ManageEngine ADAudit Plus vs. Arcsight by OpenText

ManageEngine is mostly a "check the box" solution for SIEM systems. We needed something that satisfied our customer and was cost-effective. I would highly rate the system on "worth what paid for". Support is eager to please and prompt. My only issue is that it's mostly based outside the US with helpful, but non-native speakers so it's hard to understand them. I wish they would spring for better help "phone lines" so I'm not dealing with difficult to understand and unclear speakers.

Incentivized

In the current lot of hundreds of SIEM solutions out there in the market, ArcSight ESM is fairly less expensive with strong fundamentals in place. The log ingestion, correlation are very well performing and totally worth ROI. However, the tool has lost its way when it comes to staying abreast with current feature curve of SIEM technology and the evolution has not been done by MicroFocus. Search times are high and there is no major plug-in that has been introduced as part of the product life cycle.

Incentivized

• ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
• You can build your own reports based on almost every logic you can think of
• You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
• First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
• I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.

Incentivized

• Integration with smart logger and ESM to create rules and easy management of the same.
• Easy integration with all end point security management tool(IPS/IDS, Firewall, Anti-Virus) and their consolidated output at a single place to effectively rectifying true and false positives.

Incentivized

• In earlier releases there were quite a few bugs and performance issues. These have since been resolved.
• When integrated with the Log360 Suite, it can be confusing on whether EventLog Analyzer or ADAudit Plus are "managing"/"Ingesting" the data from a given endpoint.

Incentivized

• It is slow comparing to any other SIEM Tool.
• We have to create filter for each alerts need some custom filter .
• Here we dont have any single tab for see all the alerts .also need some attractive features for dashboard.

Incentivized

It works great for everything we need and use. Any issues in the software are pretty easy to resolve with tech support. And they are very responsive to resolving issues. Even ones where a fix/patch are required. At present, the software does everything we need it to for compliance, audit, and account review.

Incentivized

ADAudit with its cloud and on prem install option allows any organization to get in on AD report management. Whether you need to report internally only for for external audit controls its a great tool with flexibility to handle most any user or group report capability. Since this also includes m365 integration it enables IT pros to administer usage, license, cost control and permission access to most anything in Microsoft's portfolio. Its a great tool all around for AD integrated access needs.

Incentivized

Overall, it is a good investment in order for an organization to stay compliant and stay secure from all the wild things happening. It is definitely a cost effective tool with some good features including correlation, log storage, reporting and dashboards. If a customer is looking for advanced set of features, then I would highly not recommend this.

Incentivized

uptime good

Incentivized

Integration/overlap between products could be improved

Incentivized

The attention to cases or situations with the tool has been exceptional. being able to count on the manufacturer either by mail, call or chat. generate cases directly from the application allows you to have personalized support in order to solve problems that has been able to appear.

Incentivized

I personally haven't reached the support team, however, the engineers never complained about the Arcsight support team. We had some issues with the tool in the past but every time we reached the support, all issues were resolved in a timely manner.

Incentivized

knowledgable and prompt response

Incentivized

The remote setup team helped when i needed it and setup weas very straight forward and easy. The advanced setup for an external db and customizations for our latest version AD environment went pretty easy once they found documentation on customization.

Incentivized

In terms of features, ADAudit Plus offers a comprehensive set of features for monitoring and auditing Active Directory, including real-time alerts, detailed reports, and user behavior analytics. The platform also offers support for multiple platforms, including Windows, UNIX, and Linux, as well as integration with other ManageEngine tools.

Incentivized

Multiple platforms are already supported by Arcsight. Support is good. Scripts can be used to get data from multiple threat intel sources & the same can be used in correlation rules to detect any suspicious activity. Reporting features are good & you can check any backdated information within new clicks.

Incentivized

updates are effective and system is reliable

Incentivized

• Positive impact- instead of paying an external source to do reports manually, ManageEngine has provided this in just a few clicks of a button
• Positive Impact- Less disruption to staff in gathering data for important occurrences
• Positive impact- full visibility into real time information , alerts etc.

• Logger helps us to decrease incident response times.
• It also decreased our project times with the man/day calculations. Before this solution, it may take up to 10 men/days to do something. After this, it becomes nearly half of the time.

Incentivized