SolarWinds Security Event Manager Reviews

We had to integrate with other teams, and the infrastructure deployment didn't take long. The integration involves learning with different teams, networking, and configuring various network devices and servers. Infrastructure deployment only took one or two days. The deployment involves servers, such as the SolarWinds server. However, regarding networking and mapping, integrating all seven service centers took two to three weeks.

We have automated threat detection in the Alliance Security, Antoinette. However, if these features could be further enhanced, it would simplify my work, potentially allowing me to allocate more time to address complex issues. While we possess a robust automated web detection system, I have encountered some use cases where it does not perform as expected.

The only issue is the licensing cost, which is a bit higher. Scaling is very easy as long as we have additional resources and the infrastructure can accommodate the resources we commit to scaling. We may need to purchase additional licenses for configurations.

I use the solution in my company as it is where we can see what is happening in the network and correlate the information received.

I think the customization area in the tool can be considered as an area of concern where improvements are required

In the future, I want to see the tool have better customization abilities with some third-party vendors. For the on-premise version of the tool, the UI should be improved.

We use the solution to monitor a large portion of the IT landscape, which includes our Windows servers, SQL database servers, and IBM servers. Some application-related monitoring is also done through SolarWinds Security Event Manager.

The most valuable feature of the solution is its flexibility because it is a very versatile product. You can use it to monitor Microsoft or Windows-related things. The solution helps you monitor database instances, application instances, other customer application things, Linux servers, IBM servers, and Oracle servers.

I started using it in response to a job requirement, specifically related to my experience with a team product focused on IT projects and data loss prevention software.

It is an effective tool, serving as a vital component of my Unified Threat Management strategy. It plays a crucial role in applying multiple layers of security to my network and responding effectively to security threats. The security features are robust and responsive, particularly in dealing with various attacks on my network. The management control is commendable, providing a centralized view of all aspects. The user interface is user-friendly, making it easy to navigate and operate.

We use SolarWinds to comply with audit requirements because we must centralize all log collection. We don't use it on a day-to-day basis, but we employ it when we need to investigate, troubleshoot, monitor, or do anything else requiring a fixed-log or event management solution.

Initially, we had a five-person team, but we're still deploying it to other locations. The rest of the technical team will be using it, so ultimately, we will have around 50 users. I don't think there's a licensing limitation on the number of users who can access the system.

SolarWinds is effective for server, network, and log monitoring. It's also good for IP address management. We also have a patch manager, but we're still working on getting that operational. 

I use SolarWinds for log and incident monitoring. More than 100 engineers at my company are currently using it. 

SolarWinds has provided greater visibility into incidents and activities on the network. It's crucial to have visibility into user activities, logins, event field attempts, etc.

Its use case is to identify and help prevent and block known spyware or ransomware sites. Ransomware sites typically have bad IPs or domain names.

In terms of the version, I have had our clients log in and update the version a few times.

Some of the rules are most valuable because you can be notified about various things, such as spyware or things that are going on in the internal network.

We use SolarWinds as a kind of SIEM solution, so I don't have other additional security needs. Lately, we've been exploring other solutions. We are a Managed Security Services Provider, and we have nine people predominantly working on that solution. We also have team members who work on multiple solutions.

Lately, all of the solutions continue to improve, so I believe SolarWinds will also improve. But all the solutions need to have the same features, so I don't see any specific feature that needs to be more user-friendly. There is no unique element that makes SolarWinds better than the others.