Barracuda Forensics and Incident Response vs. Splunk On-Call

The Barracuda Forensics and Incident Response is best suited as an addition to the Barracuda Sentinel. After Barracuda Sentinel discovers a phishing email or account takeover, the Barracuda Forensics and Incident Response allows you to quickly dive into the details of the email(s) to determine if the email is legitimate or not. It does a very good job finding and deleting any and all emails related to the attack.

Incentivized

I recommend Splunk on-call is more suited where there are high incident queues; multiple teams need to be involved in handling a P1 severity issue. Multiple levels of escalation are needed environment where automated action is required. I recommend the solution for large-scale & medium-scale business units. For small-scale business units, I see the functional value is less.

Incentivized

• Easy user interface
• Simple application with 2 tasks only
• Integrated in the Barracuda Total Email Security Suite

Incentivized

• Easily assign work/tickets between multiple users
• Supports a wide variety of software integrations
• Easy to manage scheduling tool
• As part of the Splunk toolset, provides detailed levels of data analysis at our engineers fingertips

Incentivized

• If you own the total security suite, the use of the app becomes less important
• It would be nice to post a mail yourself in order to delete this mail from other mailboxes. If possible, it is not clear how to do this.

Incentivized

• The user interface can be furthe improved
• Licensing needs to be simplified and packaged as a bundle with other Splunk product like Enterprise Security
• Customer outreach can be further enhanced

Incentivized

It was a good solution with a good comprimise prize/features for our use cases

Incentivized

The dashboard is intuitive and easy to use. One can create a remediation in a minute and have it deployed to remove a threatening email(s) in minutes, instead of hours, across your Exchange network.

Incentivized

Good usability, it could be improved

Incentivized

Barracuda has always been known for its support team. I have experienced that if you ever have any questions, issues, or problems with any of the Barracuda software, their support team is always available to help resolve your issue.

Incentivized

VictorOps support has proven excellent for us. Because it is such a widely used tool, there is a lot of documentation on usage, and a large community of users to lean on. Also, many engineers have had experience working with VictorOps already, and the tool is so easy to setup / manage that much support isn't really necessary.

Incentivized

It was a good solution with a good comprimise prize/features for our use cases

Incentivized

Splunk On-Call integrates better with our Splunk Cybersecurity and Reporting products due to the same family tree of the same eco system. We were previously using built-in on-call from individual applications and while adequate, they were difficult to manage and support SLA varied greatly across different applications. In addition we also used xMatters which did not integrate well with SAP products nor Citrix products so we were still using more than a single on-call product which was solved by implementing Splunk On-Call

Incentivized

• It provides a uniform way of reporting bad mail.
• Without scripting knowledge, you can eliminate bad mail from users mailboxes.

Incentivized

• It runs our on call rotation so it makes it easy for us.
• It integrates with Slack so it makes it easy for us to manage through Slack.

Incentivized