We performed a comparison between Cisco Threat Grid and USM Anywhere based on real PeerSpot user reviews.
Find out what your peers are saying about Recorded Future, Check Point Software Technologies, Microsoft and others in Threat Intelligence Platforms."The most valuable feature is the integration with firewalls. It's integrated with AMP so the ecosystem with equal solutions from Threat Grid is good with CISCO products."
"It is easy to implement and is very scalable. It also comes with very good documentation. Cisco provides good technical support as well."
"The simplicity of implementation is valuable."
"Log-monitoring and alerting enable us to know when things happen that we need to know about."
"It allows for a lot of out-of-the-box features: vuln scanning, HIDS/HIPS, and IDS."
"Vulnerability scanning helped out shortcomings of what was not patched in the past and what needed to be patched. This assisted with fine tuning the environment for compliance."
"The ease of implementation is the most valuable feature."
"AlienVault has an advanced component within one package. With this, we can cover more area with one solution."
"The Event Correlation and vulnerability scans have been the most useful. As a 24/7 SOC, we use the incoming alarms to give an overview of suspicious traffic going through the network. It's easy to look at the correlated events and see the broad picture of traffic for that customer. Vulnerability scans are good for providing patch and remediation guidelines to keep customer systems secure."
"This is a USM, so being able to get all the features under one roof makes it a good product with good new features."
"I can easily check (in one place) all the logs and data in relation to attacks. It also gives me an overview if a server is not configured properly."
"I was told that the user interface could be more user friendly and easy in comparison to that of competitors. I remember that there is a competitor who has a much easier interface for many users to interact with."
"They come in and have multiple management solutions but it doesn't scan or doesn't have the ability to look at every file extension."
"Support must be improved."
"AlienVault cannot automatically respond to threats like other SIEM solutions, such as Sentinel and LogRhythm. Most of our clients are far away, so it's often challenging to handle alerts when they come up on our dashboard."
"The vulnerability reporting needs to have options to be able to sort or customize the output."
"Support can be slow at times, but the quality is high. Posted knowledge base articles could use improvement."
"Plugins could be better utilized, as some of them do not recognize all logs."
"The reporting is mediocre and is something that needs to be improved."
"The UI and overall processes need a little bit more love. This shows in the error banners that come up when you select certain things. There isn't a day that goes by that the UI doesn't error out and I can't view events for an alarm."
"It should be able to communicate with other security solutions to stop threats."
"Sometimes the log is unclear, and the report is a bit ambiguous."
Cisco Threat Grid is ranked 21st in Threat Intelligence Platforms with 3 reviews while USM Anywhere is ranked 11th in Security Information and Event Management (SIEM) with 113 reviews. Cisco Threat Grid is rated 7.6, while USM Anywhere is rated 8.4. The top reviewer of Cisco Threat Grid writes "Has good integration with firewalls but has limited file extensions". On the other hand, the top reviewer of USM Anywhere writes "Easy to use and affordable". Cisco Threat Grid is most compared with CrowdStrike Falcon, Microsoft Defender Threat Intelligence and Palo Alto Networks AutoFocus, whereas USM Anywhere is most compared with Wazuh, AlienVault OSSIM, IBM Security QRadar, Splunk Enterprise Security and Microsoft Sentinel.
We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
