OSSIM leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts. AlienVault OSSIM is an open source Security Information and Event Management (SIEM) product. It is a unified platform providing: Asset discovery Vulnerability assessment Intrusion detection Behavioral monitoring SIEM OSSIM provides the basis for AlienVault's proprietary Unified Security…
N/A
Ivanti Neurons for MDM
Score 7.6 out of 10
N/A
Ivanti Neurons for MDM is a cloud‑Based Mobile Device Management. Ivanti Neurons for MDM enables secure access to data and apps on any device across the Everywhere Workplace.
If this is your first experience with a SIEM, this one can get you started. Take the time to learn the ins and outs of the product and you'll most likely be satisfied with it if your company is an SMB. If you need compliance reports, OSSIM is too small for you, you'll need to go with USM or USM Anywhere.
For devices that require single-app mode (iOS) deployments are easy to manage. We are also able to control which OS features are available at a very granular level. What is often lacking are good guides illustrating how to implement certain features - for example, setting up single-app mode for the first time is not intuitive and should not require opening service requests with the helpdesk.
The tools for remote support require a lot of effort and have made implementation of this capability a financial decision instead of a technical one. By this I mean that it's better to request budget for professional services than to invest mine or my team's time, which makes it far less likely to get implemented. Things that cost money and require justifications to the finance team are disadvantaged from the word go.
Asset discovery. Once installed in a centric, network-accessible server, OSSIM can poll all your endpoints with common protocols (SSH, SNMP, WMI) to detect and discover site-wide assets to monitor. You only need to group them by your own criteria once added to the product.
SIEM Event Correlation. You can define quite complex correlation rules to detect possible suspicious or malicious actions or attempts in your network, in order to categorize them as real threats or as false positives, thus streamlining your risk assessment and management.
Ease of installation. The entire AlienVault OSSIM is self-contained in an ISO file, which can be burned into a DVD or just mounted in your server of choice (physical or virtual) for deployment. The installation process is automated and quote verbosed, with options for static IP, email messaging and others.
Ease of access. Being AlienVault OSSIM a self-contained appliance, it can be accessed via web by any device that supports a web browser, being that desktops, workstation, mobile devices, etc. The OSSIM dashboard and other features are automatically rearranged to adapt to the particular device being in use.
MobileIron has a very easy to deploy architecture. We reviewed other products before making our business decision to deploy MobileIron, and one of the reasons we selected MobileIron was due to the ease of deployment, the low footprint, and the ease of configuration.
MobileIron has a broad range of customizations and add-on products that make it an ideal product for a number of additional use cases. None of these use cases got business backing at BH Media, but Docs@Work and Apps@Work are two features that would make MobileIron an ideal tool for a customer who needs to allow BYOD or company devices the ability to access documents or applications without VPN.
MobileIron is supported by a large number of devices and their operating systems. In a company which allows BYOD devices, you can't always control what device a user is going to bring in. MobileIron has support for older devices and OS versions and is also quick to adopt newer devices, so a new device isn't shut out in the cold waiting for a vendor to update their software.
Documentation is hard to find. Most of MobileIron's (MI) documentation can only be accessed through an MI account. This, in itself, is not a problem. The problem is locating specific information. Typically with other MDMs, a quick google search will point you to the location of the documentation within the official website. The way MI has their documentation locked down, I cannot find anything I'm looking for through a google search. Also, there were times documentation is locked by permissions and links provided by support are inaccessible to me due to these restrictions.
Sales - The sales team can sometimes come off as not genuine. I understand the purpose of sales is to sell and make money for the company, but the approach sometimes feels artificial; they say they have to company's best interest in mind, but the push for a sell like a car salesman.
Many of the automation options are not explicitly available into MobileIron Core. I have to use a special scripting language to make MI do the things I need it to do, such as automatically retire devices that have been inactive for 60 days.
So far we have been very pleased with MobileIron and it has accomplished many of our goals. We are looking forward to continued improvements on Windows 8 platforms and Android PIM solutions. The only way that we would leave is if a solution came out that was better suited to work with Lotus Notes
AlienVault OSSIM is far easy to use and manage - provided you know what you're doing. As any SIEM application, there is some background knowledge required in order to take advantage of the product's functionalities, such as the log correlation and analysis. Other than that, the application is quite usable and robust.
Everything is done through MSSP and installation pro services. Once those hours are burned up, then you're on your own without a lot of help. Typically the pro services hours aren't enough to get past 60 days and MSSP are hit and miss. We had a miss for installation helpers.
I have been using MobileIron for years. As with any company, they suffered the constraints of growth. I don't normally deal with call-in support, but in the few instances that I have the level of support has gotten inherently better. My usual support experience is from a dedicated individual(s) from professional services. This is mainly because of the size of the deployment. This offers a resource that is thoroughly familiar with your environment. Another benefit is that you can contact them directly, which eliminates the handing off and starting over with multiple individuals. As a company they are extremely committed in their support structure and making it better. They send out audits and welcome any interaction and if there is a complaint they follow up with efficacy
It is online based, after learning content you can take a test and if you don't pass you get two other chances to pass. Once you pass the test you can print out your certification or save it
Originally my organization leveraged alien value due to the lower cost of entry and ability to manage it as a service provider. Unfortunately, after several years of working with this tool, it became unwieldy to use as it felt that almost every useful report had to be created by hand. As other tools have come out with the ability to do automated responses such as Stellar Data processor, we have begun to evaluate alternatives.
We've evaluated a number of other MDM solutions before finally deciding on MobileIron as our choice. These included AirWatch, Good, Citrix and IBM. None came close to the cost price point offered by MobileIron providing the same solutions. The initial setup/configuration was provided for free and training classes were exceptional. Other vendors did not offer the same level of support provided by MobileIron.
MobileIron initially was a positive part of our mobile stack. However after two years, we are exploring in-house solutions as Mobile Iron has not been stable enough for our needs. We had a MobileIron-related outage last year that took a week to resolve and cost our business substantially.
I believe MobileIron is more effective with Android devices than iOS.
MobileIron seems better suited to devices that need to be updated/managed infrequently (~ 1/week or less often). For tablets that need daily MDM interactions, MobileIron was not sufficiently reliable.
