ratings00 Ratings
    Malware Detection8.955 Ratings00 Ratings
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Microsoft Defender for Endpoint and Trellix Enterprise Security Manager
    Feature
    Microsoft Defender for Endpoint
    -
    Ratings
    Trellix Enterprise Security Manager
    8.4
    9 Ratings
    8% above category average
    Centralized event and log data collection00 Ratings8.69 Ratings
    Correlation00 Ratings7.09 Ratings
    Event and log normalization/management00 Ratings8.09 Ratings
    Deployment flexibility00 Ratings8.39 Ratings
    Integration with Identity and Access Management Tools00 Ratings9.37 Ratings
    Custom dashboards and workspaces00 Ratings9.39 Ratings
    Host and network-based intrusion detection00 Ratings8.37 Ratings
    Data integration/API management00 Ratings9.32 Ratings
    Behavioral analytics and baselining00 Ratings8.62 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.62 Ratings
    Response orchestration and automation00 Ratings8.02 Ratings
    Reporting and compliance management00 Ratings8.62 Ratings
    Incident indexing/searching00 Ratings7.62 Ratings
    Best Alternatives
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Small Businesses
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    No answers on this topic
    Medium-sized Companies
    Watchguard Endpoint Security
    Score8.8 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    ESET PROTECT
    Score9.1 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Likelihood to Recommend
    8.4
    (99 ratings)
    9.0
    (9 ratings)
    Likelihood to Renew
    8.4
    (8 ratings)
    -
    (0 ratings)
    Support Rating
    9.0
    (5 ratings)
    6.5
    (2 ratings)
    User Testimonials
    Microsoft Defender for EndpointTrellix Enterprise Security Manager
    Likelihood to Recommend
    Microsoft
    Because of its integration with Windows, it is very easy to deploy and manage. Any IT department should be able to leverage the software and interface. The admin portal provides weighted recommendations that comprise the Secure Store, offering admins, security teams, and business owners valuable insights into their security footprint without requiring a strong security background. The software would be ideal for small and mid-sized businesses that cannot dedicate resources to security. Larger enterprises would also benefit, but may require the enhanced license.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
    Incentivized
    Read full review
    Pros
    Microsoft
    • One, it's crazy lightweight, so compared to some of the competitors that we also have used with our security services, it's really lightweight and so I don't have a lot of overhead on the system that it's running on.
    • It does really fantastic PowerShell integration.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
    • This is a core McAfee product that is still getting support.
    • It has a substantial amount of compatibility and integration with other products.
    Incentivized
    Read full review
    Cons
    Microsoft
    • So the fact that Defender for Endpoint still works with signatures is actually, I don't know, a little difficult for us because, I mean, since Microsoft trusts those signatures, you can easily inject code. And we've done it many times. To show that you can inject code through vulnerabilities like CV 2013, 99, and 33 but still keep the signature. So because of the trust of those signatures, the malware just kind of slides into the environment without Defender knowing. That's the first part. The second part is that the behavioral analysis is not precisely its Prime. It's not Defender's best capability for endpoints. So, Defender does not identify all behaviors considered by other EDRs in the market.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
    • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Usability
    Microsoft
    It offers multiple security features and integrates well with Microsoft ecosystems. A workflow for threat detection, investigation, automated remediation, and a centralized dashboard is an added advantage. This application is mainly designed for experienced users; new users may feel challenged.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Reliability and Availability
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Performance
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Support Rating
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
    Incentivized
    Read full review
    Implementation Rating
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Alternatives Considered
    Microsoft
    Cylance's policy is to block everything and requires an active person to monitor and unblock legitimate processes. As updates and software continue to evolve, it is a full-time job to be a Cylance administrator. Microsoft Defender for Endpoint is a set-and-forget solution that catches threats when they occur and leaves you to focus on your work unimpeded.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
    Incentivized
    Read full review
    Scalability
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Return on Investment
    Microsoft
    • Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage.
    • Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs.
    • Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings.
    • Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
    • Ability to have third party management
    • Actively upgraded product with good vendor support
    Incentivized
    Read full review
    ScreenShots

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management