Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints.
N/A
Graylog
Score 8.7 out of 10
N/A
Graylog, headquartered in Houston, offers their eponymous platform for centralized log management that helps users find meaning in data faster so as to take action immediately. Graylog is available via Enterprise and Cloud plans, but also has a Small Business Plan, and an Open (free) plan with limited features.
It just works. I have seen multiple viruses and malware get past other antivirus software like TrendMicro, Webroot, and Kaspersky. Bitdefender GravityZone always catches what others miss. It has a very light footprint when it comes to system resources. The centralized management console is nice, but I prefer the console before they redesigned the UI.
For small companies, Graylog is the best solution possible. It's easy to configure and "just works." Above everything else, it's free. The only thing I hold against it is the fact that it's Linux-based. [This] makes sense because Elasticsearch is Linux-based. But Linux adds a layer of complexity that we don't need for something basic as a logging server. I'm pretty sure that we would have had a logging server years earlier if I had to convince quite a few decision-making people to go ahead with it anyway.
Once installed, Bitdefender [GravityZone] runs silently in the background with little to no need for user interaction.
The cloud-based console provides for easy computer management and deployment.
Bitdefender [GravityZone] is extremely flexible, with a policy-based system wherein different profiles can be created (i.e. a policy to deactivate the firewall, a policy to allow for admin control on a machine, etc.) and pushed out to individual computers.
Computers can be grouped into different categories, with different policies automatically deployed to each category.
Bitdefender [GravityZone] is relatively resource-light and runs well even on lower-end computers.
Graylog does a great job of its core function: log aggregation, retention, and searching.
Graylog has a very flexible configuration. The backend for storage is Elasticsearch and MongoDB is used to store the configuration. You have to option to make your configuration as simple as possible by storing everything on one box, or you can scale everything out horizontally by using a cluster of Elasticsearch nodes and MongoDB servers with several Graylog servers pointed to all the necessary nodes.
Graylog does a good job of abstracting away a fair portion of Elasticsearch index management (sharding, creation, deletion, rotation, etc).
Who do I ask? This is my chief complaint is once the initial licenses were purchased through Bit Defender, there was no one to contact that could help navigate some of the initial questions I had with regard to specific policies to implement for our file server. The parent web site is, well, hard to navigate when one is trying to "learn" the system.
The second issue is in increasing the licenses. It took several days for the parent company (by contact and phone) to inform me that they could not increase the licenses and I would have to go through a private vendor. There was no intent to connect me to a vendor or provide a vendor list until I asked specifically. YET I continue to get email from the parent company reminding me to pay an annual fee for the licenses purchase through the private vendor. The parent company can see the number of licenses yet did not sell them to me.
Gravity Zone Dashboard, while excellent for those who have experience, is not particularly intuitive for those who have never used it. There does not seem to be a lot of documentation for those responsible for implementation.
It works. I rely heavily on my vendors to provide a product that works, is easy to implement, and that they support. As well as be a decent value for the money
The console is easy to use, but has grown to have a lot of functionality. The only challenge is that all functions (even disabled and not installed ones) are shown. It would be great if only the functions that are active would be visible.
Support is an area Bitdefender has always struggled with. While their products work great, the GravityZone dashboard is very technical in nature. If you aren't IT inclined, it could be difficult to setup. While most times support is helpful, we tend to work with them over email because of their very thick accent, they are hard to understand over the phone.
Community support does not give simple straightforward answers; simply search up Graylog Issues and look at some of the responses on the forums. The documentation is your only hope if you are on the free version, as you can NOT purchase only support. The few times I have worked with Graylog Enterprise support they were great though.
We were a Kaspersky shop for years. Kaspersky was a resource hog and it didn't even block half of what was thrown at it. We had more outbreaks and more end-user complaints in a year of Kaspersky then we have had in almost three years of Bitdefender.
In terms of log aggregation, the free product fully stacks up with the competitors listed. Full control over the data ingests for flexible configuration. Graylog even better on that front than AlienVault USM because you cannot configure the variable mapping. We haven't used the threat exchange stuff or correlation. But with regex searches, we have created function dashboards that show threat theater pictures of our network based on logs from our firewall.
The ROI for Bitdefender is hard to quantify except that it requires very little maintenance time from our staff.
We've spent no time troubleshooting user complaints or issues from users, so it has been a big time-saver over our previously used anti-malware software.
Bitdefender's customer service is usually pretty good and also very responsive, so I don't have to wait by the phone or to keep checking email to resolve a problem--although our issues have been mostly informational and not a problem with functionality.
Graylog is just less expensive than some other options which meant it fit into our budget otherwise we might not be able to justify a higher cost.
Being able to track issues that we normally couldn't track using other tools is a bonus to help us know of any issues we have and can fix before an outage or failure that could potentially cost money.
We have had to spend more time than I would like to understand and customize Graylog which has taken time away from other tasks and projects.
