App Review Trend Micro Worry-Free XDR Services

[TuxTalk]

Bought a monthly subscription to Trend Micro Worry-Free XDR Services:

Trend Micro Worry-Free XDR Services

What makes Trend Micro Worry-Free XDR unique?​

Trend Micro Worry-Free XDR is the latest, strongest, and most comprehensive version of Worry-Free yet. With Worry-Free XDR, Trend Micro is the only security vendor to deliver native detection and response across email and endpoint.

It goes beyond EDR and the Endpoint​

With today’s EDR technology, IT administrators typically have to spend a lot of time and resources reviewing and investigating all alerts. IT administrators at small and medium-sized businesses don’t have the time to do this. While some EDR solutions offer automated processes, they do little to help in the broader context of detection and response when you want to investigate beyond the end-user. Not so with Worry-Free XDR.

Worry-Free XDR automatically correlates data from sensors that collect detection and activity data across endpoint and email, the #1 threat vector.

---

What Worry-Free can do for your business​

Trend Micro Worry-Free XDR
Trend Micro Worry-Free Services Advanced
Trend Micro Worry-Free Services

---

100% SaaS​

Complete SaaS solution with no servers to install or maintain

---

Endpoint Security​

Secures Windows (desktops and servers), Mac, iOS, and Android devices by using high-fidelity machine learning with a blend of threat protection techniques for the broadest protection against ransomware and advanced attacks.

---

Email Security​

Protects Microsoft Exchange, Microsoft Office365 and other email solutions in real-time. Stops targeted attacks, spam, phishing, viruses, spyware and inappropriate content from compromising your business.
This includes Trend Micro's latest Business Email Compromise and Data Phishing capabilities.

---

Collaboration Security​

Protects online collaboration tools from unknown threats and secures corporate data from intentional and accidental loss.

---

Cross-Layer Detection and Response (XDR)​

Detection, response, and investigation capabilities in a single agent across email and endpoints. Features automated root-cause analysis, including recommended step-by-step actions, enabling rapid containment. Also includes advanced threat detection using cloud sandboxing.

---

Worry-Free Services protects against even the newest, most complex attacks​

Distinguishing between good and evil in the cyber world has become increasingly complex. Traditional antiviruses offer no protection against the new, sophisticated attacks. Next-generation technologies offer some protection but are by no means foolproof.

Trend Micro Worry-Free Services uses a mix of advanced security techniques to eliminate security gaps across all user activity and endpoints. It constantly learns, adapts, and automatically shares critical threat intelligence across your environment. In short, this product allows you to be Worry-Free.

Easy to manage and comprehensive security​

Powered by XGen security, Worry-Free Services delivers a cross-generational mix of threat defense techniques and connected threat defenses that continuously learn, adapt, and automatically share threat intelligence across your environment. This gives you detection and response as follows:

• Easy to manage
  • Lighten the workload for overburdened IT teams
  • Provides cloud-based protection and automatic updates
  • Simplifies tasks with an optimized user interface
• Extended security
  • Protects against ransomware and advanced attacks
  • Identify hidden threats with AI-powered, automatic data correlation for XDR/MDR (managed detection and response)
  • Delivers cloud-based protection that goes beyond the endpoint for an all-in-one solution

1 device per license.

Key Features of Worry-Free Services​

Device Security​

• Endpoint Detection and Response (EDR) (Endpoint Sensor add-on)
• Advanced Threat Protection and Web Security
• Mobile device security and management

User protection​

• Application Control
• Web reputation
• URL filtering

Data protection​

• Protection against data loss
• Device control
• Ransomware Protection
• Quickbooks Security

Benefits of Worry-Free Services​

Advanced security​

• High fidelity machine learning that analyzes files not only before execution but also at runtime
• More reliable detection of advanced malware including fileless, cryptocurrency mining, ransomware and more
• Behavioral analysis against script, injection, ransomware, memory and browser attacks
• Vulnerability protection that automatically shields endpoints against known Microsoft application vulnerabilities, significantly reducing threat exposures

Safeguards your sensitive data​

Integrates data loss protection (DLP), encryption management, and device control capabilities that cover a broad range of devices, applications, and file types. This ensures you have maximum visibility and control, and confidentiality and compliance with General Data Protection Regulation (GDPR), Health Insurance and Portability Assurance Act (HIPAA), and other rapidly evolving regulations. It also includes granular policies for device control and data management, and management and visibility for Microsoft BitLocker.

