Trellix Email Security logo

    Trellix Email Security

    Sold by
    Trellix Email Security delivers comprehensive protection for inbound and outbound emails, safeguarding the #1 attack vector.

    Ratings and reviews

    4.3
    13 ratings
    2 star
    1 star
    54%
    38%
    8%
    0%
    0%
    4 AWS reviews
    |
    9 external reviews
    External reviews are from PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (13)
    Aosaja Osager

    Automated phishing defense has reduced manual workload but detection of domain impersonation needs improvement

    Reviewed on Jul 01, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Trellix Email Security is for external communication, where we use the IOCs that we already have for phishing domains to capture phishing emails. For internal emails and outbound emails, we also implement DLP-related rules, such as when there is a PDF file attached or when an email is sent to an external domain.

    Regarding my primary use case for Trellix Email Security, we rely on it to secure all of our Exchange servers and all email communication regarding phishing attacks, email-related attacks, or any type of confidential leakage and data leakage.

    How has it helped my organization?

    Trellix Email Security has positively impacted my organization by providing us with a consolidated tool to manage all our email protection, and it is performing excellently. We have achieved almost 90% accuracy or more regarding the automatic detection of phishing emails and the analysis of any suspicious links or suspicious domains observed.

    The accuracy of Trellix Email Security has transformed our team's workflow and saved us considerable time. Previously, the tools we were using required users to manually report phishing emails or manually search for any DLP-related emails. After implementing Trellix Email Security, that time consumption has been significantly reduced, and we now have automatic detections, automatic rules, and playbooks deployed against threats.

    What is most valuable?

    The best features that Trellix Email Security offers in my experience are a wide range of options from basic to advanced levels, including simple protections against anonymous emails and suspicious emails, and advanced capabilities to prevent them and perform actions against them.

    In terms of specific valuable features in Trellix Email Security, all the rules are in their domains and are important in every way. The DLP rules are performing excellently and offer good security regarding the data leakage of confidential data or confidential company information. The threat intelligence rules help us capture feeds from IOC buckets and Intel platforms. The phishing detection is also excellent, as it targets the main attack patterns that attackers use in different environments.

    Trellix Email Security's accuracy and reliability of output is demonstrated by the reduction in our team's accuracy needs and time consumption. More than 90% of detections and threats have been detected and prevented, proving the solution is accurate and reliable.

    What needs improvement?

    Trellix Email Security can be improved in several areas. Although it has almost all the features that an email security tool should have, it could advance further with different types of attacks that users employ, such as domain impersonation. We sometimes observe domain names that are almost similar to original domains, but with different writing, font, and font type. Behavioral-based detections could be enhanced to address these scenarios.

    For how long have I used the solution?

    I have worked on Trellix Email Security for more than a year. Beyond email security, I have worked on different other Trellix products, including HX and NX for network security and host security.

    What do I think about the stability of the solution?

    In my experience, Trellix Email Security is stable.

    What do I think about the scalability of the solution?

    The scalability of Trellix Email Security is excellent. In our large environment, I have observed it working perfectly, so I believe it would perform well in other scenarios as well.

    Which solution did I use previously and why did I switch?

    I have previously used multiple solutions in different environments and found Trellix Email Security to be far superior to those solutions, although I will not name any of them.

    What was our ROI?

    I have seen a return on investment with Trellix Email Security, as we are now secured and working accurately with 90% or more accuracy. The money has been saved, the time has been saved, and fewer employees are needed to manage email security.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing for Trellix Email Security is that everything good has a price. When we look at the cost relative to what it secures, I think that is acceptable and fair.

    Which other solutions did I evaluate?

    Before choosing Trellix Email Security, I evaluated other options based on my experience with different email security solutions, but I will not name any of them in this conversation.

    What other advice do I have?

    I believe I have covered the features of Trellix Email Security thoroughly.

    I have addressed the needed improvements for Trellix Email Security.

    I do not have anything else in mind regarding changes or additions for Trellix Email Security at this time.

    The AI capabilities of Trellix Email Security have impressive governance and security, as the integration with AI assists greatly in the analysis and capturing of behavioral detections. It is working excellently with the governance and security, fulfilling compliance requirements and providing every security measure that could be possible.

    My review rating for Trellix Email Security is 7.

    Manish Kumar Twinkle

    Email defenses have reduced phishing and ransomware risks while protecting sensitive data

    Reviewed on May 20, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I have been working in my current field for the last four years and have been using Trellix Email Security for two to three years. The main use case of Trellix Email Security is preventing our users from phishing and spam. We have configured Advanced Threat Protection along with phishing and BEC protection in the policy configuration. When a spam mail comes to a targeted user, such as my colleague Komal, she receives a spam mail that appears to be from Komal's own email. When we create a case to check why it is quarantined, the Trellix support engineer explains that if you check the header, Komal's email is not actually the sender—it is just a masked mail ID. It is a blocked mail address that is sending to the active email, so Trellix blocks it. In my case, Trellix Email Security helps us reduce the spam threat. If any user sends data containing a virus or any injected URLs, it will detect and prevent it. Basically, we are using Trellix Email Security for preventing our users.

