USM Anywhere Reviews

AT&T AlienVault USM is a reasonably priced option compared to solutions like Splunk and IBM Security QRadar. There may be additional fees for increasing the number of sensors or extra storage in the cloud. Its price is in the medium to upper range but is still decently priced compared to other solutions.

Users experienced a positive return on investment.

AT&T AlienVault USM is used as a managed SOC service for clients to detect and respond to potential security incidents. It is deployed to provide complete visibility into logs from various security tools and endpoints and is used for managing logs and vulnerabilities. It is also used for compliance management, threat hunting, and protection. The solution is also employed for patch and vulnerability management.

The valuable features of AT&T AlienVault USM include ease of implementation and having everything in a central place. Users applaud the vulnerability management feature as it provides insight into the environment and helps avoid weaknesses. The reporting feature is also highly valued. The tool also integrates well with other alerting tools. The ability to initiate a vulnerability assessment scan on a machine is unique and valuable. Cloud deployment eliminates previous problems, and the ability to add apps is a great feature. The ELK Stack and file integration are also good. The monitoring feature is all-in-one and provides helpful reporting dashboards. Finally, the tool is great for reporting, especially for audits.

AT&T AlienVault USM needs improvement in the reporting and dashboards, and searchable data should be available for longer than 90 days. Compliance management needs to be broader and the threat intelligence platform should be integrated with more sources. The price could also be reduced. Additionally, the GUI is not user-friendly, integrations could be of higher quality, and the relational database is not suitable for large amounts of data. Users would like the option to build their own connectors and a self-service portal for plugin management.

The setup process for AT&T AlienVault USM is straightforward and can be completed within a few hours to a week, depending on fine-tuning and customization. Some users found it easy to deploy by themselves, while others needed help from a third party or had difficulty with correlation rules and ambiguous reports. Technical experience and understanding of the user guide are necessary for successful setup,

The product is not admin-heavy and requires minimal maintenance and management.

AT&T AlienVault USM is a cloud-based and hybrid solution that offers scalable tiers ranging from 250 GB to 15 TB for monthly log ingestion storage. It supports 15 days, 30 days, and 90 days of online storage with little pricing difference and offers unlimited cold storage after the online storage duration. The solution has rapid elasticity and all the necessary features for cloud-based scalability. Some mention that it is effortless to scale by adding more licenses. Users note that the solution is suitable for small, medium, and large organizations and can be expanded horizontally.

Customer experiences with service and support of AT&T AlienVault USM are mixed. Some have had positive experiences, finding the support team knowledgeable and helpful and others have found the response time and completeness of answers can vary. Customers appreciate the willingness to help in emergencies.

The stability of AT&T AlienVault USM is rated highly with some minor issues reported by a few users.