OSSIM leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts. AlienVault OSSIM is an open source Security Information and Event Management (SIEM) product. It is a unified platform providing: Asset discovery Vulnerability assessment Intrusion detection Behavioral monitoring SIEM OSSIM provides the basis for AlienVault's proprietary Unified Security…
N/A
SolarWinds Service Desk
Score 8.2 out of 10
N/A
SolarWinds Service Desk (formerly Samanage) is a cloud-based, multi-tenant IT service desk and asset management software for IT and enterprise service management. Samanage is on a single, always new instance of software. The service desk includes a self-service portal, service catalog, knowledge base, and SLA management tool. The integrated agent-based asset management solution collects contracts and licensing data from Windows, Mac, Linux, and Unix systems.
If this is your first experience with a SIEM, this one can get you started. Take the time to learn the ins and outs of the product and you'll most likely be satisfied with it if your company is an SMB. If you need compliance reports, OSSIM is too small for you, you'll need to go with USM or USM Anywhere.
If you are looking for a way to support a company and bill based on the outcome this software works really well. If it's a quick password change there was no charge, but if it's troubleshooting things you click the box to charge. It works really well for this. Also bringing all your assets into this and associating them to a client works well. I can't think of anything that this software would not be less appropriate for. It works well for what we use it for.
Asset discovery. Once installed in a centric, network-accessible server, OSSIM can poll all your endpoints with common protocols (SSH, SNMP, WMI) to detect and discover site-wide assets to monitor. You only need to group them by your own criteria once added to the product.
SIEM Event Correlation. You can define quite complex correlation rules to detect possible suspicious or malicious actions or attempts in your network, in order to categorize them as real threats or as false positives, thus streamlining your risk assessment and management.
Ease of installation. The entire AlienVault OSSIM is self-contained in an ISO file, which can be burned into a DVD or just mounted in your server of choice (physical or virtual) for deployment. The installation process is automated and quote verbosed, with options for static IP, email messaging and others.
Ease of access. Being AlienVault OSSIM a self-contained appliance, it can be accessed via web by any device that supports a web browser, being that desktops, workstation, mobile devices, etc. The OSSIM dashboard and other features are automatically rearranged to adapt to the particular device being in use.
Approval flows: You can have multiple layers of approval required for the tickets and service requests you design. This helps us show auditors that access to privileged systems and data was formerly reviewed and approved by the appropriate managers.
Easy to design forms: You don't need to spend hours reading the documentation to figure out how to create forms. It's simple enough that you can just jump right in and start creating them with minimal training.
Lots of options and features are available for you to include in your forms.
Integrates well with SAML-based SSO and has capabilities for MFA.
Easy and useful search function. Need to find that ticket from last year that you worked for a particular user or issue? Just search by keyword or username, and it'll quickly find the ticket.
There is potential to greatly improve the capacity for cascading attributes. Currently, categories are limited to a top-level category and one subcategory. This leaves a fairly shallow decision tree.
Greater flexibility to modify the layout of incident request forms.
More integration options for cloud file-sharing platforms. Solarwinds Service Desk has tie-ins to Dropbox but not other vendors.
My renewal is soon coming up, it is fairly likely I will renew again for the 5th year. I may consider evaluating what else is out there, It was requested by my staff to not make a change. They feel that SSD fits our needs, is easy to use and should keep it.
AlienVault OSSIM is far easy to use and manage - provided you know what you're doing. As any SIEM application, there is some background knowledge required in order to take advantage of the product's functionalities, such as the log correlation and analysis. Other than that, the application is quite usable and robust.
Solarwinds Service Desk has a very "user friendly" interface. Everything looks nice and neat. And, learning how to use the system is very easy. It provides multiple services that are easy for most people to grasp, and allows for great organization of incidents and assets. Support for Solarwinds Service Desk has a good response and resolution time and are easy to work with.
Because the data is stored on Amazon Web Services (AWS) there are very rarely any outages. There have been some times when the product has been slow to load, but because the interface is web based it could be anything between my computer and AWS that was causing the issue. But also, because the application is web based it can be access from anywhere which makes it very convenient
When the system is working, the pages load very quickly. We run reports all the time in the system. The reporting can be extremely complex or very simple. Either way, we have not had any issues with the reports. We do not currently integrate Solarwinds Service Desk with any other software.
Everything is done through MSSP and installation pro services. Once those hours are burned up, then you're on your own without a lot of help. Typically the pro services hours aren't enough to get past 60 days and MSSP are hit and miss. We had a miss for installation helpers.
SolarWinds support department will respond to you quickly from the time of purchase to after-purchase instructions & supporting, and the company is great in customers support. In buying a software, our organization always has a priority for the seller and support and accountability is very important to us, and the manufacturer or seller must be responsible and supportive.
When we first purchased Samanage (now Solarwinds) they provided us with an informational training session to show us all of the basics on how the service works and showed us everything we were interested in using. There are still some areas of Solarwinds that we do not yet utilize but I know if we choose to use them in the future we would be able to schedule another session with our representative to have them show us what we need to know.
The implementation process for our organization was fairly simple. We set up an email address to receive the emails from the system (for incident creation), and we allowed the system to spoof our IT email to respond to requests. Solarwinds helped us with the rest of the implementation, and it took less than a week to get the system fully operational.
Originally my organization leveraged alien value due to the lower cost of entry and ability to manage it as a service provider. Unfortunately, after several years of working with this tool, it became unwieldy to use as it felt that almost every useful report had to be created by hand. As other tools have come out with the ability to do automated responses such as Stellar Data processor, we have begun to evaluate alternatives.
We chose SolarWinds Service Desk for its user friendly platform compared to what we had. Its was easier for requestors to submit tickets, provide feedback, merge tickets, build a suitable approval process. Our organization had a hard time going back and forth with the end user on providing a status on their request or issue, where most users just didn't follow through or lost interest in their issue. We would have to send multiple emails to get any type of feedback and that's something we did not want to keep on doing.
We have over 500 computers and tablets across our organization and this has helped us greatly in keeping track of where computers are and who is currently using it. I can see this product being useful to groups both larger and smaller than us and I really appreciate this product.
We are more easily able to quantify user satisfaction with support.
We are able to develop SLAs that quantify and define the obligation of our support teams.
The actual cost of Solarwinds Service Desk per agent user is high in our estimation. The more you implement this platform across your organization, the more tightly tethered you are to this solution.
