Check Point Quantum Smart-1 vs LogRhythm NextGen SIEM Platform

• Centralized Database
• Detailed and indexed logging
• Securely connects to each device

Read full review

• LogRhythm is a great SIEM to learn content on because the building blocks are very intuitive and easy to implement. All of the concepts relevant to content development are literally represented as drag and drop building blocks that can be easily manipulated.
• The statistical building blocks contain powerful anomaly detection capabilities that are extremely difficult to implement in other SIEMs or not possible at all.
• LogRhythm does better event classification than any other SIEM by far. My team typically drops all classification schemes from default installations of SIEMs and rebuilds them from scratch. I can actually use LogRhythms event classifications in rules without worrying about excessive partial matches or correlating unwanted events.

Read full review

• Not many
• Expensive though comparatively lately these devices have stayed fairly consistent while other vendors have increased greatly and are catching up.
• Support is limited, though this can be an advantage because of the security.

Read full review

• While searching for log events is quick, the interface isn't as user-friendly as other SIEM products.
• Many of the administrative/management functions are only available through the full LogRhythm desktop console, not through the web console.
• The LogRhythm agent, when used for FIM and RIM, is very memory intensive.

Read full review

• Hardware is very solid so time for maintenance is extremely limited.
• Patching is limited due to the strength of the code releases also time for maintenance is extremely limited
• Annually reoccurring costs for licenses can be expensive

Read full review

• The ability to search through logs in a centralized location really helps us to provide RCA (Root Cause Analysis) to management for outages. This helps us to quickly identify the cause of outages and thus saves money due to reduced downtime.
• Being able to configure the alarms to provide real-time notification (and responses) to security events helps to prevent potential loss due to compromises (such as a fraudulent wire transfer).
• The initial investment in LogRhythm SIEM is somewhat expensive, however, the appliance is built to your specific needs so you won't have to constantly be upgrading the device as your company grows.

Read full review