Qualys TruRisk Platform vs. Trellix Network Security

It is well suited for environments that are looking for a solution that is top notch for vulnerability scanning, and is the most accurate at doing so. It would also fit environments that have a lot of endpoints to scan or like to have scanning done on an automatic basis. It is less appropriate in environments that want to use a platform right away, without getting training in how to use it, or reading documentation on the product.

Incentivized

It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.

Incentivized

• Attestation is so easy with Qualys. I find this one feature makes the investment worth the cost
• Ease of use. Within an hour of first installing, a person can be running compliance tests without a hitch.
• Great training materials and support. I have never had to take more than twenty minutes to solve a problem either through support or the forums.

Incentivized

• Advanced detection of targeted attacks.
• Mandiant team effort is a big plus.
• Inline mitigation capabilities particularly well.
• Different deployment models for specific needs.
• License and information sharing selection 1 way or 2 way mode.
• Frequent updates.
• Low false positive rates.
• FireEye sandboxing is immune to sandboxing attacks.
• Central management (CMS) capabilities for managing several NX's.
• Extra IPS/IDS functionality in the product.
• Smartvision specific to lateral movement detection.
• Upgrades and updates with zero down time.
• Local FireEye support is superb.
• Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
• SSL inspection support.
• No need to maintain, build or updates the images. It's highly automatic.

Incentivized

• Notices some findings which were not clear why they appear(suspected false positive).
• Working with Qualys support(for example due to the previous point) wasn't the best experience. the response was very slow.
• Qualys limit the daily API requests. In case you need more, it will cost.

Incentivized

• Very first detected APT sample can pass the NX even it's inline blocking mode.
• Performance optimization for busy networks is cumbersome.
• CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
• Constant limitations of tcpdump/ packet capture for 10G interfaces.
• IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
• It's not a full NDR solution or a UBA solution.
• Lack of device or user mapping.
• Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
• You cannot make manual submission to NX (needs AX).
• You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).

Incentivized

Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.

Incentivized

They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.

Incentivized

We find that Nessus is a great product, on par if not slightly better compared to Qualys in terms of their pricing model. However, Qualys Cloud Platform has better quality reporting, and offers great tips and suggestions on quickly closing a gap and eliminating the risk. In our organization, both products are great and meet our expectations, but due to pricing, we favor Nessus slightly more.

Incentivized

FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.

Incentivized

• The most important thing that happens with this program is to automate one hundred percent the security of my system since this program is in charge of supervising each of the applications and websites in detail.
• One of the purposes for which we trust Qualys Cloud Platform is to keep our system clean and secure; the ability of this software to manage our vulnerability makes us more cautious about working with it.

Incentivized

• As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
• Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
• APTs in our region successfully detected and mitigated by the NX.
• For the ROI, in a six month period FireEye is paying off its [investment].
• One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.

Incentivized