Trellix Email Security

My main use case for Trellix Email Security is for external communication, where we use the IOCs that we already have for phishing domains to capture phishing emails. For internal emails and outbound emails, we also implement DLP-related rules, such as when there is a PDF file attached or when an email is sent to an external domain.

Regarding my primary use case for Trellix Email Security, we rely on it to secure all of our Exchange servers and all email communication regarding phishing attacks, email-related attacks, or any type of confidential leakage and data leakage.

Trellix Email Security has positively impacted my organization by providing us with a consolidated tool to manage all our email protection, and it is performing excellently. We have achieved almost 90% accuracy or more regarding the automatic detection of phishing emails and the analysis of any suspicious links or suspicious domains observed.

The accuracy of Trellix Email Security has transformed our team's workflow and saved us considerable time. Previously, the tools we were using required users to manually report phishing emails or manually search for any DLP-related emails. After implementing Trellix Email Security, that time consumption has been significantly reduced, and we now have automatic detections, automatic rules, and playbooks deployed against threats.

The best features that Trellix Email Security offers in my experience are a wide range of options from basic to advanced levels, including simple protections against anonymous emails and suspicious emails, and advanced capabilities to prevent them and perform actions against them.

In terms of specific valuable features in Trellix Email Security, all the rules are in their domains and are important in every way. The DLP rules are performing excellently and offer good security regarding the data leakage of confidential data or confidential company information. The threat intelligence rules help us capture feeds from IOC buckets and Intel platforms. The phishing detection is also excellent, as it targets the main attack patterns that attackers use in different environments.

Trellix Email Security's accuracy and reliability of output is demonstrated by the reduction in our team's accuracy needs and time consumption. More than 90% of detections and threats have been detected and prevented, proving the solution is accurate and reliable.

Trellix Email Security can be improved in several areas. Although it has almost all the features that an email security tool should have, it could advance further with different types of attacks that users employ, such as domain impersonation. We sometimes observe domain names that are almost similar to original domains, but with different writing, font, and font type. Behavioral-based detections could be enhanced to address these scenarios.

I have worked on Trellix Email Security for more than a year. Beyond email security, I have worked on different other Trellix products, including HX and NX for network security and host security.

I have previously used multiple solutions in different environments and found Trellix Email Security to be far superior to those solutions, although I will not name any of them.

I have seen a return on investment with Trellix Email Security, as we are now secured and working accurately with 90% or more accuracy. The money has been saved, the time has been saved, and fewer employees are needed to manage email security.

My experience with pricing, setup cost, and licensing for Trellix Email Security is that everything good has a price. When we look at the cost relative to what it secures, I think that is acceptable and fair.

Before choosing Trellix Email Security, I evaluated other options based on my experience with different email security solutions, but I will not name any of them in this conversation.

I believe I have covered the features of Trellix Email Security thoroughly.

I have addressed the needed improvements for Trellix Email Security.

I do not have anything else in mind regarding changes or additions for Trellix Email Security at this time.

The AI capabilities of Trellix Email Security have impressive governance and security, as the integration with AI assists greatly in the analysis and capturing of behavioral detections. It is working excellently with the governance and security, fulfilling compliance requirements and providing every security measure that could be possible.

My review rating for Trellix Email Security is 7.

I have been working in my current field for the last four years and have been using Trellix Email Security for two to three years. The main use case of Trellix Email Security is preventing our users from phishing and spam. We have configured Advanced Threat Protection along with phishing and BEC protection in the policy configuration. When a spam mail comes to a targeted user, such as my colleague Komal, she receives a spam mail that appears to be from Komal's own email. When we create a case to check why it is quarantined, the Trellix support engineer explains that if you check the header, Komal's email is not actually the sender—it is just a masked mail ID. It is a blocked mail address that is sending to the active email, so Trellix blocks it. In my case, Trellix Email Security helps us reduce the spam threat. If any user sends data containing a virus or any injected URLs, it will detect and prevent it. Basically, we are using Trellix Email Security for preventing our users.

There are a few modules that we use. Advanced Threat Protection detects malicious URLs or attachments with the help of advanced machine learning, artificial intelligence, sandboxing, or behavior analytics. When we talk about phishing or BEC, it identifies credential harvesting, CEO fraud, and similar threats. When we talk about incident response, it removes malicious URLs and malicious emails. We also create a policy for DLP, Data Loss Prevention.

Basically, we do not know who our outsiders are. When outsiders mail us or our team, the user will receive a filtered mail. If a sender sends malicious code, malicious URLs, or malicious files, Trellix filters them with the help of machine learning, sandboxing, and behavior analytics, as well as real-time URL inspection. When they send URLs, Trellix will inspect them first with Trellix analytics, and after that, it will filter them before we receive the email. In incident response, Trellix automatically removes malicious emails, blocks them, or quarantines them. It will give us an alert that we are receiving this type of mail from this user to our company insider so we can investigate.

