If you were talking to someone whose organization is considering Trend Micro Deep Security, what would you say?
How would you rate it and why? Any other tips or advice?
We largely work with enterprise-level organizations. I advise others to make sure that any recommendations in terms of system requirements that have been given to them are followed properly. I would rate the solution 8.5 out of ten.
It is important to implement this kind of solution because many people do not have security on their servers. This includes the vulnerability patching that should be done. This solution has improved over time. They have been introducing third-party plug-ins and integration, and there is a cloud version available as well. I would rate this solution a seven out of ten.
We would recommend this solution to others. This is based on our security implementation. We are strongly protected through Trend Micro. I would rate this solution a nine out of ten.
It provides a comprehensive feature set and a strong security baseline for us with integrations into other security tools. It integrates with AlienVault USM Anywhere and AWS GuardDuty in our environment.
While it is a good security product, they have to develop better tools to manage it. I have not tried to integrate it with other products.
It integrates well with other products, e.g., we use it on user endpoints, servers, physical servers, VMware, and AWS. We use it on a lot of platforms. Right now, we are using a cloud-based version, which I believe is the AWS version. We have the risk-free version which gives us a web format for us to push out programs to computer servers.
I would recommend Trend Micro. We are happy with them. In the current world, you have to earn the business because it is like a subscription, and they keep us happy. We don't have Trend Micro integrated with any other product except for our internal cloud solution. We just use the AWS version of the product.
Take it for a spin. Ask their support for a demo. The product is really solid. We previously used the on-premise version. Now, we are using it on a SaaS environment (AWS).
Do your evaluation well. After the core evaluation, choose what fits best for your customer. I used to previously work with on-premise solutions and private cloud. Now, I work with AWS.
The best approach is to start off with a node where it is sort of monitoring and looking at stuff, then work your way into the actual prevention and blocking. Because it can turn off a bunch of services without too much effort which can be good, but it can also shut things down. We haven't really gone into the integration aspect yet.
I would recommend it. I have been satisfied, as it is a good product.
Take a good look at all the different options. If there are things which I think teams are familiar with, that always gives a product a bit of a leg up. This is not just from the perspective of the people who support and deploy the product, but even the security teams who may be already familiar with the product and know how effective it is. It gives them a lot more comfort seeing something that they have some background with. Our company uses the on-premise and AWS versions. I work with the AWS version, and have been happy with it. I am seeing more of the end result of it rather than the infrastructure and security perimeter. We decided to use AWS because it was something the teams were familiar with. Our teams, who are currently using Trend Micro, were already familiar with the product and wanted to make use of it in the cloud as well. It was just a matter of continuity. It is integrated with a SIEM, security incident and event management, platform. A lot of the output which comes from Trend Micro, we fed into the SIEM system so the security teams and the monitoring teams have a single pane of glass view into all the security features of our environment.
We started with it on-premise, and now we also have it on the cloud to protect our cloud workloads. The cloud has all the features and functionality turned on by default, which makes it very easy and simple to use. This hosted solution means there's no set up or configuration and they handle all the product and kernel updates for us.
I would rate this product at nine out of 10. There is always a chance that it can be improved. Go for it without any hesitation.
Think about it. It's for the cloud and not meant to be retro-fitted. You're not managing a core server and it's got elastic scalability up and down from a cost perspective. You just pay per agent. If you don't need a server anymore, you don't pay. When you implement and install, really learn how to set up the dashboard. You have to have a good intimate knowledge of your environment. Take the time to learn the product; don't just plug it in because it's not meant for that.