    What is most valuable?

    There are a few modules that we use. Advanced Threat Protection detects malicious URLs or attachments with the help of advanced machine learning, artificial intelligence, sandboxing, or behavior analytics. When we talk about phishing or BEC, it identifies credential harvesting, CEO fraud, and similar threats. When we talk about incident response, it removes malicious URLs and malicious emails. We also create a policy for DLP, Data Loss Prevention.

    Basically, we do not know who our outsiders are. When outsiders mail us or our team, the user will receive a filtered mail. If a sender sends malicious code, malicious URLs, or malicious files, Trellix filters them with the help of machine learning, sandboxing, and behavior analytics, as well as real-time URL inspection. When they send URLs, Trellix will inspect them first with Trellix analytics, and after that, it will filter them before we receive the email. In incident response, Trellix automatically removes malicious emails, blocks them, or quarantines them. It will give us an alert that we are receiving this type of mail from this user to our company insider so we can investigate.

    By using Trellix Email Security, we achieve reduced phishing attacks and ransomware risk from the email side. We are also protected from advanced email threats and gain visibility of who is sending emails to our organization. Additionally, we achieve compliance of data protection, ensuring that we will not send sensitive data to the outside.

    What needs improvement?

    When we talk about security, Trellix Email Security console is very complex. We are using multiple products, and many products are consolidated into a single console, though they are all on another console. A single console would be helpful.

    For how long have I used the solution?

    We have been using it for the last two years.

    What do I think about the stability of the solution?

    Trellix Email Security is more stable in my case.

    What do I think about the scalability of the solution?

    Regarding Trellix Email Security scalability, the cloud-based architecture maintains high email traffic performance.

    How are customer service and support?

    Customer support is quite good. We raise a case on the customer portal, and our engineer will be aligned with us, and the engineer resolves the issue.

    Which solution did I use previously and why did I switch?

    Before using Trellix Email Security, we evaluated Trellix with Sophos Email Security.

    How was the initial setup?

    When we talk about phishing attack reduction, with the help of Trellix data, they already have a large data size of blocked domains. If a domain comes to us or is a fake, it will first check and analyze it, and then it will send it to us. Basically, it filters the email first. When anyone sends our organization an email, it first comes to the MX where it is hosted, then it is sent to Trellix. After Trellix filters it, it sends it to Exchange, and Exchange spreads that mail to the user.

    By using that, money is also saved and time is also saved because only one person will handle that. A good quality engineer will resolve all the issues independently, and the support is very good, so issues will be resolved in one to two hours.

    What about the implementation team?

    We are partners.

    What was our ROI?

    By using Trellix Email Security, money is saved and time is also saved because only one person will handle that. A good quality engineer will resolve all the issues independently, and the support is very good, so issues will be resolved in one to two hours.

    What's my experience with pricing, setup cost, and licensing?

    The pricing is equivalent to other OEMs, but the setup cost is quite the same, and the licensing is per user.

    What other advice do I have?

    By using Trellix Email Security, we achieve reduced phishing attacks and ransomware risk from the email side. We are also protected from advanced email threats and gain visibility of who is sending emails to our organization. Additionally, we achieve compliance of data protection, ensuring that we will not send sensitive data to the outside.

    When we talk about security, Trellix Email Security console is very complex. We are using multiple products, and many products are consolidated into a single console, though they are all on another console. A single console would be helpful.

    Before using Trellix Email Security, we evaluated Trellix with Sophos Email Security.

    I would rate this product a 10 out of 10.

    JoseckWekesa

    Email protection has reduced spam and phishing but still needs better support and AI features

    Reviewed on May 19, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My use case mainly involves Trellix Email Security Gateway.

    What is most valuable?

    In my opinion, the most useful functions or features in Trellix Email Security include sandboxing, anti-spam, some filters, and quarantine features, which are highly sought after because of the compliance and protection around the attack vectors on email.

    The main benefits that end users receive from Trellix Email Security are largely inclined towards affordability compared to recent vendors who are pushing aggressively, such as Forcepoint and Darktrace, and other competitors, so I could say that the biggest benefit is compliance.

    What needs improvement?

    Regarding the anomaly detection feature, I think it may be more useful for mature customers, but I cannot tell because I have not had that inquiry a lot, though I would be curious to know how it can add value to customers.

    I cannot give an opinion on dynamic threat intelligence in email security because I have not really explored that feature, and for the customers that we support, this feature has not been a focus.

