TrustRadius: an HG Insights company

Microsoft Sentinel vs. Trellix Enterprise Security Manager

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Sentinel

    Score8.7 out of 10
    N/AMicrosoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.

    $2.46

    per GB ingested

    Trellix Enterprise Security Manager

    Score8.6 out of 10
    N/ATrellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
    Pricing
    Microsoft SentinelTrellix Enterprise Security Manager
    Editions & Modules
    Azure Sentinel
    $2.46
    per GB ingested
    100 GB per day
    $123.00
    per day
    200 GB per day
    $221.40
    per day
    300 GB per day
    $319.80
    per day
    400 GB per day
    $410.00
    per day
    500 GB per day
    $492.00
    per day
    More than 500 GB per day
    $492.00 + $98.40
    per day/plus each additional 100 GB increment
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft SentinelTrellix Enterprise Security Manager
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Microsoft SentinelTrellix Enterprise Security Manager
    Considered Both Products
    Microsoft
    No answer on this topic
    Trellix (FireEye + McAfee)
    No answer on this topic
    Key User Insights
    Would buy again
    98%
    Would buy again
    46 Answers
    No answers on this topic
    Delivers good value for the price
    90%
    Delivers good value for the price
    38 Answers
    No answers on this topic
    Happy with the feature set
    98%
    Happy with the feature set
    46 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    92%
    Lived up to sales and marketing promises
    35 Answers
    No answers on this topic
    Implementation went as expected
    98%
    Implementation went as expected
    43 Answers
    No answers on this topic
    Features
    Microsoft SentinelTrellix Enterprise Security Manager
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Microsoft Sentinel and Trellix Enterprise Security Manager
    Feature
    Microsoft Sentinel
    7.3
    24 Ratings
    6% below category average
    Trellix Enterprise Security Manager
    8.4
    9 Ratings
    8% above category average
    Centralized event and log data collection8.324 Ratings8.69 Ratings
    Correlation7.224 Ratings7.09 Ratings
    Event and log normalization/management6.924 Ratings8.09 Ratings
    Deployment flexibility7.522 Ratings8.39 Ratings
    Integration with Identity and Access Management Tools6.422 Ratings9.37 Ratings
    Custom dashboards and workspaces7.524 Ratings9.39 Ratings
    Host and network-based intrusion detection5.020 Ratings8.37 Ratings
    Data integration/API management6.522 Ratings9.32 Ratings
    Behavioral analytics and baselining6.920 Ratings8.62 Ratings
    Rules-based and algorithmic detection thresholds7.922 Ratings8.62 Ratings
    Response orchestration and automation7.221 Ratings8.02 Ratings
    Reporting and compliance management9.04 Ratings8.62 Ratings
    Incident indexing/searching8.622 Ratings7.62 Ratings
    Best Alternatives
    Microsoft SentinelTrellix Enterprise Security Manager
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score9 out of 10
    IBM Security QRadar SIEM
    Score9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft SentinelTrellix Enterprise Security Manager
    Likelihood to Recommend
    8.6
    (43 ratings)
    9.0
    (9 ratings)
    Likelihood to Renew
    8.2
    (1 ratings)
    -
    (0 ratings)
    Usability
    7.3
    (4 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (3 ratings)
    6.5
    (2 ratings)
    Professional Services
    5.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Microsoft SentinelTrellix Enterprise Security Manager
    Likelihood to Recommend
    Microsoft
    Microsoft Sentinel excels in centralized monitoring, AI-driven threat detection, and automation, but improvements in cost transparency, user experience, third-party integrations, and support for emerging technologies could make it even more effective. Addressing these areas would enhance its appeal for small-to-medium businesses, large enterprises, and organizations with complex or specialized IT environments.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.
    Incentivized
    Read full review
    Pros
    Microsoft
    • I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
    • The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
    • This is a core McAfee product that is still getting support.
    • It has a substantial amount of compatibility and integration with other products.
    Incentivized
    Read full review
    Cons
    Microsoft
    • I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
    • It should improve ML and AI capabilities.
    • I find its documentation a little bit difficult to understand at the start. So the words should be simple.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
    • While the "user" interface is pretty straight forward, the management interface is fairly complicated.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    it does the job reasonably well
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Usability
    Microsoft
    The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Support Rating
    Microsoft
    Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.
    Incentivized
    Read full review
    Alternatives Considered
    Microsoft
    We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. While Sumo Logic is good at analyzing data, Microsoft Sentinel fits our needs.
    Read full review
    Trellix (FireEye + McAfee)
    We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.
    Incentivized
    Read full review
    Professional Services
    Microsoft
    Did not use professional services
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    No answers on this topic
    Return on Investment
    Microsoft
    • As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
    Incentivized
    Read full review
    Trellix (FireEye + McAfee)
    • Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
    • Ability to have third party management
    • Actively upgraded product with good vendor support
    Incentivized
    Read full review
    ScreenShots

    Microsoft Sentinel Screenshots

    Product screenshotProduct screenshotScreenshot of Microsoft Sentinel Capabilities