USM Anywhere Reviews

The vulnerability scans and network scans and alarms.

We were able to use the product to identify two security issues already. We had one situation where the appliance identified that a workstation on our network was infected with a DNS Blackhole virus. We were able to remove the computer from the network and replace it. We've also been able to use the scanning to identify security issues and take care of them before they become a problem.

I would like to see it be able to run on any hardware via just an installer.

We've had it in place for a year now.

Not really, but we had their engineers and a consultant helping.

We have not.

No.

Very high. Any issues I've had they've been quick to answer and help.

Their support is wonderful. I've had a couple of questions and had them answered very quickly.

No.

Very straightforward.

We implemented through a vendor. When we bought the product they included hours from a vendor for the implementation.

Unknown.

Nothing to advise.

No. We just had to decide if we wanted this or had time to work with it.

OTX is a great module that lets staff maintain and monitor updates regarding events in the infrastructure and takes decision to improve the security perimeter.

Report modules now allows us to get a visualization of the activity of the main assets to continue the business and lets us take decisions to the stakeholders.

Report modules now lets us get a visualization of the activity of the main assets to continue to improve the business and reduce the risk of failures.

Around 2 years ago and It allowed me to grow not only technologically but also it has helped me to improve process in attention to information security events in the company.

Yes, but it was with integration with other devices but the AlienVault TAC did a great job to resolve the problems.

Honestly this solution was very stable and there were no problems whatsoever

I have not had the opportunity to do an implementation of scalability, but, with the experience with 2 years ago managed the solution, I don't believe we will have problems to deploy.

The service was excellent and always showing excellent treatment and availability.

The service is excellent the support requested really is quick and very efficient

It was way very fast and straightforward, thanks to the great supported gave fot the AlienVault TAC

This integration was made with both teams, and I think the deploy was very easy due the great knowledge of vendor team, them gave us a great explanation about of the all modules and the best practice to deploy the solutions.

It has not yet been measured.

Considering the scalability with the other solutions in the market, I think this solution really have a great price to all size of medium and big enterprise.

Yes, I did, the solution considered was HPE and Splunk

It has allowed us to centralize our logging. We had used previous products and found AlienVault centralized the logging for our security. Additionally, we are better able to meet our compliance needs.

We use several features extensively. Logging, vulnerability scanning, file integrity monitoring, and threat information.

I would like to see some better ways to report on the information. There are many reports included but would be nice to have better access to the data. Customizations are possible but don't always allow us to report on what we need.

We have a new remote sensor sending a large amount of data. We have seen some slowness but the sensor is new and we tracked down the slowness to network connectivity. The server has handled all we could throw at it.

Working well with everything we have sent to it.

Customer Service:

I have enjoyed working with the client support folks. I have had really good experiences with them even having them help with plugins when they weren't working.

Technical Support:

Very good.

ManageEngine Event Log Analyzer

The wizard setup was great and helped deployment go well.

Received training and did in-house. Also had some follow-up consulting that helped to do a health check on the system that was very valuable. Consultants did a great job of helping us become more comfortable.

Not measured.

Look at other products and AlienVault will have you coming back as it did us.

Yes, many other vendors - its been a while so I don't remember them all.

No, good solid product

Policies have been very valuable. We use them as alerts on many compliance requirements and concerns.

• Identifying the sending of clear text account information
• Identifying and fixing vulnerabilities that we were not aware of

We have been using AlienvVault for the past two years.

There was an issue in setting up the log storage location.

I did not encounter any issues with stability.

I did not encounter any issues with scalability.

There is excellent customer service and we have never had a complaint.

Technical support has a very knowledgeable support staff. Everyone we have worked with has really displayed great knowledge of this product.

We used different solutions. Pricing was an issue and support was limited.

We had the installation done by support when we purchased the solution.

The implementation was though the vendor and they were great to work with. They were able to answer any questions that we had.

The pricing was great and we were not disappointed.

We did not evaluate other solutions.

Thank you for the great solution that you provided for us.

The dashboard.

The single pane of glass that shows threats that are in the environment.

Sub menus: Sometimes you really have to drill down to get to where you want to go.

We have been using this solution for three years.

I did not encounter any issues with deployment.

There were stability issues due to lack of memory.

I did not encounter any issues with scalability.

I would rate customer service as excellent.

I would rate technical support as excellent.

We did not use a previous solution.

The setup was straightforward.

We did the implementation in-house.

The ROI was priceless.

N/A.

