For Security Onion, setting up and configuring the system can be quite challenging for newcomers due to the need for a grasp of networking and security concepts. The specific challenges that make the setup and configuration difficult include the system demanding resources to function, which might be a challenge for smaller companies. Although there is support from the very proactive open-source community, tackling intricate problems usually requires technical knowledge.
Scientist at a educational organization with 10,001+ employees
Real User
Jan 15, 2024
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.
Security Onion's user interface could be improved. The solution's general reporting should be made simple and better-looking in terms of graphics so that we can update our senior management.
Log Management centralizes the collection, analysis, and storage of log data from diverse systems, providing valuable insights into system performance and security events. It enables organizations to enhance visibility and streamline their IT operations. A comprehensive Log Management solution offers centralized log data aggregation, simplifying the monitoring of network infrastructure and applications. By providing real-time analytics, these solutions help detect anomalies, track trends,...
For Security Onion, setting up and configuring the system can be quite challenging for newcomers due to the need for a grasp of networking and security concepts. The specific challenges that make the setup and configuration difficult include the system demanding resources to function, which might be a challenge for smaller companies. Although there is support from the very proactive open-source community, tackling intricate problems usually requires technical knowledge.
The initial setup of the solution is a little bit difficult.
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.
Security Onion's user interface could be improved. The solution's general reporting should be made simple and better-looking in terms of graphics so that we can update our senior management.