    I think Trellix could improve by doing more awareness campaigns around why Trellix Email Security is essential, as well as how it compares to competitors with a clear battle card that distinguishes Trellix from other email security solutions because that comparison is not clear right now.

    It would be absolutely useful to add AI functions or AI technologies to email security because currently most customers are looking at how they face the AI challenge and be technology-ready in terms of their current technology and how it is adaptable to the challenges of machine learning, for example.

    Regarding pricing, I would say that in terms of being competitive, Trellix should offer more for an attractive price, especially in terms of bundling. They should have options for module-based pricing based on certain features or a bundle offer that covers a large range of features, but is also priced competitively for customers to be able to invest in it.

    For how long have I used the solution?

    I have been using Trellix Email Security for the last five or six years.

    What do I think about the stability of the solution?

    From one to ten, I would rate the stability of Trellix Email Security a six, with room for improvement.

    What do I think about the scalability of the solution?

    For scalability, I would also say it deserves a six out of ten.

    How are customer service and support?

    Regarding technical support from Trellix, I would rate it a four because there is a lot of work that has to be done in terms of the support that is provided. Trellix should have a dedicated center for the African market due to the unique dynamics and challenges within this region.

    How was the initial setup?

    As for the initial setup for email security, I would say it is both simple and complex, depending on whether the implementation is skill-based. Not many channel partners possess the skills to implement it. This becomes a challenge as there are not a lot of people skilled in the product, and relying largely on Trellix engineers means it would be more expensive and not very competitive for the market. Therefore, I believe enabling the channel, such as reseller partners and distributors, to have more skills would be a big gain for Trellix.

    What other advice do I have?

    Trellix Email Security is deployed in a hybrid manner, with some customers needing it to be just on-premises, while others prefer a hybrid setup where they have some workloads on the cloud. Additionally, there are also customers who want it to be purely on the cloud to minimize any resource over-usage.

    Regarding cloud deployment, actual options include AWS, Azure, and GCP, along with recent demands for private cloud and Huawei Cloud, which is also becoming a requirement.

    I would rate this review a six out of ten overall.

    reviewer2840397

    Advanced email defenses have reduced false alerts and free the team to focus on critical threats

    Reviewed on May 17, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Trellix Email Security protects our clients from phishing, malware, and spam emails by analyzing incoming and outgoing email traffic to identify and block malicious attachments, links, or suspicious content before it reaches the machines and mailboxes of our clients. We use it to filter out the mailboxes effectively.

    What is most valuable?

    Trellix Email Security has the best-in-class detection accuracy for emails. I have worked with Proofpoint, Microsoft Defender, and Palo Alto, and out of them, I definitely think this one has the best accuracy percentage. The signature-less sandboxing engine, which uses the Fish Vision and Kraken dual AI phishing engines, is also very good, and it uses the signature-less multi-vector virtual execution engine to identify threats. Additionally, it has URL rewriting and post-delivery sandboxing, which continuously checks the emails in case the attacker modifies them, and it also has automated post-delivery clawback. Moreover, there are flexible deployment models, and it is integrated with cloud email security and API-based solutions such as Microsoft 365 and Google Workspace.

    Trellix Email Security has positively impacted our organization. Before using Proofpoint and Defender, we used to get around 300 to 400 emails per day flagged. Since we switched to Trellix Email Security, we had it cut down by almost 50%, reporting only about 150 to 180 flagged emails. This represents significantly less noise.

    This reduction in flagged emails has greatly increased our efficiency, allowing us to focus on other parts and other tools of Trellix, specifically malware alerts and malware detections, not just the email detections. It cleared up a lot of load from our shoulders and led to less fatigue within the team because we used to manually check the links on Defender, manually sandbox them, provide a verdict, and then close it. This process became very fluid and efficient with Trellix.

    What needs improvement?

    Trellix Email Security can be improved specifically in the whitelisting part because sometimes we face issues where the whitelisting is not done properly. Even after whitelisting a sender or some kind of URL, they still get flagged. It was not properly optimized for that. Additionally, if a small business wants to try the dashboard, they will not be able to do it since Trellix Email Security has no free trial available. There is no public API available in Trellix currently, which could be a problem for DevSecOps teams, and the licensing cost is quite high. When we took this solution, it was a bit higher than what we had before. There were some false positives again, but this was also a whitelisting issue due to optimization problems, which increased the false positives.

    For how long have I used the solution?

    I have been using Trellix Email Security for about 1.5 years.

    How are customer service and support?

    The customer support has been inconsistent with Trellix lately because there is a whole loopback hierarchy that you have to reach the customer service first, and then the engineer will respond, and then the customer service will feed you back again. Solutions take three to four weeks maximum if you want something fixed.

    What other advice do I have?

