What I like most about Trellix Data Loss Prevention is the centralized visibility and control it provides over sensitive data across endpoints and the wider organization. Its policy management is flexible, and it helps identify and prevent unauthorized data transfers through channels like email, USB devices, and web applications. I also appreciate the detailed reporting and monitoring features, which make it easier to investigate incidents and stay compliant with data protection policies. Review collected by and hosted on G2.com.

One area that could be improved is the complexity of configuration and policy management. Setting up and fine-tuning policies can take time, especially in larger environments with many endpoints and varying data protection requirements. The interface could also be more intuitive, and the reporting and incident investigation workflows could be streamlined so common administrative tasks are faster and easier to complete. Review collected by and hosted on G2.com.

What I like most about Trellix Data Loss Prevention is its strong data protection capabilities, along with centralized policy management and the ability to monitor and stop sensitive data from being shared through unauthorized channels. I also appreciate the reporting and visibility features, which make it easier to spot potential risks and take corrective action when needed. Review collected by and hosted on G2.com.

The main drawback is that the solution can sometimes be complex to configure and manage, especially when setting up detailed policies and rules. The user interface could be more intuitive, and certain administrative tasks and reporting workflows could be streamlined to make day-to-day management easier. Review collected by and hosted on G2.com.

The best thing about Trellix DLP is that a single console can manage DLP policies for Endpoint, Network, and Cloud.

Trellix DLP is able to cover most data leak channels such as email, web, print, external devices, cloud, IM, remote applications, etc. The policy configuration flow is also very easy to understand.

It supports two different data classification techniques: Manual Classification and Auto Classification. It also has a key feature where an admin can push a configuration so users are forced to classify data based on different labels like Confidential, Private, Secret, Public, etc. In addition, it supports classification based on Keywords, RegEx, Dictionary, TrueFile Type, Document Property, and more.

It not only has block or monitor options, but it also includes an option where the user has to specify the Business Justification for any activity that involves sensitive data. We can also define the action based on Public or Corporate network.

It also has a Bypass DLP mode where, for a certain period of time, an admin can bypass complete DLP policies for a specific user in case of an emergency.

Trellix DLP Incident Management is very useful and provides detailed information about the user when an alert is triggered, which helps with further investigation.

Trellix DLP also has a Discover feature, using which we can identify where sensitive data is stored in the organization. Review collected by and hosted on G2.com.

One thing that’s a bit complex is managing the database; it requires frequent purging and ongoing maintenance. Review collected by and hosted on G2.com.

What I like most is the level of control it gives you over DLP policies. I found it useful for setting different rules based on the type of sensitive data and where the data is being used or transferred. incident monitoring and reporting are easier to investigate potential data leakage instead of just blocking everything. Once the policies are properly tuned, it provides good visibility into user activity and helps reduce the risk of sensitive information being shared through endpoints or removable media. Review collected by and hosted on G2.com.

One thing I found a bit challenging was the initial policy tuning. It can take some time to get the rules right without generating too many false positives. In a larger environment, managing and fine-tuning multiple policies can also become a little time-consuming. I’d also say the administration side has a learning curve, especially when you’re first getting familiar with how the different DLP rules and incidents work together. Review collected by and hosted on G2.com.

What I find most appealing about Trellix Data Loss Prevention is that it has an easy-to-use interface, is highly customizable in terms of policies, and operates effectively. This tool fits into the enterprise environment nicely, offers comprehensive reports on incidents and false positives, and employs intelligent content detection for lower false-positive rates. Review collected by and hosted on G2.com.

Trellix Data Loss Prevention offers many useful functionalities, but setting up and fine-tuning policies can take a lot of time, especially in more complex environments. The user interface could be more user-friendly, and additional tuning may be needed to reduce false positives. Review collected by and hosted on G2.com.

Trellix DLP provides strong, policy-driven data protection with flexible controls that help prevent sensitive data leakage across endpoints, networks, and cloud environments. Review collected by and hosted on G2.com.

Trellix DLP can be complex to administer, and policy tuning often requires significant effort to reduce false positives and operational overhead. Review collected by and hosted on G2.com.

I really like the precision of Trellix Data Loss Prevention in classifying sensitive data and its ability to configure very detailed security rules and policies. This allows for the accurate identification of confidential information and avoids an excess of false positives, thus maintaining an uninterrupted daily workflow for employees while exercising full control over sensitive information. I also appreciate the integration with the centralized management console and real-time reporting, which provides clear visibility of information leakage attempts and incidents. This greatly facilitates security audits and allows our team to react immediately without the need to analyze complex logs. Review collected by and hosted on G2.com.

What could be improved the most is the complexity of the initial setup and the learning curve, as it takes quite some time to fine-tune the policies at the beginning to avoid being overwhelmed by false positives. Additionally, the management interface can be somewhat rigid or unintuitive compared to more modern SaaS platforms, and sometimes local agents can consume a lot of resources on the user's machine during deep scans. To improve the initial setup, having a guided assistant and pre-configured templates for common regulations would be very helpful. Regarding the management interface, it would benefit greatly from a more modern and fluid redesign, with customizable dashboards and a more visual policy creator, avoiding the need to navigate through multiple menus to modify a single rule. Review collected by and hosted on G2.com.

The tool is very granular and allows for detailed configuration of the detection and classification of documents or files to be audited. Additionally, McAfee, in its suites, provides as an added value to any client, the ability to use the full device control (McAfee Device Control). Review collected by and hosted on G2.com.

I still haven't found what could be wrong or what I dislike about this product. Review collected by and hosted on G2.com.

Trellix Data Loss Prevention helps us prevent the loss of sensitive data. Its centralized management, policy-based controls, and real-time alerts make it easier to spot potential data leakage and respond quickly. Review collected by and hosted on G2.com.

The biggest area for improvement is the complexity of configuration and policy management. Setting up and fine-tuning policies can be time-consuming, and some alerts still need extra tuning to cut down on false positives. Review collected by and hosted on G2.com.

The centralized policy management is solid. Being able to define DLP policies across endpoints, email, and the network from a single console really simplifies day-to-day operations, especially for a small security team. Integration with the broader Trellix ecosystem—particularly ePO—also makes deployment and reporting straightforward if you’re already working in that environment. Content-aware detection for structured data, such as credit card numbers and personal identification, works reliably out of the box and requires minimal tuning. Review collected by and hosted on G2.com.

Performance impact on endpoints is noticeable, especially during full content scans. Users regularly complain about slowdowns, and that creates friction with IT when you’re trying to keep DLP enforced without disrupting day-to-day work. The out-of-the-box false positive rate is high, so you end up spending a lot of time tuning policies before they become genuinely useful instead of just generating noise. Upgrade paths between versions can also be painful, particularly if you’re running older ePO infrastructure. On top of that, the UI feels dated compared to newer DLP solutions; reporting is functional but not very intuitive, and pulling the specific data you need for an audit or incident investigation takes more clicks than it should. Review collected by and hosted on G2.com.