Gigamon Deep Observability Pipeline and Wazuh are both effective tools for security and observability. Gigamon is favored for its observability features, while Wazuh is preferred for its comprehensive security capabilities and cost-effectiveness.
Features: Gigamon Deep Observability Pipeline offers detailed network visibility, monitoring, and extensive observability features. Wazuh provides robust security features, including threat detection, compliance management, and cost-effectiveness.
Room for Improvement: Gigamon could enhance its integration capabilities, scalability options, and feature set. Wazuh users suggest improvements in threat analytics, documentation, and depth of analytics.
Ease of Deployment and Customer Service: Gigamon is praised for user-friendly deployment and reliable customer service. Wazuh offers straightforward deployment but needs enhanced customer support.
Pricing and ROI: Gigamon's setup costs are higher, justified by its advanced features. Wazuh shows quick ROI and lower initial setup costs, providing significant value at a lower cost.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
The technical support by Gigamon Deep Observability Pipeline is good because it has a local architect in my area.
They responded quickly, which was crucial as I was on a time constraint.
There is no dedicated technical support for Wazuh as it is open source.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
The stability of Wazuh is largely dependent on maintenance.
The indexer frequently times out, requiring system restarts.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
Wazuh could improve by creating videos on YouTube covering installation, use cases, and integration of third-party APIs for different scenarios that other SAAS services provide.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Wazuh is completely free of charge.
Totaling around two lakh Indian rupees per month.
Wazuh is free to use, but there are licensing fees for third parties.
The Pipeline's Comprehensive Insights into data flows have helped improve operational efficiency and security.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
Wazuh is a SIEM tool that is highly customizable and versatile.
Gigamon Deep Observability Pipeline is a comprehensive network visibility solution that provides real-time insights into network traffic. It offers SSL inspection and mobile network monitoring for traffic monitoring purposes. The solution optimizes networks, aids in security inspection, and improves firewall performance. It is praised for its performance, power, straightforward integration, stability, and ease of initial setup.
With Gigamon, organizations can gain complete visibility into their network traffic, identify potential threats, and take proactive measures to prevent them. The solution is ideal for organizations of all sizes, including enterprises, service providers, and government agencies.
Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.
It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.
Wazuh Capabilities
Some of Wazuh’s most notable capabilities include:
Wazuh Benefits
Some of the most valued benefits of Wazuh include:
Wazuh Offers
Reviews From Real Users
"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited
“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