    I remember a scenario that happened with us where a client got an email containing a clean PDF with an embedded URL that returned a benign page at the delivery time. However, after some time, the attacker flipped the destination page to a credential harvesting portal, and Trellix Email Security was continuously monitoring the URL post-delivery. It detected the page transition and then flagged it, enabling the email to be automatically clawed back from the mailbox before the client opened it. This was very proactive from the whole system of Trellix Email Security, and our analysts also got an alert for the same, closing the whole incident in 15 to 20 minutes. It was all centralized, very swift, and a good prevention of what could have been a credential harvesting incident.

    The signature-less capability especially helps us a lot in the case of zero-day attacks because there are basically no signatures. The deep learning engine that it has, along with the signature-less sandboxing engine, performs really good behavioral analytics and helps us prevent zero-day threats as they come, which is really useful.

    The only advice I would give to others looking into using Trellix Email Security is to be cautious about the pricing and the customer support experience. Additionally, the pricing is a bit on the higher end, making it not recommended for small enterprises. I would rate this product an 8 out of 10.

    reviewer2836203

    Secure email filtering has protected critical data and has reduced phishing and virus incidents

    Reviewed on May 14, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Trellix Email Security is to secure my email environment from phishing and virus attacks.

    Trellix Email Security is used to secure my environment from viruses and phishing because there are numerous attacks in the current scenario. Cyberattacks are unlimited now, so security is the main priority that we must implement.

    What is most valuable?

    The best features Trellix Email Security offers include excellent AI and ML capabilities that detect all phishing attacks and handle security concerns, so we do not have to worry about viruses in email.

    The AI and ML features of Trellix Email Security make a difference in my day-to-day work because we previously had to manually check for viruses and had the fear that a virus could be present. Now the system creates a report identifying phishing emails and all related concerns. We review one report daily, and if it is approved, it will deliver to the user; if it is not approved, then it will be blocked.

    Trellix Email Security has positively impacted my organization because we previously experienced a data leak due to an email virus, but now we are secure and not experiencing any of these issues, which is beneficial for the company's important data that we can now protect from threats.

    What needs improvement?

    I think Trellix Email Security is excellent now and there is no need for improvement; we may see about that in future technology, but currently, according to current technology standards, it is sufficient.

    I do not think there is anything at all, even a small detail, that could be improved or added to make Trellix Email Security even better.

    For how long have I used the solution?

    I have been using Trellix Email Security for the last two years.

    What do I think about the stability of the solution?

    Trellix Email Security is stable.

    What do I think about the scalability of the solution?

    Its scalability is good.

    How are customer service and support?

    Customer support for Trellix Email Security is very good.

    Which solution did I use previously and why did I switch?

    I did not previously use a different solution before Trellix Email Security.

    What was our ROI?

    I have seen a return on investment since using Trellix Email Security, as I have saved money, time, and reduced the number of incidents.

    Which other solutions did I evaluate?

    We did not evaluate other options before choosing Trellix Email Security.

    What other advice do I have?

    I suggest to others that if you want a secure email gateway and to secure your environment from phishing, viruses, and related threats, then you should get Trellix Email Security, as this will save you a lot of time and protect a lot of data. Data security is very important because all the data comes through your mail, so if any virus comes through your mail, all your data could be leaked. Therefore, please secure your email environment first, and then you can proceed to the next step. I have rated this product a 10 out of 10 based on my experience.

    reviewer2837817

    Email protection has blocked phishing campaigns and provides clear insight into user threats

    Reviewed on May 12, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Trellix Email Security's main use case is to protect our users from phishing emails and any type of unknown or spam emails. We are protecting our users from spam emails and unknown links, and we have integrated Trellix Email Security with our emails. We have protected our email security with our endpoint security, which is also Trellix. We are using TI-reputation for our email security system, and it is working fine.

    A specific example of how Trellix Email Security helped protect our users from phishing or spam emails occurred when, on weekends, users received multiple spam emails. Trellix protected us by recognizing the spam links, scanning them with anti-malware engines, and then quarantining the emails for our users. A notification is also sent to users if they know the sender, allowing them to request the admin to release the email. Multiple users requested us to analyze the email sender, and we found that this sender was a spam source using a phishing campaign against our company. Trellix protected us from that spam campaign, and I appreciate this.

    One of our use cases for Trellix Email Security is to protect users from spam emails. If any user accidentally receives a spam email and clicks on a link within the email body, Trellix scans the link with anti-malware and sandboxing. If the link is safe, users will be able to access it. If the link is deemed malicious or unknown, Trellix blocks it for all users.

    How has it helped my organization?

    Trellix Email Security has positively impacted our organization by being a very impactful and powerful tool. It reduces the number of threats that users received before the implementation of Trellix. The threats have significantly decreased, and it helps users analyze standard emails and phishing campaigns. Trellix Email Security provides a very user-friendly environment, which is great.

