Bitdefender GravityZone vs. IBM Security QRadar SIEM

Bitdefender had been a great replacement for our previous product - it was painless to make the switch with very few issues. We tested in a VM lab a few different offerings, but Bitdefender was the one that covered everything we required at the time and allowed us to be able to expand the offering simply.

Incentivized

I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.

Incentivized

• Once installed, Bitdefender [GravityZone] runs silently in the background with little to no need for user interaction.
• The cloud-based console provides for easy computer management and deployment.
• Bitdefender [GravityZone] is extremely flexible, with a policy-based system wherein different profiles can be created (i.e. a policy to deactivate the firewall, a policy to allow for admin control on a machine, etc.) and pushed out to individual computers.
• Computers can be grouped into different categories, with different policies automatically deployed to each category.
• Bitdefender [GravityZone] is relatively resource-light and runs well even on lower-end computers.

Incentivized

• Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
• Facilitates security incident investigation and forensic analysis.
• Provides a real-time view of security events, enabling immediate incident response.
• Can integrate with external threat intelligence sources to enrich data and improve threat detection.
• Enables the generation of detailed and customized reports.

Incentivized

• Who do I ask? This is my chief complaint is once the initial licenses were purchased through Bit Defender, there was no one to contact that could help navigate some of the initial questions I had with regard to specific policies to implement for our file server. The parent web site is, well, hard to navigate when one is trying to "learn" the system.
• The second issue is in increasing the licenses. It took several days for the parent company (by contact and phone) to inform me that they could not increase the licenses and I would have to go through a private vendor. There was no intent to connect me to a vendor or provide a vendor list until I asked specifically. YET I continue to get email from the parent company reminding me to pay an annual fee for the licenses purchase through the private vendor. The parent company can see the number of licenses yet did not sell them to me.
• Gravity Zone Dashboard, while excellent for those who have experience, is not particularly intuitive for those who have never used it. There does not seem to be a lot of documentation for those responsible for implementation.

Incentivized

• Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
• While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
• IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.

Incentivized

It works. I rely heavily on my vendors to provide a product that works, is easy to implement, and that they support. As well as be a decent value for the money

Incentivized

QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.

Incentivized

On the whole I find the product very easy to use but some features need me to do some digging about in the console menus to find everything. I think if the interface used a bit less jargon and more clear plain language, it would be easier to find how to do things within the console.

Incentivized

As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.

Incentivized

Yes its very available. The software continues to protect you even if you are offline. It constantly runs in the background and will check for updates again once back online.

Incentivized

The console is quite fast and responsive, and once you start to get used to it, it is easy to use and you can see the main dashboard status at a glance. You can then dig deeper into the individual Companies / Endpoint clients and check the status of each. The software itself is not heavy on system resources in each PC.

Incentivized

Support is an area Bitdefender has always struggled with. While their products work great, the GravityZone dashboard is very technical in nature. If you aren't IT inclined, it could be difficult to setup. While most times support is helpful, we tend to work with them over email because of their very thick accent, they are hard to understand over the phone.

Incentivized

Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm

Incentivized

The trainer went through everything in the console an showed me what each setting did. If I had any questions on how to do something, he showed me where to go and how to do it. The trainer was very helpful and knowledgeable, and also professional and patient. Highly recommended.

Incentivized

The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.

Incentivized

The trainer went through everything in the console an showed me what each setting did. If I had any questions on how to do something, he showed me where to go and how to do it. The trainer was very helpful and knowledgeable, and also professional and patient. Highly recommended.

Incentivized

The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.

Incentivized

Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively

Incentivized

We were a Kaspersky shop for years. Kaspersky was a resource hog and it didn't even block half of what was thrown at it. We had more outbreaks and more end-user complaints in a year of Kaspersky then we have had in almost three years of Bitdefender.

Incentivized

IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.

Incentivized

I give it this rating because one you have the console running, you can add or remove whole companies, add computer endpoints (and remove them), and easily create and deploy endpoint packages to the machines that need the software. Once installed, the software starts to report back to the Bitdefender servers and the number of active licences is then seen and billed.

Incentivized

• The ROI for Bitdefender is hard to quantify except that it requires very little maintenance time from our staff.
• We've spent no time troubleshooting user complaints or issues from users, so it has been a big time-saver over our previously used anti-malware software.
• Bitdefender's customer service is usually pretty good and also very responsive, so I don't have to wait by the phone or to keep checking email to resolve a problem--although our issues have been mostly informational and not a problem with functionality.

Incentivized

• Offense investigation was really helped in tackling the incidents. It was accurate and brief
• The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
• The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database

Incentivized