TrustRadius

Elastic Security vs. Trellix Enterprise Security Manager

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Elastic Security
Score 8.4 out of 10
N/A
Elastic Security equips analysts to prevent, detect, and respond to threats. The free and open solution delivers SIEM, endpoint security, threat hunting, and cloud monitoring. The solution encompasses Elastic SIEM, which brings Elasticsearch to SIEM and threat hunting. The Elastic Agent (or Elastic Endpoint Security based on the former Endgame security product acquired by Elastic in late 2019) brings signatureless malware prevention to endpoints, as well as security data collection for…N/A
Trellix Enterprise Security Manager
Score 8.6 out of 10
N/A
Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.N/A
Pricing
Elastic SecurityTrellix Enterprise Security Manager
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Elastic SecurityTrellix Enterprise Security Manager
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details——
More Pricing Information
Community Pulse
Elastic SecurityTrellix Enterprise Security Manager
Considered Both Products
Elastic Security
Verified User
Anonymous
Chose Elastic Security
Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage.
Trellix Enterprise Security Manager
Verified User
Anonymous
Chose Trellix Enterprise Security Manager
McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise …
Fernanda Ministerio | TrustRadius Reviewer
Fernanda Ministerio
Especialista de Desenvolvimento Industrial
Chose Trellix Enterprise Security Manager
Other evaluated products: Microsoft Defender and Symantec
- McAffee has more comprehensive integrated tools that better serve our infrastructure
- Analysts found the use of the tool more intuitive
Verified User
Anonymous
Chose Trellix Enterprise Security Manager
McAfee is not the easiest tool to use. The user interface (specially the admin part) is fairly confusing.
At first, McAfee is very overwhelming and not so easy to understand. However, once you get used to the tool, you get used to the interface and you're able to do pretty much …
Chose Trellix Enterprise Security Manager
We had used McAfee Enterprise Security Manager for a long time, and it served us well. It is great since it can serve as an all-in security tool. Also, it was a great deal for our organization, since it came bundled with our manager network security.
NJ
Neil Johnson
CIO (Chief Information Officer)
Chose Trellix Enterprise Security Manager
We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter …
Verified User
Anonymous
Chose Trellix Enterprise Security Manager
We selected and implemented McAfee Enterprise Security Manager because is the best SIEM solution from the market. With a very good support from the vendor. Easy implementation and easy management. A lot of threats addressed. High level of security assured. Very good resilience. …
Verified User
Anonymous
Chose Trellix Enterprise Security Manager
Splunk tends to be the top dog in the space. Everything is compatible and it's capable of anything. You just have to have the time and money to do the work. And if you have a large volume of logs (and who doesn't?), it's not cheap. McAfee Enterprise Security Manager's advantage …
PC
Philip Clarke
IT Systems/Security Manager
Chose Trellix Enterprise Security Manager

We looked at a few products, these were AlienVault, ESM, LogRhythm and Alert Logic.

ESM at the time had more functionality and a friendlier and cleaner user interface than LogRhythm

ESM had an ability to integrate easily into Intel's endpoint solution versus AlienVault where a …

Features
Elastic SecurityTrellix Enterprise Security Manager
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Elastic Security
-
Ratings
Trellix Enterprise Security Manager
8.4
Ratings
9% above category average
Centralized event and log data collection00 Ratings8.60 Ratings
Correlation00 Ratings7.00 Ratings
Event and log normalization/management00 Ratings8.00 Ratings
Deployment flexibility00 Ratings8.30 Ratings
Integration with Identity and Access Management Tools00 Ratings9.30 Ratings
Custom dashboards and workspaces00 Ratings9.30 Ratings
Host and network-based intrusion detection00 Ratings8.30 Ratings
Data integration/API management00 Ratings9.30 Ratings
Behavioral analytics and baselining00 Ratings8.60 Ratings
Rules-based and algorithmic detection thresholds00 Ratings8.60 Ratings
Response orchestration and automation00 Ratings8.00 Ratings
Reporting and compliance management00 Ratings8.60 Ratings
Incident indexing/searching00 Ratings7.60 Ratings
Best Alternatives
Elastic SecurityTrellix Enterprise Security Manager
Small Businesses
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 3.9 out of 10
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 3.9 out of 10
Medium-sized Companies
Sumo Logic
Sumo Logic
Score 9.4 out of 10
Sumo Logic
Sumo Logic
Score 9.4 out of 10
Enterprises
Sumo Logic
Sumo Logic
Score 9.4 out of 10
Sumo Logic
Sumo Logic
Score 9.4 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Elastic SecurityTrellix Enterprise Security Manager
Likelihood to Recommend
9.0
(0 ratings)
9.0
(0 ratings)
Support Rating
7.0
(0 ratings)
6.5
(0 ratings)
User Testimonials
Elastic SecurityTrellix Enterprise Security Manager
Likelihood to Recommend
I believe Endgame is well suited to organizations that have their own Cybersecurity department. Its not well suited for organizations that don't have a Cybersecurity department.
Verified User
Anonymous
Read full review
McAfee is a good solution if you're in a medium/large company and if you're looking for a solution that can be customized and expanded. I also recommend if you have the most common log sources on your environment, since McAfee supports the major log sources (but lack a lot of small vendors). In my opinion, I wouldn't recommend McAfee for small companies, since it's not that easy to manage and maintain.
Verified User
Anonymous
Read full review
Pros
  • Identify 0-day malware.
  • Provides a few forensic details on endpoints.
  • Very easy to administer.
Verified User
Anonymous
Read full review
  • McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
  • This is a core McAfee product that is still getting support.
  • It has a substantial amount of compatibility and integration with other products.
Verified User
Anonymous
Read full review
Cons
  • I would love that it provided more memory analysis details.
  • Being able to edit sensor profiles after creating them.
  • I would love it if it provided more automation features.
Verified User
Anonymous
Read full review
  • If there is a requirement to integrate into other vendor products i.e. (log sharing) then this was very cumbersome.
  • Integration of vulnerability scanning that is available in other vendor products would be a good addition.
  • When integrating all of Intel's products a third party consultancy is usually required, where other vendor products can be configured without this additional cost.
PC
Philip Clarke
IT Systems/Security Manager
Read full review
Support Rating
Even though their support is good, I think there are some areas where they need to provide more thorough solutions to issues, some of their solutions are pretty basic and have already been tried.
Verified User
Anonymous
Read full review
Dealing with the McAfee support is a lottery. Sometimes you reach them and it's a really experienced engineer, but sometimes it's a person with no clue on the tool. We had few cases where our internal engineers knew more about the tool than the McAfee support. However, sometimes we get hold of some really good engineers that know the tool from inside out
Verified User
Anonymous
Read full review
Alternatives Considered
Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage.
Verified User
Anonymous
Read full review
McAfee Enterprise Security Manager is a better option than other security software because it's both inexpensive and extremely effective. Norton and other security software boast a high price tag but don't always back it up when it comes to performance. With McAfee Enterprise Security Manager, I know I'm getting a quality product for a fair price.
Verified User
Anonymous
Read full review
Return on Investment
  • Being able to identify threats we couldn't identify before.
  • Easier management of endpoints.
  • Being able to immediately isolate endpoints remotely that have high severity threats.
Verified User
Anonymous
Read full review
  • It effectively blocks potential attacks from outside.
  • It aids us in doing more effective root-cause analysis whenever an incident occurs, since it gives us enough details to understand what went wrong.
Brandon Macapelit, CISA | TrustRadius Reviewer
Read full review
ScreenShots