G2

Aniruddha B.

Senior Information Security Engineer

Enterprise (> 1000 emp.)

2/16/2023

"Real-time, accurate threat detection and intelligence capabilities, integration with ESM"

4/5

What do you like best about Trellix Global Threat Intelligence (GTI)?

The features of McAfee GTI for ESM that I found most helpful are:

Real-time Threat Detection: McAfee GTI for ESM delivers real-time threat detection capabilities by using a vast network of sensors to gather data from millions of endpoints and devices around the world. This data is analyzed in real-time, and any threats are quickly identified, giving organizations the ability to quickly respond to threats as they emerge.

Accurate Threat Intelligence: McAfee GTI for ESM uses advanced analytics to provide accurate threat intelligence, including malware analysis, IP reputation, and domain reputation. This helps organizations to better understand the nature of the threats they are facing and take appropriate actions to mitigate risks.

Proactive Risk Management: By leveraging the data and insights provided by McAfee GTI for ESM, organizations can take a more proactive approach to risk management, identifying potential threats before they become critical and taking steps to prevent them from causing damage.

Integration with ESM: McAfee GTI for ESM integrates seamlessly with McAfee's Enterprise Security Manager (ESM), a powerful security information and event management (SIEM) solution. This provides organizations with a single pane of glass view of their entire security environment, including real-time threat intelligence and detection capabilities.

Global Reach: McAfee GTI for ESM is a global threat intelligence service that provides organizations with insights into threats from around the world, including advanced persistent threats (APTs), zero-day attacks, and other emerging threats. Review collected by and hosted on G2.com.

What do you dislike about Trellix Global Threat Intelligence (GTI)?

There are some downsides to consider:

Cost: McAfee GTI for ESM is a paid service, and the cost can be a significant investment for some organizations. This may make it less accessible for smaller organizations with limited budgets.

Complexity: Implementing and managing McAfee GTI for ESM can be complex, especially for organizations with limited IT resources or expertise. This can require additional training and support to ensure that the service is used effectively.

False Positives: Like any threat intelligence service, McAfee GTI for ESM may occasionally generate false positives, which can lead to unnecessary alerts and wasted time and resources.

Limited Customization: Some organizations may find that McAfee GTI for ESM's pre-defined rules and policies do not align with their specific security requirements, leading to limitations in customization.

Integration Challenges: While McAfee GTI for ESM integrates well with McAfee's own ESM solution, integrating it with other security solutions from different vendors can be challenging.

Reliance on External Data: McAfee GTI for ESM relies heavily on external data sources, which can lead to gaps or delays in threat intelligence coverage, particularly for emerging or targeted threats. Review collected by and hosted on G2.com.

What problems is Trellix Global Threat Intelligence (GTI) solving and how is that benefiting you?

Some of the key problems that McAfee GTI for ESM is solving include:

Rapidly evolving threat landscape: The cyber threat landscape is constantly changing, with new threats emerging on a daily basis. McAfee GTI for ESM provides real-time threat intelligence and analysis, giving organizations the ability to quickly detect and respond to new and emerging threats.

Lack of visibility into potential threats: Many organizations struggle with a lack of visibility into their network and application infrastructure, making it difficult to identify potential threats. McAfee GTI for ESM provides comprehensive threat intelligence and analysis across a wide range of sources, providing organizations with a more complete view of their security posture.

Inadequate security response: Without the right tools and capabilities, organizations may struggle to respond to security incidents in a timely and effective manner. McAfee GTI for ESM provides advanced analytics and automation capabilities, allowing organizations to quickly identify, analyze, and respond to threats.

Limited resources: Many organizations have limited resources available to manage and respond to security threats. McAfee GTI for ESM can help to address this issue by providing a centralized, scalable platform for threat detection and response, reducing the burden on internal IT resources. Review collected by and hosted on G2.com.