What I like about Trellix Email Security is its approach to detection and prevention. It combines behavioral analytics with Trellix’ threat intelligence to automate email monitoring and strengthen inbox protection. The interface is also very easy to navigate, and it comes with a helpful dashboard out of the box for monitoring overall email traffic.
I also find it useful that it can integrate with SIEMs for external log monitoring and archiving outside of the ETP platform. In terms of performance, ETP is very manageable, especially in its SaaS version since server maintenance is already handled for you. Loading speed and policy updates are reflected in the system in a timely manner.
On pricing, I feel you get what you pay for and more. Trellix ETP features strong, modern capabilities that can handle even emergent adversaries across an ever-expanding and changing threat surface. Onboarding it into your infrastructure has been one of my best experiences: I implemented it once for a client, and it was very straightforward. There are plenty of documentation and guides online as well.
Trellix support is also very hands-on and quick to respond to the tickets we raise. Overall, I would recommend the solution to clients with specific business needs. Review collected by and hosted on G2.com.
The downsides I don’t like are the log extraction and the license consumption monitoring. In my experience, the SaaS version has a hard limit of 10K extractable logs, which feels very restrictive and makes it tedious to gather what we need. On top of that, we found that the license monitoring reports aren’t dynamic. We had to wait a few more months before we could get usage rates, which can be concerning, especially when you’re working around auditing schedules. Review collected by and hosted on G2.com.