By using Trellix Email Security, we achieve reduced phishing attacks and ransomware risk from the email side. We are also protected from advanced email threats and gain visibility of who is sending emails to our organization. Additionally, we achieve compliance of data protection, ensuring that we will not send sensitive data to the outside.

When we talk about security, Trellix Email Security console is very complex. We are using multiple products, and many products are consolidated into a single console, though they are all on another console. A single console would be helpful.

We have been using it for the last two years.

Trellix Email Security is more stable in my case.

Regarding Trellix Email Security scalability, the cloud-based architecture maintains high email traffic performance.

Customer support is quite good. We raise a case on the customer portal, and our engineer will be aligned with us, and the engineer resolves the issue.

Before using Trellix Email Security, we evaluated Trellix with Sophos Email Security.

When we talk about phishing attack reduction, with the help of Trellix data, they already have a large data size of blocked domains. If a domain comes to us or is a fake, it will first check and analyze it, and then it will send it to us. Basically, it filters the email first. When anyone sends our organization an email, it first comes to the MX where it is hosted, then it is sent to Trellix. After Trellix filters it, it sends it to Exchange, and Exchange spreads that mail to the user.

By using that, money is also saved and time is also saved because only one person will handle that. A good quality engineer will resolve all the issues independently, and the support is very good, so issues will be resolved in one to two hours.

We are partners.

By using Trellix Email Security, money is saved and time is also saved because only one person will handle that. A good quality engineer will resolve all the issues independently, and the support is very good, so issues will be resolved in one to two hours.

The pricing is equivalent to other OEMs, but the setup cost is quite the same, and the licensing is per user.

By using Trellix Email Security, we achieve reduced phishing attacks and ransomware risk from the email side. We are also protected from advanced email threats and gain visibility of who is sending emails to our organization. Additionally, we achieve compliance of data protection, ensuring that we will not send sensitive data to the outside.

When we talk about security, Trellix Email Security console is very complex. We are using multiple products, and many products are consolidated into a single console, though they are all on another console. A single console would be helpful.

Before using Trellix Email Security, we evaluated Trellix with Sophos Email Security.

I would rate this product a 10 out of 10.

My use case mainly involves Trellix Email Security Gateway.

In my opinion, the most useful functions or features in Trellix Email Security include sandboxing, anti-spam, some filters, and quarantine features, which are highly sought after because of the compliance and protection around the attack vectors on email.

The main benefits that end users receive from Trellix Email Security are largely inclined towards affordability compared to recent vendors who are pushing aggressively, such as Forcepoint and Darktrace, and other competitors, so I could say that the biggest benefit is compliance.

Regarding the anomaly detection feature, I think it may be more useful for mature customers, but I cannot tell because I have not had that inquiry a lot, though I would be curious to know how it can add value to customers.

I cannot give an opinion on dynamic threat intelligence in email security because I have not really explored that feature, and for the customers that we support, this feature has not been a focus.

I think Trellix could improve by doing more awareness campaigns around why Trellix Email Security is essential, as well as how it compares to competitors with a clear battle card that distinguishes Trellix from other email security solutions because that comparison is not clear right now.

It would be absolutely useful to add AI functions or AI technologies to email security because currently most customers are looking at how they face the AI challenge and be technology-ready in terms of their current technology and how it is adaptable to the challenges of machine learning, for example.

Regarding pricing, I would say that in terms of being competitive, Trellix should offer more for an attractive price, especially in terms of bundling. They should have options for module-based pricing based on certain features or a bundle offer that covers a large range of features, but is also priced competitively for customers to be able to invest in it.

I have been using Trellix Email Security for the last five or six years.

From one to ten, I would rate the stability of Trellix Email Security a six, with room for improvement.

For scalability, I would also say it deserves a six out of ten.

Regarding technical support from Trellix, I would rate it a four because there is a lot of work that has to be done in terms of the support that is provided. Trellix should have a dedicated center for the African market due to the unique dynamics and challenges within this region.

As for the initial setup for email security, I would say it is both simple and complex, depending on whether the implementation is skill-based. Not many channel partners possess the skills to implement it. This becomes a challenge as there are not a lot of people skilled in the product, and relying largely on Trellix engineers means it would be more expensive and not very competitive for the market. Therefore, I believe enabling the channel, such as reseller partners and distributors, to have more skills would be a big gain for Trellix.

Trellix Email Security is deployed in a hybrid manner, with some customers needing it to be just on-premises, while others prefer a hybrid setup where they have some workloads on the cloud. Additionally, there are also customers who want it to be purely on the cloud to minimize any resource over-usage.

Regarding cloud deployment, actual options include AWS, Azure, and GCP, along with recent demands for private cloud and Huawei Cloud, which is also becoming a requirement.

I would rate this review a six out of ten overall.

Trellix Email Security protects our clients from phishing, malware, and spam emails by analyzing incoming and outgoing email traffic to identify and block malicious attachments, links, or suspicious content before it reaches the machines and mailboxes of our clients. We use it to filter out the mailboxes effectively.