Stops malicious software with application control​

• Use application monitoring, safelisting and lockdown
• Blocks unauthorized or unknown applications, such as ransomware, from carrying out attacks
• Enforces rules that are easy to manage and simple
• Allows you to run unauthorized applications

Simplifies setup and management​

• Provides teams with a single console with no add-ons required
• Includes multiple modules for comprehensive protection: Predictive machine learning, behavior monitoring, data loss prevention (DLP), Device control, Firewall, URL reputation, Web category filtering, Disk encryption, Vulnerability protection, Application control

 

[Bot]

Thanks for sharing your experience with Trend Micro Worry-Free XDR Services. It seems like you appreciate its comprehensive features like native detection, automated data correlation, and extensive security techniques. It's great to hear that it's been a reliable solution for your business.

 

[TuxTalk]

Test results coming soon.

 

[TuxTalk]

Main Console to set the settings for the Smart Agent Client.

Policies and settings

Some test run with new Malware and some know sites. Trend also blocks on Machine Learning.

Runs very very light on the system.

Protection wise this way further then the Home solutions Maximum Security.

Client :

logs:

Alerts:

 

[Andrew3000]

Is there a minimum number of seats?

 

[TuxTalk]

Is there a minimum number of seats?

I have 2 seats, with my reseller you get 5, if you use 1 you only pay for one. If you need more then just install the Smart Agents on more computers , then need to pay for them.
If you just install 1 Smart Agent, just pay for 1.

 

[TuxTalk]

Is there a minimum number of seats?

The best thing is, you configure in the webclient all the settings, so just install the Smart Agent and automatically all the settings will be pushed to the clients/seats.

 

[TuxTalk]

Extended test by @Trident coming soon !
@Shadowra , if you are interested to test send me a pm,

 

[Shadowra]

Extended test by @Trident coming soon !
@Shadowra , if you are interested to test send me a pm,

Contact me

 

[TuxTalk]

After a whole day testing with @Trident and @Shadowra we found out the XDR version is not as good as it seems.
Basically its the same as the way cheaper Maximum Security from Trend Micro. And in the test from @Shadowra and @Trident it failed and the system became encrypted,
The thing is, the file that encrypt the system was well know by almost all AV vendors.

VirusTotal

VirusTotal

www.virustotal.com

As you can see, still no detection from TM.

So we can do nothing else but Not recommed this version.

 

[Trident]

Trend Micro missed an executable with over 40 detections on VirusTotal (Python Stealer). There was no detection from any of the components. At this point, I reconfirmed by belief that TM is just not good enough. Additional observations, further to the mediocre protection:

• Console is very basic and can not be classed as an EDR at all, let alone XDR.
• Agent is very slow to deploy. After deploying, most of the components are inactive and take long to activate. All in all, it takes about 20 min to get everything up and running. For one system it’s ok, but if I have to deploy on a few, I will easily waste few hours.
• Agent is buggy, for example there was an alert I couldn’t close until reboot.
• Uninstall is nightmare, I only managed to remove through Revo forced uninstall, the procedure was buggy.
• There is high performance impact, constant CPU activity, at one point 16% with no explanation what’s going on
• Cleanup of threats not deep enough and threat investigation is not automatic, it needs to be launched manually
• Very much signature-based, very little power against unknown malware (struggling even with known one)

I just don’t see how this product could be sufficient to protect even a very small business, let alone a large one.

 

[Zartarra]

The worry-free is not so worry free. It is slow and the client UI is very outdated. It was years ago so and it seems it is still the same. For business I recommend their Apex one or Vision One productline. For small business this can be overkill but there are enough competitors on the market with cheaper prices and that gives you a better security compared to "not so" Worry-Free.

 

[TuxTalk]

Thanks for the fun testing @Shadowra and @Trident .. lets do it again soon !

 

[Shadowra]

After a whole day testing with @Trident and @Shadowra we found out the XDR version is not as good as it seems.
Basically its the same as the way cheaper Maximum Security from Trend Micro. And in the test from @Shadowra and @Trident it failed and the system became encrypted,
The thing is, the file that encrypt the system was well know by almost all AV vendors.

VirusTotal

VirusTotal

www.virustotal.com

As you can see, still no detection from TM.

So we can do nothing else but Not recommed this version.

I'll release the video tonight or tomorrow

 

[Trident]

The worry-free is not so worry free

Exactly what I was thinking. And it was fun working with @Jengo and @Shadowra , as always.

Btw, a while ago I tested Vision One Workload Security and protection was the same disaster.

 

[SeriousHoax]

Really shocking result. @Jengo Can you refund a one-month subscription plan?

 

[TuxTalk]

Really shocking result. @Jengo Can you refund a one-month subscription plan?

No need, we were all still in trial mode.