Tenable Vulnerability Management vs. Trellix ePolicy Orchestrator

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

McAffee ePolicy Orchestrator is very well suited in large environments. You can load your updates to the repository and deploy them to every node on your network. It has great reporting and auditing features. You can control your users and groups all from the System Tree. DLP is great for USB devices. You can restrict all the ports on a computer and open them up for a limited time to plug in a device. EPO is to bulky for small networks.

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Applies the policy settings for the selected group
• Keeps the hosts updated well, in general
• Allows update of available software from within the management console
• Assigns and runs ongoing tasks with little need for intervention
• Provides quick high-level view of systems

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

• It has a slow mechanism when adding custom threat feeds. For example, if McAfee didn't have a signature or detection about a new virus and we try to add it to our console it is like a really big process in adding that to our available signatures.
• Whenever a scan is performed, the system CPU utilization goes up 100 percent.
• Installation fails due to difference in timestamp when we try to shuffle between packages.

We like to renew tenable each year we have had it so far.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

McAfee support is definitely GREAT! It is one of the best technical support on a business level. GOLD support is recommended to business. Their website is easy and quick to create a ticket. Their technical team usually responds right away with an email or call. Via call and web they provide a full and complete support until the issue is resolved. The best, most of the time they explain in detail what is the issue, the reason and how to resolve it.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

McAfee ePolicy Orchestrator really seemed to have all the best pieces in one platform and the network admin and asst. network admin both had previous experience with the product. The others tend to focus more on singular aspects, whereas McAfee ePolicy Orchestrator has data loss prevention, encryption, anti-virus and other functionality and the excel on each of those points equally.

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized

• As with most things the price of products goes up and more-so if your business is growing.
• We've been able to provide auditors with tangible evidence that our network is protected because of the reporting McAfee ePO provides. Auditors like McAfee because it's been around almost forever and is a mature product.
• Being a mature product, though, it's very much set in the way it does things and as such there's not a whole lot of innovation.

Incentivized