We used other solutions, but they couldn't compare: QRadar, Splunk, ArcSight and LogRhythm. All were way too expensive compared to AlienVault USM.

All companies should buy an AlienVault SIEM. It is well worth the investment

• Real-time email alerts
• Event correlations
• Log management
• System monitoring
• Network monitoring
• Up-time monitoring
• OTX threat intelligence
• Vulnerability scanning reporting

There are too many to list.

It has given us insight into our network:

• What is on it
• What traffic is on it
• What is happening on our servers

It is one location to view many things.

The menu system can be a little confusing, until you use it for a while. Such as at the top right there is a “settings” menu. Which is more of a user profile menu. I would like that to say what it is “My Profile.” Under the “Settings” menu I had rather see true system settings. Such as User Accounts, Configuration Backups/Restore, SMTP server Setting, AD (LDAP) settings, Password Policies, and other true System Settings. There is also a large button at the right called “Configuration.” I would change that to something like “Deployment Settings”. Under this menu I would have settings specifically related to “this deployment of AlienVault”. Such as Plugins, Sensors, Remote Locations, and Services Running on this deployment (with the ability to Enable/Disable these and Start/Stop these). Also here I would have a sub-menu called “System Performance” with metrics (CPU usage, Swap, Ram, database health (with cleanup and compress options), Network Traffic In/Out performance for each NIC, and etc. Currently Threat Intelligence items are also under Configuration. I would make a separate “Threat Intelligence” menu and expand upon it to cover more items. Just my thoughts.

I guess it comes down to my being old school and would like traditional menus. Such as text-style drop-down menus from the top and not the huge big button menus. Like File, Analysis, Environment, Reports, Settings, Deployment Settings, Preferences, help, and etc. The text-type tend to be much more explanatory as to what is in them below. I know a lot of software has gone to the big button/ribbon style menus (MS Office). I assume that is to make things mobile friendly. To me it makes navigation less easy and more confusing and the big buttons take up too much screen real estate that I have rather see for other things such as alarms and real-time system activities.

We have been using this solution for just over one year.

There have been no major deployment issues.

There have been no major stability issues.

There have been no scalability issues. We recently moved from 150 asset licenses to unlimited and the process was very easy.

Customer support is excellent. Support has been good for simple config issues and for alert questions. They have a great forum base as well as live support.

I would rate technical support as very good.

We used hardware based as well as open source solutions before. We still use some of them, but AlienVault allowed us to consolidate a lot of services into one.

The installation was straightforward. We use the VMware base All-In-One USM. It was quite straightforward. It required a little customization, but it was not too difficult to sort through.

It was a joint collaboration.

We saw a positive ROI within six months, especially in terms of manpower.

Just give them a call. They can work with you in many ways to help you get what you need.

We looked at several options. And we were already using several of them, both paid and open source. AlienVault allowed us to combine several solutions into one.

If you are interested, sign up for some of their webinars, download the free trial or open source versions, and play with it.

Threat detection powered by signatures and advanced correlation rules.

It helps to identify external and internal security threats to the organization, on time.

• Accuracy of threat detection
• Advance reporting
• Reliable asset and vulnerability management feature

We have been using this solution for three years.

I did not encounter any issues with deployment.

I did not encounter any issues with stability.

I did not encounter any issues with scalability.

Excellent.

We received average support. As observed, the support engineers take a long time for issue resolution.

I have not used any other solutions before.

The setup was simple and straightforward.

We had an in-house implementation.

It has not yet been measured.

The pricing and licensing are at its best in the market when compared with other vendor's SIEM products.

We evaluated ArcSight, RSA Security Analytics, and Splunk.

• Vulnerability scanning
• Cross co-relation
• Reports in a grouped manner
• OTX for threat intelligence

It helps to monitor the entire office in in a single point.

The report section needs to be improved. Most of the correlation rules are based on the NIDS event, which needs to be improved. In other words, we have to use the device logs also.

We have been using this solution for almost two years.

I did not encounter any issues with deployment.

I did not encounter any issues with scalability.

I did not encounter any issues with scalability.

Customer service is available 8 to 5 EDT. In emergency cases, it is difficult to reach them. Response-wise, it is good. I would give customer service a rating of 7/10.

I would give technical support a rating of 7/10.

We did not use a previous solution.

The setup was very straightforward.

We did it in-house.

N/A/

I feel that the license cost was a bit high, but compared to others, it is less. For mid-range companies, they feel that the cost is high, but that it is worth it.

We did not evaluation any other options.

I do not have any additional comments.