AlienVault OSSIM vs. Egnyte

If this is your first experience with a SIEM, this one can get you started. Take the time to learn the ins and outs of the product and you'll most likely be satisfied with it if your company is an SMB. If you need compliance reports, OSSIM is too small for you, you'll need to go with USM or USM Anywhere.

Incentivized

Egynte is best suited for companies that SharePoint is not the best fit for. This includes managers unfamiliar with SharePoint specifically, and those really looking for a replacement for a file server in the more traditional Windows sense. SharePoint has more or less done away with any management that resembles Active Directory or File Explorer. Egnyte's web portal is incredibly straightforward. I would say Egnyte is less suited for companies that have licensing access to SharePoint already and do not have a ton of files or granular sharing and security needs

• Asset discovery. Once installed in a centric, network-accessible server, OSSIM can poll all your endpoints with common protocols (SSH, SNMP, WMI) to detect and discover site-wide assets to monitor. You only need to group them by your own criteria once added to the product.
• SIEM Event Correlation. You can define quite complex correlation rules to detect possible suspicious or malicious actions or attempts in your network, in order to categorize them as real threats or as false positives, thus streamlining your risk assessment and management.
• Ease of installation. The entire AlienVault OSSIM is self-contained in an ISO file, which can be burned into a DVD or just mounted in your server of choice (physical or virtual) for deployment. The installation process is automated and quote verbosed, with options for static IP, email messaging and others.
• Ease of access. Being AlienVault OSSIM a self-contained appliance, it can be accessed via web by any device that supports a web browser, being that desktops, workstation, mobile devices, etc. The OSSIM dashboard and other features are automatically rearranged to adapt to the particular device being in use.

Incentivized

• Sharing files externally with passwords, link expiration and granular control of permissions
• File syncing across end-user devices using a client installed onto the computer for seamless integration for end-users as if they had mapped a drive directly to their machine
• Implements 2FA for secure access

• Creating custom rules is a bit complicated
• Reporting could be improved
• Agent has caused conflicts with a couple of our other applications

Incentivized

• The main drawback of the system that it is lacking in managing the uploading of large or huge files, even though the large files can be easily downloadable but the upload takes a lot of time.
• While uploading the system sometimes starts lagging and the file after sometimes needs to upload again.
• Egnyte is lacking in syncing multiple platforms at the same time. It gives access to one platform at a time which somehow hinders the work while migrating a large amount of data.

Incentivized

We found that usage of Egnyte in our supported clients, with sufficient bandwidth, provided all the features and stability we required. The billing setup was fair and the support provided was ample for end users and well as our in house admins. There was a concern about high usage clients but this was taken into account during the vetting process.

Incentivized

AlienVault OSSIM is far easy to use and manage - provided you know what you're doing. As any SIEM application, there is some background knowledge required in order to take advantage of the product's functionalities, such as the log correlation and analysis. Other than that, the application is quite usable and robust.

Incentivized

Really easy to use the interface. The web browser is very intuitive and I have not had any notable issues with this. It's easy to work on documents as a team, and the only issues we have to tend to come with Apple apps and downloading large files to WebEdit. It's very similar to the filing systems that come on Apple and Windows devices so not a steep learning curve.

Incentivized

Egnyte works very well across all platforms and as an add-on to other programs. Load time is close to nothing. Reports can be made in no time as well. All in all no performance issues. We can see that it depends on the local network connection. If you're running with fiber there won't be any issues.

Incentivized

Everything is done through MSSP and installation pro services. Once those hours are burned up, then you're on your own without a lot of help. Typically the pro services hours aren't enough to get past 60 days and MSSP are hit and miss. We had a miss for installation helpers.

Incentivized

I never had to reach out to customer support for Egnyte. I don't know any coworkers who have had to reach out to Egnyte for support either. As far as I am concerned, the support team is doing a good job since I have not had to reach out to them.

Incentivized

Originally my organization leveraged alien value due to the lower cost of entry and ability to manage it as a service provider. Unfortunately, after several years of working with this tool, it became unwieldy to use as it felt that almost every useful report had to be created by hand. As other tools have come out with the ability to do automated responses such as Stellar Data processor, we have begun to evaluate alternatives.

Incentivized

At the time when this was implemented (over 5 years ago and still in production), there were issues with syncing and reliability that Egnyte did not have, and have continued to impress with. Other providers have improved a lot and Egnyte is fairly costly, but switching costs would be high to move away from it to similar solutions.

Incentivized

• It satisfied a requirement of our audit team (internal and external).
• Custom written alerts allow us to be proactive for some events.
• Stable product means we don't spend a lot of time keeping it up and running.

Incentivized

• Allows us to easily communicate important data securely with other offices (not just sending via email)
• It allows everyone in our office to be working on the same information at the same time
• It meshes so well with salesforce that I can't really picture what our practice would look like if we didn't have the combination.

Incentivized