    The impact of Trellix Email Security is very good. The reporting shows that we have reviewed multiple times, and above 90% of threats have been blocked by Trellix Email Security monthly. This reporting indicates that Trellix Email Security has helped protect us from cyberattacks.

    What is most valuable?

    The best features of Trellix Email Security are the integration, the reputation system, and the administration console. The central control console that we access for email security is the same console we use for our endpoint management and endpoint security features like antivirus. This is a main use case that helps administrators manage operational work, which is why we are using it.

    The integration with Trellix Email Security and the central administration console simplifies our daily work significantly. The dashboard of Trellix Email Security is very good, and the reporting features aid us in analyzing threat events. The graphical representation is clear, which is a key aspect of our use case.

    What needs improvement?

    To improve Trellix Email Security, I think the dashboard details could be enhanced. It would be more efficient if the Trellix team could differentiate between multiple email security engines within our dashboard and integrate threat analysis with the email security engine. This would assist administrators in reviewing and protecting our organization better.

    Almost all features are already in place in Trellix Email Security. Enhancing the reporting administration dashboard could add value.

    For how long have I used the solution?

    I have been using Trellix Email Security for three years.

    What do I think about the stability of the solution?

    Trellix Email Security is stable. We have not experienced any downtime or issues. Since we manage it on-premises, we have not encountered any downtime. Everything is working fine, and the administration of Trellix Email Security is very user-friendly.

    What do I think about the scalability of the solution?

    Trellix Email Security can handle growth as our organization expands. We have invested in multiple cybersecurity solutions, and Trellix Email Security is one of them. Recently, we have expanded our budget on email security and other security tools.

    How are customer service and support?

    The customer support for Trellix Email Security is very efficient and timely responsive.

    Which solution did I use previously and why did I switch?

    Before Trellix Email Security, we used Proofpoint email security.

    What was our ROI?

    We do not rely on a return on investment for Trellix Email Security. Our primary focus is protecting our users from threats and ensuring security. We operate under government regulations, which is why we do not prioritize ROI.

    What's my experience with pricing, setup cost, and licensing?

    The setup cost of Trellix Email Security is almost none, but the licensing is per user, and it has competitive pricing compared to other email security engines such as Trend Micro and Proofpoint.

    What other advice do I have?

    My advice to others looking into using Trellix Email Security is to evaluate and test it against their current solutions. I believe it will prove to be very efficient and enhance their company's security.

    I do not have any additional thoughts about Trellix Email Security as I consider it a recommended product. I would rate this product an 8 out of 10.

    Daniel Watanabe

    Advanced email defenses have boosted phishing detection and improved incident investigations

    Reviewed on May 12, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Trellix Email Security is related to email security monitoring and threat analysis, as I use the tool to help identify suspicious emails, analyze phishing, and monitor security alerts while also supporting incident investigations.

    What is most valuable?

    I remember two of the best features that Trellix Email Security offers, which are scanning links and attachments in real-time and using AI, machine learning, and global threat intelligence feeds to improve detections.

    Compared with some more traditional email security tools, the real-time scanning and AI features of Trellix Email Security provide better visibility and more intelligent analysis during incidents. The centralized dashboard and automated threat feed make it easier to understand what is happening quickly and decide the next steps for remediation. Even in my brief experience, I can clearly see how automation, AI-based analysis, and real-time monitoring improve response time and strengthen overall email security.

    This helped my company accelerate the analysis and response time, which was important because phishing emails can spread very quickly inside the company. The tool also supported collaboration between the security and infrastructure teams by providing clear alert information. For me personally, the experience improved my understanding of incident investigation and how cybersecurity tools are used in real operational scenarios.

    What needs improvement?

    I could suggest improvements for Trellix Email Security. I would say that having even more customizable dashboards and simplifying reports for non-technical stakeholders could make communication easier between the business areas and the security area.

    For how long have I used the solution?

    I have been using Trellix Email Security for about two years, currently in my present company and also in my last company.

    What do I think about the stability of the solution?

    We are very satisfied with the stability of Trellix Email Security.

    How was the initial setup?

    For licensing, my understanding is that Trellix Email Security offers modular and scalable license models depending on the organization's size. The setup process requires coordination between security, infrastructure, and the email administration teams.

    What was our ROI?

    One of the main positive impacts of Trellix Email Security is its ability to detect and respond to phishing and suspicious email activity much faster. From an operational perspective, the platform helps reduce the number of malicious emails and automate filtering. This reduces the risk of credential compromise, malware infections, and user exposure to phishing attacks.

    In terms of malicious emails reaching users, I would estimate there is a noticeable reduction, potentially around fifty percent or more for common phishing and spam attempts.

    Which other solutions did I evaluate?

