Gigamon Deep Observability Pipeline and Wazuh compete in the network and security monitoring categories. Wazuh has the upper hand due to its robust features and perceived value for money.
Features: Gigamon Deep Observability Pipeline offers comprehensive network traffic visibility, optimal data flow management, and smooth integration with existing networks. Wazuh provides strong security monitoring, open-source flexibility, and effective threat detection and management.
Room for Improvement: Gigamon could enhance its user interface, provide better traffic flow analysis, and include more intelligence in visibility tools. Wazuh can improve its documentation, enhance support for specific compliance standards in different regions, and simplify integration processes.
Ease of Deployment and Customer Service: Wazuh features a flexible deployment model for various systems, quickly boosting security bases. Gigamon requires structured setup for efficient coverage. Both offer responsive support, but Wazuh's adaptable deployment provides an edge.
Pricing and ROI: Gigamon's higher initial costs offer potential ROI via network insight and performance boosts. Wazuh, with lower setup costs and an open-source model, attracts budget-conscious organizations, offering a sound ROI through advanced security capabilities without significant financial commitments.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
The technical support by Gigamon Deep Observability Pipeline is good because it has a local architect in my area.
They responded quickly, which was crucial as I was on a time constraint.
There is no dedicated technical support for Wazuh as it is open source.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
The indexer frequently times out, requiring system restarts.
The stability of Wazuh is largely dependent on maintenance.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
Machine learning is needed along with understanding user behavior and behavioral patterns.
Wazuh could improve by creating videos on YouTube covering installation, use cases, and integration of third-party APIs for different scenarios that other SAAS services provide.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Wazuh is free to use, but there are licensing fees for third parties.
The Pipeline's Comprehensive Insights into data flows have helped improve operational efficiency and security.
The fact that it is open source means it is always being expanded, which is beneficial for customizing solutions for individual client requests.
With this open source tool, organizations can establish their own customized setup.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
| Product | Market Share (%) |
|---|---|
| Wazuh | 10.2% |
| Gigamon Deep Observability Pipeline | 0.2% |
| Other | 89.6% |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 1 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 26 |
| Midsize Enterprise | 15 |
| Large Enterprise | 8 |
Gigamon Deep Observability Pipeline is a comprehensive network visibility solution that provides real-time insights into network traffic. It offers SSL inspection and mobile network monitoring for traffic monitoring purposes. The solution optimizes networks, aids in security inspection, and improves firewall performance. It is praised for its performance, power, straightforward integration, stability, and ease of initial setup.
With Gigamon, organizations can gain complete visibility into their network traffic, identify potential threats, and take proactive measures to prevent them. The solution is ideal for organizations of all sizes, including enterprises, service providers, and government agencies.
Wazuh offers comprehensive security features like MITRE ATT&CK correlation, log monitoring, and cloud-native infrastructure. It ensures compliance and provides intrusion detection with high scalability and open-source flexibility, ideal for businesses seeking robust SIEM capabilities.
Wazuh stands out in security information and event management by providing efficient log aggregation, vulnerability scanning, and event correlation against MITRE ATT&CK. Its capability to integrate seamlessly with environments, manage compliance, and monitor files makes it suitable for cloud-native infrastructures and financial sectors. Despite its technical support needing enhancement and opportunities for improving AI integration and threat intelligence, its open-source nature and cost-effectiveness make it appealing. Users can leverage custom dashboards powered by Elasticsearch for precise data analysis, even though there is a desire for a more user-friendly interface and better enterprise solution integration. Deployment may be complex, but its features contribute significantly to fortified security postures.
What are the essential features of Wazuh?Industries like finance and cloud infrastructure heavily utilize Wazuh for its security strengths. By monitoring endpoints and ensuring compliance with frameworks, companies can improve security posture and swiftly detect anomalies. The platform's focus on event correlation and alerts for security incidents is particularly beneficial.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