Trellix Email Security has the best-in-class detection accuracy for emails. I have worked with Proofpoint, Microsoft Defender, and Palo Alto, and out of them, I definitely think this one has the best accuracy percentage. The signature-less sandboxing engine, which uses the Fish Vision and Kraken dual AI phishing engines, is also very good, and it uses the signature-less multi-vector virtual execution engine to identify threats. Additionally, it has URL rewriting and post-delivery sandboxing, which continuously checks the emails in case the attacker modifies them, and it also has automated post-delivery clawback. Moreover, there are flexible deployment models, and it is integrated with cloud email security and API-based solutions such as Microsoft 365 and Google Workspace.

Trellix Email Security has positively impacted our organization. Before using Proofpoint and Defender, we used to get around 300 to 400 emails per day flagged. Since we switched to Trellix Email Security, we had it cut down by almost 50%, reporting only about 150 to 180 flagged emails. This represents significantly less noise.

This reduction in flagged emails has greatly increased our efficiency, allowing us to focus on other parts and other tools of Trellix, specifically malware alerts and malware detections, not just the email detections. It cleared up a lot of load from our shoulders and led to less fatigue within the team because we used to manually check the links on Defender, manually sandbox them, provide a verdict, and then close it. This process became very fluid and efficient with Trellix.

Trellix Email Security can be improved specifically in the whitelisting part because sometimes we face issues where the whitelisting is not done properly. Even after whitelisting a sender or some kind of URL, they still get flagged. It was not properly optimized for that. Additionally, if a small business wants to try the dashboard, they will not be able to do it since Trellix Email Security has no free trial available. There is no public API available in Trellix currently, which could be a problem for DevSecOps teams, and the licensing cost is quite high. When we took this solution, it was a bit higher than what we had before. There were some false positives again, but this was also a whitelisting issue due to optimization problems, which increased the false positives.

I have been using Trellix Email Security for about 1.5 years.

The customer support has been inconsistent with Trellix lately because there is a whole loopback hierarchy that you have to reach the customer service first, and then the engineer will respond, and then the customer service will feed you back again. Solutions take three to four weeks maximum if you want something fixed.

I remember a scenario that happened with us where a client got an email containing a clean PDF with an embedded URL that returned a benign page at the delivery time. However, after some time, the attacker flipped the destination page to a credential harvesting portal, and Trellix Email Security was continuously monitoring the URL post-delivery. It detected the page transition and then flagged it, enabling the email to be automatically clawed back from the mailbox before the client opened it. This was very proactive from the whole system of Trellix Email Security, and our analysts also got an alert for the same, closing the whole incident in 15 to 20 minutes. It was all centralized, very swift, and a good prevention of what could have been a credential harvesting incident.

The signature-less capability especially helps us a lot in the case of zero-day attacks because there are basically no signatures. The deep learning engine that it has, along with the signature-less sandboxing engine, performs really good behavioral analytics and helps us prevent zero-day threats as they come, which is really useful.

The only advice I would give to others looking into using Trellix Email Security is to be cautious about the pricing and the customer support experience. Additionally, the pricing is a bit on the higher end, making it not recommended for small enterprises. I would rate this product an 8 out of 10.

My main use case for Trellix Email Security is to secure my email environment from phishing and virus attacks.

Trellix Email Security is used to secure my environment from viruses and phishing because there are numerous attacks in the current scenario. Cyberattacks are unlimited now, so security is the main priority that we must implement.

The best features Trellix Email Security offers include excellent AI and ML capabilities that detect all phishing attacks and handle security concerns, so we do not have to worry about viruses in email.

The AI and ML features of Trellix Email Security make a difference in my day-to-day work because we previously had to manually check for viruses and had the fear that a virus could be present. Now the system creates a report identifying phishing emails and all related concerns. We review one report daily, and if it is approved, it will deliver to the user; if it is not approved, then it will be blocked.

Trellix Email Security has positively impacted my organization because we previously experienced a data leak due to an email virus, but now we are secure and not experiencing any of these issues, which is beneficial for the company's important data that we can now protect from threats.

I think Trellix Email Security is excellent now and there is no need for improvement; we may see about that in future technology, but currently, according to current technology standards, it is sufficient.

I do not think there is anything at all, even a small detail, that could be improved or added to make Trellix Email Security even better.

I have been using Trellix Email Security for the last two years.

Trellix Email Security is stable.

Its scalability is good.

Customer support for Trellix Email Security is very good.

I did not previously use a different solution before Trellix Email Security.

I have seen a return on investment since using Trellix Email Security, as I have saved money, time, and reduced the number of incidents.

We did not evaluate other options before choosing Trellix Email Security.

I suggest to others that if you want a secure email gateway and to secure your environment from phishing, viruses, and related threats, then you should get Trellix Email Security, as this will save you a lot of time and protect a lot of data. Data security is very important because all the data comes through your mail, so if any virus comes through your mail, all your data could be leaked. Therefore, please secure your email environment first, and then you can proceed to the next step. I have rated this product a 10 out of 10 based on my experience.