AlienVault OSSIM vs Trend Micro Deep Security

• Most of the configuration comes out-of-the-box suited for most environments. Setting it up is really easy, with the wizard, you can have it working in less than 3 hours of deployment, without counting asset installation.
• Out-of-the-box dashboards are really useful. You can modify or add new widgets to suit your needs, but you'll most likely agree with what already comes configured.
• The tickets feature for handling alarms is really easy to use.

Read full review

• Agentless Security
• Immediate protection upon boot
• Central Management Console
• DSVA easy deployment

Read full review

• OSSIM, being an open source solution, lacks log management (a treat that the full USM has). Perhaps a feature to include a lightweight version inside the SIEM Correlation engine can be appreciated.
• The appliance also lacks support for Cloud-based servers and apps. This feature is also present in USM, so it's unlikely this will appear in OSSIM, but I'd suggest also a reduced version of it included in this appliance.
• More integration with third-party solutions such as BMC Remedy and ServiceNow, although this can be emulated through email alerts, as most ITSM solutions have the ability of converting incoming email messages into tickets.

Read full review

• Agent based security on Desktop/Laptop and error reporting is very difficult to maintain.
• Support is very slow to respond and resolve issues.
• Price point is on the higher end in the agentless marketplace.

Read full review

• The ROI of OSSIM itself is, obviously, immediate, being that it's a free, open-source product. However, you must take into account other inherent investments to cover up for the lack of official support, such as certified agents or consultants that take care of the management and maintenance of the product once in production.
• On the other hand, the potential loss of information and interruption of operativity due to malware and other threats is really unmeasurable. The implicit savings in OSSIM as a SIEM (Security Information and Event Management) are really the major positive impact on your organization's revenue.
• Finally, and from a reseller's point of view, reselling OSSIM has the big plus of being a professional services-only asset, given that the appliance itself is free of charge. The only thing to consider is the initial investment in team members with the required capacitation and knowledge to address such professional services to potential customers.

Read full review

• Once setup it provides easy AV installation and management in a virtual enviroment.
• Agentless allows for no boot storms in a VDI enviroment
• Trend notifier on the VM's give the users the visibility that they are protected and also can be used on software inventory systems to show that the VM's are protected even though the real protection is at the hypervisor level.

Read full review