2017-07-23T19:53:00Z

Between AlienVault and LogRhythm, which solution is suitable for Banks in Gulf Region

it_user708033 - PeerSpot reviewer
  • 12
  • 21
PeerSpot user
14

14 Answers

JS
Consultant
2017-07-25T06:15:56Z
Jul 25, 2017

IBM QRadar is the best option because they are using UBA for the quick detection of insider threats, targeted attack and financial fraud instead of tracking devices or security event by using machine learning algorithm.

Search for a product comparison in Security Information and Event Management (SIEM)
MC
Real User
2017-08-22T19:38:46Z
Aug 22, 2017

The http://siemcomparison.com appears to be heavily weighted in LogRhythm's favor; however, I didn't spend much time adjusting the variable options, so perhaps I am jumping to conclusions. Best advice I can give is to consider the normal factors when selecting any software/services vendor. 1. Do they have a significant presence in your industry/market? 2. Can they provide reference accounts you can speak to directly (and privately)? 3. Do the features provided match your requirements/systems being monitored? 4. Will the company be around 3-5 years from now? 5. How big and qualified is your team to run one of these systems? (do you need a co-managed option for 24/7 SOC?) 6. Can you afford the software, staff and upkeep? 7. How will it impact your infrastructure (Storage, Compute, etc.)? There are a lot of good options out there...all with their own good, bad and ugly.

it_user529650 - PeerSpot reviewer
MSP
2017-08-22T19:02:21Z
Aug 22, 2017

Check out InfoTech's SIEM Comparison Tool. While I've seen LogRhythm win multiple RFPs and I have personally had excellent success with it, the tool may help you in your search based upon the scenario and criteria you enter. Their tool compare 10 vendors, consisting of: AlienVault, EventTracker, HP, IBM, LogRhythm, Intel Security, NetIQ, RSA, SolarWinds, and Splunk.

http://siemcomparison.com/

AG
Real User
Top 10
2017-07-25T07:42:57Z
Jul 25, 2017

if ur forced Between Alien Vault and LogRhythm,alien vault is the better

AG
Real User
Top 10
2017-07-25T02:47:25Z
Jul 25, 2017

Alien Vault-2 be sure

it_user126564 - PeerSpot reviewer
Vendor
2017-07-25T00:04:07Z
Jul 25, 2017

I would need more info on this - specifically what regulations are required and what are good additions?

Learn what your peers think about LogRhythm SIEM. Get advice and tips from experienced pros sharing their opinions. Updated: December 2023.
746,670 professionals have used our research since 2012.
it_user628956 - PeerSpot reviewer
Vendor
2017-07-24T18:59:02Z
Jul 24, 2017

I thing you have to go solution Splunk or Qradar Siem is best option

it_user454320 - PeerSpot reviewer
Vendor
2017-07-24T18:13:03Z
Jul 24, 2017

In my opinion, LogRythm can provide more for banks and is easier to deploy/manage.
Some of the most important eval params would be in the case of small to medium banks thus:
- product must be easy to deploy with minimum overhead (personnel)
- Manageability of the product after implementation
- Compatibility with e.g. AS400 which is what most banks use to run (save) the core banking data

The rest is up to each company and their respective requirements.

MC
Real User
2017-07-24T12:18:16Z
Jul 24, 2017

If you are just limiting your options to those 2, you are leaving out key players such as Splunk and Eventtracker (who also provides 24/7 co- management and software for less than most players charge for software alone)

it_user113184 - PeerSpot reviewer
Consultant
2017-07-24T12:17:39Z
Jul 24, 2017

Why only consider AlienVault and LogRhythm? In any case, this is a very open question and I do not see how one could expect anything other than a broad answer... :-(

it_user661260 - PeerSpot reviewer
Consultant
2017-07-24T12:08:50Z
Jul 24, 2017

Define 'suitable'... What do you want to do?

Also consider Splunk and HPE ArcSight, and maybe more solutions.

it_user694656 - PeerSpot reviewer
Real User
2017-07-24T12:05:18Z
Jul 24, 2017

if it is only in between Alien Vault and LogRhythm, Then go with LogRhythm. There are number of parameters we have to consider before finalizing the solution. Centralized or standalone, Multitenancy, log formats, Number of EPS, use cases, Law and Regulatory reuirements, Shipping logs to SIEM tool.
As per my opinion go ahead with LogRhytham .

If you are considering other vedors aswell, Then IBM Q Radar and Splunk is fine. But in middle east Splunk is not that much popular. I experienced banks in Muscat with HP ARC SIGHT and IBM Q Radar.

Let me know if there any help is required.

it_user704328 - PeerSpot reviewer
Consultant
2017-07-24T11:56:00Z
Jul 24, 2017

personally, I never worked on Alien-Vault or LogRhythm, but if you have the third vendor name in mind, can consider Splunk as well.

it_user340269 - PeerSpot reviewer
Consultant
2017-07-24T11:53:32Z
Jul 24, 2017

AlienVault should be the way to go here I think!

You can integrate ANY custom log source to the siem and comes with over 3000+ pre-built correlation rules

Having a good partner to assist with integration and implementation is also key.

... and well, I work with a partner firm who sells and deploy both siem solutions, hence, my candid input on subject matter

Regards
Ibukun

LogRhythm SIEM Platform is an award-winning platform in security analytics. With more than 4,000 customers globally, LogRhythm SIEM is an integrated platform that helps security operations teams protect critical infrastructure and information from emerging cyberthreats. Ultimately, LogRhythm SIEM is an integrated set of modules that contribute to the security team’s fundamental mission: rapid threat monitoring, threat detection, threat investigation, and threat neutralization. LogRhythm SIEM...
Download LogRhythm SIEM ReportRead more

Related Q&As

Security Information and Event Management (SIEM) experts

Olajide Olusegun - PeerSpot reviewer
Nagendra Nekkala - PeerSpot reviewer
Shaamil Ashraff - PeerSpot reviewer
Yusuf-Hashmi - PeerSpot reviewer
LAWAL YUSUF - PeerSpot reviewer
PA
JA
RS