Cisco Secure IPS vs. SolarWinds Security Event Manager (SEM)

For scenarios, I described before, like when you have centralized administration and several locations, and the majority of those locations have the same size/requirements, Firepower is well suited. Easy to maintain, relatively cheap to buy. For scenarios too small, like small sales offices like ours, I don't think Firepower could fit, basically because you'll need to invest a certain amount of money to buy, license and deploy.

Incentivized

Solarwinds SEM is great for generating reports for investigation purposes. Once you set up the connectors you can walk away and the product runs without needing maintenance. It was however pretty difficult to create the reports and alerts when now starting out and it can be very intimidating for new users.

Incentivized

• You will get more visibility in your network.
• Very fast performance
• Easy to detect and prevent the suspicious activities.
• Easy to export report[s]
• Daily security updates
• Efficacy
• Very low cost
• Cisco Threat Intelligence Director
• A lot of Cisco documentation available

Incentivized

• SolarWinds easily provides the much needed visibily into changes in an Active Directory (AD) environment. Email alerting can be configured to alert a team if an account is locked out, disabled by another users, or if users and/or computers accounts are created.
• SolarWinds allowed a searchable audit feature. Microsoft Windows can be configured to log many different parts of a system, but search those logs can be difficult. SEM allows you to search for specific users or events.

Incentivized

• The performance is not always as good as you'd want. Some operations take the better part of a minute (drilling down in traffics analysis).
• Deploying or upgrading the FirePower software to the ASA firewalls takes a long time and deployment might fail without a clear reason.

Incentivized

• Compared to other SIEMs, there are features that are missing. Machine learning, automatic event correlation, ability to correlate multiple sources together.
• The UI is clunky, and the *New* event log analyzer page felt really disjointed from the rest of the product.
• In my experience, the dashboards were almost unusable. They persisted across login per device, and even then they sometimes would reset and go back to the ''Getting Started'' look.

Incentivized

We are in the middle of outsourcing and may not be able to keep this product.

Incentivized

It is pretty likely that we will renew SEM when the time comes up. It is easy to use and maintain so there isn't much of a need to replace this product. It is also a pretty fair price for the capabilities provided by the SEM

Incentivized

Very easy to navigate GUI in the FMC and very effective at performing the intending duties.

Incentivized

It is very good - but you get what you pay for. The intent is not for a Fortune 500 that needs more "heavy lifting" with SolarWinds Security Event Manager & for whom the price tag is not (much of) a consideration.

Incentivized

We didn't have any major issues that let us need support. Only, for this reason, I think Cisco Firepower deserves the rating. Even for small issues, the partner that helped us during the project could solve it quickly. There are also tons of documents and other online resources to help maintain, administer and support the product.

Incentivized

The quality of support can vary depending on whom you end up speaking with. I was fortunate enough to work with a support representative who was very familiar with the product. He had even authored some of the support documentation on the website. On the flip side, I had two other experiences where I was simply directed to online training material.

Incentivized

We were using the Suricate IDS but it is very difficult to configure and manage so we replace it with Cisco Secure IPS. It gives us all the advanced security features and more control over our network.

Incentivized

The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that.

Incentivized

• Has made it much easier to determine when incidents have occurred
• Has been effective in reducing false positives and making solution management more efficient and cost effective

Incentivized

• It saves a lot of time when we had issues trying to figure out where the user account lockout was coming from.
• With it being an affordable SIEM, we are able to have the ability to do the actions associated with a SIEM and the advantages of not “breaking the bank account”.

Incentivized