    We did not evaluate other options before choosing Trellix Email Security.

    What other advice do I have?

    One situation I remember involved a suspicious email that appeared to come from a trusted supplier, asking users to open an attachment related to an invoice. Using Trellix Email Security, I analyzed the headers of the email, the sender reputation, and the attachment behavior. During the investigation, I identified indicators associated with phishing, such as domain spoofing and suspicious attachment activity. After confirming the risk, the email was blocked and removed before it spread further internally, and the incident also helped reinforce awareness with users about phishing attempts and suspicious attachments.

    I give Trellix Email Security a ten out of ten because of the combination of strong threat detection, real-time monitoring, and the efficiency provided during security activities.

    I think Trellix Email Security is already a strong platform, especially regarding AI-driven threat detection and automated response capabilities, as the real-time monitoring and investigation workflow are definitely among its strongest points.

    I believe reporting, integrations, and user training are areas where platforms such as Trellix Email Security can continue evolving to deliver even more value.

    My advice for organizations considering Trellix Email Security is to focus not only on the technology but also on the overall security strategy.

    Emorales Morales

    Cloud email protection has improved threat detection and provides intuitive monitoring tools

    Reviewed on May 11, 2026
    Review from a verified AWS customer

    What is our primary use case?

    I do not currently use Trellix Email Security. I have an overall understanding of Trellix Email Security. My main use case for Trellix Email Security is based on my very overall good experience with it. Overall, I believe Trellix Email Security provides robust protection against phishing and malware, along with some advanced protection for email threats.

    How has it helped my organization?

    The integration of Trellix Email Security with other tools is a major advantage, helping organizations like mine centralize monitoring and streamline security operations.

    What is most valuable?

    I had a chance to review the admin side of Trellix Email Security, and I found it to be really intuitive and easy to manage. For example, the email traffic overview is quite simple and easy to understand. The threat detection is highly intuitive.

    I find that the threat detection feature in Trellix Email Security effectively identifies suspicious attachments and malicious URLs. Additionally, it provides security against impersonation attempts.

    The monitoring aspect and threat security of Trellix Email Security has been quite positive. Overall, I find Trellix Email Security to be a mature and ready solution, delivering very good protection, and scalability-wise, it is very promising.

    Monitoring and threat tracking in Trellix Email Security have the potential to reduce significantly the threats because I am able to review and analyze in real-time any potential threats to my environment and tackle them immediately. I can also train users and make them create awareness regarding all the dangers outside regarding IT.

    The integration of Trellix Email Security with other tools is a major advantage, helping organizations like mine centralize monitoring and streamline security operations.

    What needs improvement?

    The main issue right now with Trellix Email Security is price-wise. There are similar applications that provide similar services that are cheaper right now.

    For how long have I used the solution?

    I have been working in my current field for the past 18 years, give or take.

    What do I think about the stability of the solution?

    I do not have Trellix Email Security installed, but when I tried it, it was cloud-based.

    What do I think about the scalability of the solution?

    Overall, I find Trellix Email Security to be a mature and ready solution, delivering very good protection, and scalability-wise, it is very promising.

    How are customer service and support?

    I remember I had an issue with Trellix Email Security and tried to contact user support, and there might be some areas of improvement in response times.

    Which solution did I use previously and why did I switch?

    I did not purchase Trellix Email Security through the AWS Marketplace.

    How was the initial setup?

    I have no issues to report with the initial setup.

    What was our ROI?

    My advice to others looking into using Trellix Email Security is to be ready to upgrade your platform right away. Your email system has to be very organized and up-to-date in whatever you use.

    What other advice do I have?

    The user interface of Trellix Email Security is fine, but the time I had to experience it is limited. I would rate this review an 8 overall.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    ObaseunAwoyinfa

    Email security has protected hybrid environments and now prevents phishing and ransomware

    Reviewed on Apr 15, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The major use case I observe in Trellix Email Security is phishing and anti-phishing capabilities. Spam emails, malware prevention, and anti-spam are mostly implemented because organizations are trying to prevent phishing attacks. Phishing attacks usually come through emails.

    To close the gap and ensure that an organization is not open to ransomware attacks and backdoors, the first priority should be to secure emails because users are often the weakest link in the cybersecurity chain. Users become susceptible when they receive unsolicited emails and click links they should not click, which can cause problems throughout the network.

    To uphold due care and due diligence, it makes sense to have Trellix Email Security as a compensating solution to ensure that users are not overly exposed to phishing attacks and ransomware attacks from unsolicited emails, while also improving the overall hygiene of email traffic.

    What is most valuable?

    One of the standout features in Trellix Email Security is that whether an email infrastructure is on-premises or in the cloud, the solution can protect the email environment. The solution can protect emails whether using Office 365, Gmail, or other platforms. Additionally, even if an organization is still using Microsoft Exchange on-premises, Trellix Email Security can ensure that Exchange on-premises is protected.

