Shadowra
Level 42
Verified
Top Poster
Content Creator
Malware Tester
Well-known
High Reputation
Forum Veteran
Trellix is a global cybersecurity company specializing in advanced threat detection, prevention, and response for businesses and organizations.
Trellix Endpoint Security provides endpoint protection designed to defend systems against malware, ransomware, exploits, and other advanced cyber threats.
In this review, I take a closer look at Trellix Endpoint Security and explore its security capabilities.
Let's find out!
Interface :
Trellix's interface is quite colorful and simple, even though it's a veritable treasure trove of settings...
By default, the antivirus seems to be well configured, so I'll leave it as is.
The suite is relatively lightweight.
Malware URL : 8/8
2 dead URLs; the rest were blocked either by the web filter or by the antimalware engine.
Fake crack : 1/1
The dropper is not blocked (SFX archive) because it is password-protected.
Trellix successfully detects all three pieces of malware that attempt to install themselves.
Malware Pack : 49 out of 101 threats remain
Let's be honest: even though Trellix is the enterprise version of McAfee, it doesn't fully leverage its database and its AI and machine learning cloud services.
Although it can hold its own (it blocked several injections thanks to its ATP technology), the machine quickly becomes infected.
Even though it blocked two processes, the infection hasn’t been eliminated because it’s still in memory… Too bad.
Final scan :
Trellix : 0
KVRT : 7 (Memory infected !)
Symantec : 8
EEK : 2
Final opinion:
Trellix is a comprehensive security suite, but it doesn't fully leverage the potential of its flagship brand, McAfee.
Although it holds its own with its behavioral protection, that protection can't stop an active infection (as seen with CasPol.exe, for example), which is a major drawback.
Mixed results. Even the memory is infected...
Trellix Endpoint Security provides endpoint protection designed to defend systems against malware, ransomware, exploits, and other advanced cyber threats.
In this review, I take a closer look at Trellix Endpoint Security and explore its security capabilities.
Let's find out!
Interface :
Trellix's interface is quite colorful and simple, even though it's a veritable treasure trove of settings...
By default, the antivirus seems to be well configured, so I'll leave it as is.
The suite is relatively lightweight.
Malware URL : 8/8
2 dead URLs; the rest were blocked either by the web filter or by the antimalware engine.
Fake crack : 1/1
The dropper is not blocked (SFX archive) because it is password-protected.
Trellix successfully detects all three pieces of malware that attempt to install themselves.
Malware Pack : 49 out of 101 threats remain
Let's be honest: even though Trellix is the enterprise version of McAfee, it doesn't fully leverage its database and its AI and machine learning cloud services.
Although it can hold its own (it blocked several injections thanks to its ATP technology), the machine quickly becomes infected.
Even though it blocked two processes, the infection hasn’t been eliminated because it’s still in memory… Too bad.
Final scan :
Trellix : 0
KVRT : 7 (Memory infected !)
Symantec : 8
EEK : 2
Final opinion:
Trellix is a comprehensive security suite, but it doesn't fully leverage the potential of its flagship brand, McAfee.
Although it holds its own with its behavioral protection, that protection can't stop an active infection (as seen with CasPol.exe, for example), which is a major drawback.
Mixed results. Even the memory is infected...
