Valuable features such as threat monitoring and threat feed from McAfee. It will automatically block the threats based on its threat severity. Alerts will be analyzed and hunted if there are occurrences on other hosts. Using McAfee SIEM, you may know if the technology controls implemented is working effectively since you will have a view on all mitigated threats from the firewalls as well as feed from end-point protection.

The product’s most valuable feature is log monitoring.

The product works better than other vendors available in the market. It can be easily deployed with the other solutions.

The support I have received from the vendor has been great.

The most valuable feature of the solution is that the integration is really easy. Using the product is very easy. The product is user-friendly, but its use needs to be planned.

The most valuable features of McAfee ESM are intrusion detection, malware protection, and the device controller.

It is user-friendly. The notification part of McAfee ESM is very easy. 

The most valuable feature is that if the scanning does find something, it quarantines it. Then you can decide what you are going to do with it. It doesn't just stop everything but actually tells you there's a quarantine, that these files are in quarantine. You have to deal with them. That's good.

If you don't keep up with updates, they pop up until you actually do something. That's a good thing because we want protection.

The most valuable feature in ESM is its search and reporting feature. It's really nice.

The ease of use is the most valuable feature. Over the years I have always been using this solution and have become comfortable with it.

VirusScan Enterprise provides protection against real-time malware attacks. 

We use it for logging the network traffic, when required.

It blocks the things which are not to be allowed. It has an adaptive mode where it learns for itself.

The most valuable feature is the correlation rules.

This product is easy to use.

The security can't be compromised. The security features on offer are the most valuable feature and are why it's really worth having as a product like this in our organization.

The most valuable feature is the capability to correlate different events from different platforms that we feed into it. It makes it easier to engineer the box on our side so that we can realize what is happening and do something about it. It gives us the tools to know what's happening and make a change in one of the downstream platforms to reject a connection or the like.

The most valuable features of this solution are the logging and the dashboards.

This solution integrates easily and very well with other technologies. We are creating custom connectors for some of the technologies that our customers are using.

Trellix ESM is very user-friendly.

Compared to other solutions, the user interface is good.

The correlations that it discovers are helpful.

The reporting is good.

There are more than two hundred out-of-the-box rules.

We have been using the advanced correlation agent.

The Dashboard Views are the most valuable feature since it visualizes network and security-related use cases we develop. This visualization clearly articulates the current and past state of network traffic and correlation rule hits.

I also value the ability to integrate with third-party threat feeds, including McAfee’s feed, in order to sift through the data to find any anomalies. Through this process, we have further hardened the network security and perimeter security of our clients.

Dashboards, which can be customized to display alerts and queries, and rules, which trigger alerts, are the most valuable features for us.

It's SIEM. Obviously, normalization of data is the biggest factor.

Doing Incident analysis in my opinion with ESM is easier than other solutions. There are a lot of ways to build queries and a great filter engine; if you provide ESM with the Advanced Correlation Engine and Global Threat Intelligence you can raise your infrastructure to be a complete advanced SOC.

McAfee as a whole is a good solution.

• Ease of use.
• Quick training period.

The ability to secure my data is the most important feature.

It is easy to use. I just need to enter the username and the password and it protects my data.

I like the ease of deployment.

It is easy to use and deploy. It comes with user-friendly manuals.

This is the first SIEM product that I have used. My impressions so far are that I like the vendor support from McAfee and the overall architecture looks simple.

The most valuable feature for us is that it comes with many correlations, reports, and dashboards already available. It's also very easy to use.

Ability to create own views. Statistical (normalised) views help to highlight inconsistencies, which may need further investigation

The easy interface is the most valuable feature.