    This is the biggest advantage because every other email security solution provides similar features: anti-phishing, anti-spam, malware prevention, and anti-spam capabilities. However, not every competitor can protect both on-premises and cloud environments. Most other solutions are either only on-premises or only in the cloud, whereas Trellix Email Security bridges this gap.

    What needs improvement?

    The biggest area for improvement in Trellix Email Security is the pricing. The solution is quite expensive. I remember last year we lost an opportunity because the quote was far too expensive compared to what the customer was willing to pay. The pricing was not competitive at all. If the pricing were more affordable, the solution would be able to achieve greater sales.

    In terms of features, I have not used the solution long enough to advise on future feature changes. However, from my perspective as a distributor trying to sell the solution, the biggest barrier we have encountered is the pricing.

    What do I think about the stability of the solution?

    In terms of product stability, I would rate Trellix Email Security between eight and nine because the solution is quite stable. The deployments that have been completed have not resulted in any complaints, so the solution is very stable.

    What do I think about the scalability of the solution?

    I would rate scalability between eight and nine because Trellix Email Security can be deployed in the cloud or on-premises, and in terms of scale, it can handle any size. This capability places it between eight and nine in terms of scalability.

    How are customer service and support?

    I struggle to answer this question because I have not ever had to deal with support specifically for Trellix Email Security, so I cannot speak definitively about how the support team responds. If I speak about Trellix support generally, I think support has improved and is much better than it used to be. Obviously, there is always room for improvement. Based on the general support I have received from Trellix, I would rate it at a seven.

    Which solution did I use previously and why did I switch?

    Before we started selling Trellix Email Security, our company had two other email security solutions. I do not work directly on those products. Other engineers at our distribution company focused on those products, and they did sell a couple of those solutions until we decided to discontinue selling them and then started selling Trellix Email Security.

    How was the initial setup?

    The installation process for Trellix Email Security is not straightforward. The few deployments we have completed were performed by Trellix, and I was unable to follow the deployments through completely. However, I observed that the installation was not straightforward.

    I believe this is partly because the documentation is not readily available. The current Trellix Email Security was a FireEye product, and in terms of product documentation, Trellix needs to improve this for all FireEye products, including HX and other similar offerings. There is little to no documentation available. On the McAfee side, there is clear documentation that walks users through the deployment phase and everything else. Even with minimal interaction with McAfee solutions, an engineer can follow the deployment guide and achieve a successful deployment. With the FireEye products, it is nearly impossible without documentation. This is something that needs improvement.

    What about the implementation team?

    Regarding other Trellix products like Trellix Collaboration Security and Trellix Email Security, we have sold a few. Currently, I have a customer deploying the XDR solution in Abuja, Nigeria at Jaiz Bank. However, I have not used the solutions hands-on myself. Most often, the professional services deployments are performed by the Trellix team because organizations want their customers to receive value for their money, and having the vendor as the front-line resource during deployments is important.

    I have not interfaced with the XDR platform and have not interacted with it directly. I have interacted with the Trellix Email Security platform, but not with the XDR platform.

    What was our ROI?

    Security should be evaluated from a value perspective. As long as an organization is getting value, there will definitely be a return on investment. The question is what would happen if an organization did not have this security measure in place and got hit by ransomware. How much information would be lost? How much credibility would be lost? How much business time would be lost?

    When considering everything that could have been prevented by installing Trellix Email Security, the return on investment becomes clear. Trellix Email Security is quite valuable and definitely provides a massive return on investments.

    What other advice do I have?

    In terms of popularity, I will be honest about Trellix Email Security. We have sold a few solutions, but the competition in email security is large. Trellix Email Security came after Trellix became Trellix. McAfee did not have an email security solution, so we still face serious competition, and the price is not as competitive as one would imagine. We still lose many opportunities, especially in Africa where price drives sales the most. If customers see a competing solution that is significantly more affordable, they will choose that option instead.

    Between Trellix Email Security and NDR solutions, we have sold Trellix Email Security, but we have not yet received a purchase order for NDR. Hopefully in the second quarter we will close the conversation we are having and obtain that purchase order. For now, it is Trellix Email Security that we are actively selling.

    One of the standout features in Trellix Email Security is that whether an email is on-premises or in the cloud, the solution can protect the email environment. Whether using Office 365, Gmail, or other platforms, an organization can extend security to it. When discussing anomaly detection across Trellix products, anomaly detection is embedded throughout the product line. From what ATP and EDR provide, the solutions are built to detect anomalies within the environment, showing when an attack starts and what endpoints have been affected. An organization can look at all those trends and identify things that should not be happening on their network.

    Trellix EDR, NDR, and similar solutions were built on the MITRE ATT&CK framework. If one is familiar with the MITRE ATT&CK framework, one would understand how the solution tracks anomalous behaviors across the network. Previously, there was the NTB that performed behavior analysis looking for anomalous behavior. Now with NDR, it takes this a step higher because detection and response happens on the network layer, not just on the endpoint layer. Whether looking at HX, NDR, EDR, the endpoint layer with HX endpoint, or Trellix ENS and ETP, there is always anomaly detection embedded in Trellix products.

    Regarding GDPR compliance, GDPR is a data protection and regulatory compliance requirement, and encryption is one of the things that helps an organization stay compliant with data protection because it gives the ability to allow only users who should have access to data or files to have access to it. A user who should not have access would only see encrypted data, while only users who should have access would see it. Trellix Email Security definitely helps an organization pass GDPR compliance.

    Regarding reporting, I have not interfaced with the solution extensively. I was on one deployment, but I was not the key resource and did not get far into the reporting phase. However, reporting is constant across Trellix. This is evident from the ePO, which has always been one of the best solutions for allowing users to build custom queries and design reports as they want to see them. I would imagine that reporting is also factored into Trellix Email Security. Reporting is definitely important, and Trellix has always been strong in this area, so reporting should still be something one can rely on for Trellix Email Security.

    Regarding AWS cloud experience, I have not worked extensively with AWS cloud. It is something I have in my personal pipeline as I am trying to transition into cloud security, so I definitely need to look at AWS. However, at the moment, I am not there yet. The overall review rating for Trellix Email Security is nine out of ten.

    Abdullah Al Hadi

    Improved email filtering has strengthened phishing protection and safeguarded sensitive data

    Reviewed on Mar 24, 2026
    Review provided by PeerSpot

    How has it helped my organization?

    Normally, email security has that capability just like other email securities. I think Trellix Email Security is a good process because previously whenever it was McAfee, the email security was not perfectly built. Now that it has converted into Trellix, they are selling that product and establishing the product capability. It is improving and we are trying to conduct discussions with the customer about Trellix Email Security as well.

    Trellix Email Security now has dynamic response which is essential for email security. One of the differences is the reporting part, which is improved within Trellix Email Security.

    What is most valuable?

    The features I have found most valuable in Trellix Email Security are the content and email security content. All the phishing mail that is detected from the email security is very important. Mail filtering is the most important thing. Whenever I'm sending a mail from one place to another place, the filtering is the most important capability at that time. It is very important to filter the mail whenever it is sent from one place to another place or from email address to another email address, because all organizations want to know if anybody attached their valuable documents or not. If they want to send the mail to another mail address, it will filter any malicious link or any malicious documents that are attached. Receiving mail from another place also needs filtering. These things are very essential for mail security.

    What needs improvement?

    I think Trellix Email Security needs to improve different sides of email security, especially the filtering process. Email filtering needs some required reporting on it. If anybody sends any important file or files attached to the mail, whenever they send it to another person, they require that from restriction files they will not be able to send it through the mail. When they send the mail, they want to get the actual report on that, why they are sending and which way they are sending these emails. Those types of requirements customers want, and that part can be improved on Trellix Email Security.

    What do I think about the stability of the solution?

    Previously, we faced different types of problems when using encryption in ATM security. In ATM security, there are different types of vendors using it in the banking sector customers, such as VRG, Ncore, and CRM, and in most cases, we faced some difficulties with the CRM machine. The CRM machine is one kind of machine that can be used to withdraw and deposit money. Whenever they are using that encryption, encrypting the folder was not happening. Whenever we tried to encrypt a particular folder or file, it took a long time to encrypt. Sometimes it showed as inactive. Whenever we deploy the product from the ePO console to that particular machine, it shows that the product is inactive. After rebooting the system and again deploying the product, sometimes it resolves the problem. We faced difficulties deploying the product in the ATM machine, and the inactive machine also faced this kind of problem. For that reason, we have created different types of cases for different issues. Still, we have some customers that we are also facing that encryption issue. We have also obtained a proper solution for that. However, some cases we are usually using the encryption properly, but sometimes we're facing difficulties deploying the product and working on the deployment.

    Whenever Trellix engineers suggest that, not only using a particular folder, you have to use full folders, such as full disk encryption. Sometimes, full disk encryption is not required for our customers. They want to encrypt different particular folders of different types. This type of problem we faced with previous encryption. We hope that it will be solved next time we get information, and perhaps not only from our side, but also you might get information from other customers.

    What other advice do I have?

    Trellix Email Security is one of the good parts because all our organizations are very aware of email security and they are maybe using some exchange server, which is related to that email security purpose. The other side of the product is data loss security, and there are some other securities. We are working on Trellix Email Security, and some customers have talked about it.