TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Umbrella

    Score8.9 out of 10
    N/ACisco now offers OpenDNS Umbrella Web Filtering. Cisco acquired OpenDNS in August 2015, and rebranded the product as Cisco Umbrella.N/A

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A
    Pricing
    Cisco UmbrellaIBM Security QRadar SIEM
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco UmbrellaIBM Security QRadar SIEM
    Free Trial
    YesYes
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco UmbrellaIBM Security QRadar SIEM
    Considered Both Products
    Cisco
    No answer on this topic
    IBM
    No answer on this topic
    Key User Insights
    Would buy again
    95%
    Would buy again
    91 Answers
    92%
    Would buy again
    67 Answers
    Delivers good value for the price
    98%
    Delivers good value for the price
    88 Answers
    97%
    Delivers good value for the price
    61 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    92 Answers
    96%
    Happy with the feature set
    70 Answers
    Lived up to sales and marketing promises
    95%
    Lived up to sales and marketing promises
    77 Answers
    86%
    Lived up to sales and marketing promises
    38 Answers
    Implementation went as expected
    92%
    Implementation went as expected
    84 Answers
    94%
    Implementation went as expected
    59 Answers
    Features
    Cisco UmbrellaIBM Security QRadar SIEM
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Cisco Umbrella and IBM Security QRadar SIEM
    Feature
    Cisco Umbrella
    -
    Ratings
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    6% above category average
    Centralized event and log data collection00 Ratings9.927 Ratings
    Correlation00 Ratings8.669 Ratings
    Event and log normalization/management00 Ratings9.527 Ratings
    Deployment flexibility00 Ratings7.827 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.965 Ratings
    Custom dashboards and workspaces00 Ratings7.569 Ratings
    Host and network-based intrusion detection00 Ratings9.725 Ratings
    Data integration/API management00 Ratings9.07 Ratings
    Behavioral analytics and baselining00 Ratings7.648 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.049 Ratings
    Response orchestration and automation00 Ratings7.75 Ratings
    Reporting and compliance management00 Ratings7.947 Ratings
    Incident indexing/searching00 Ratings8.97 Ratings
    Best Alternatives
    Cisco UmbrellaIBM Security QRadar SIEM
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    Sumo Logic
    Score8.9 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco UmbrellaIBM Security QRadar SIEM
    Likelihood to Recommend
    8.9
    (124 ratings)
    8.6
    (89 ratings)
    Likelihood to Renew
    8.0
    (15 ratings)
    8.8
    (5 ratings)
    Usability
    7.5
    (10 ratings)
    8.0
    (2 ratings)
    Availability
    8.7
    (11 ratings)
    9.0
    (1 ratings)
    Performance
    10.0
    (2 ratings)
    9.0
    (1 ratings)
    Support Rating
    6.9
    (63 ratings)
    8.1
    (62 ratings)
    In-Person Training
    -
    (0 ratings)
    9.0
    (1 ratings)
    Online Training
    8.0
    (1 ratings)
    9.0
    (1 ratings)
    Implementation Rating
    9.5
    (11 ratings)
    8.0
    (1 ratings)
    Configurability
    8.0
    (1 ratings)
    8.0
    (1 ratings)
    Contract Terms and Pricing Model
    -
    (0 ratings)
    9.0
    (1 ratings)
    Ease of integration
    9.5
    (10 ratings)
    8.1
    (58 ratings)
    Product Scalability
    8.0
    (2 ratings)
    8.0
    (1 ratings)
    Professional Services
    -
    (0 ratings)
    10.0
    (1 ratings)
    Vendor post-sale
    8.1
    (3 ratings)
    9.0
    (1 ratings)
    Vendor pre-sale
    8.1
    (3 ratings)
    9.0
    (1 ratings)
    User Testimonials
    Cisco UmbrellaIBM Security QRadar SIEM
    Likelihood to Recommend
    Cisco
    When a company has a distributed workforce, the produce works very well to unify a set of policies to apply against web bound traffic. Areas we have struggled with is getting value out of our cloud delivered firewall due to requirements to fully use it
    Incentivized
    Read full review
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    Pros
    Cisco
    • As many companies think—they’re afraid of firewalls, but they want to keep something secure—and what it does best is it simplifies the approach from a cybersecurity perspective, especially from the user perspective. Users spend a lot of time on the web, trying to access sites, clicking links, scanning QR codes, and doing whatever. You can’t really stop them unless you have something in between that can check whether those links lead somewhere safe, or potentially run them in a sandbox if there are threats or specific use cases.
    • So I think one of its strongest points is that it’s very simple, and it’s not expensive compared to if you buy a firewall and licenses from other brands, where you have to configure it and spend engineer work hours or outsource the work. It’s the simplicity, and I think it just works. I had some issues five years ago, four years ago, but now it just works. I’m pretty happy.
    Read full review
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Cons
    Cisco
    • So we had in the past very general rule sets, very detailed rule sets for security rules. Like you can access this page but not this IP range and so on. So hundreds of specific rules for specific machines and the rule management in Cisco Umbrella is not that granular. So it was not possible to build up these rule sets in Cisco Umbrella, but now we see to access it's much better already. So that's why one reason why we are migrating to CQ access to have better API based possibility to manage these rule sets and synchronize them between different products that we are using and in the cloud. So yeah, we hope that with secure access it's a little bit more granular like with Cisco Umbrella currently.
    Incentivized
    Read full review
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    First off I never give anything a "10" unless it's perfect. LOL - I grade on the curve. I think OpenDNS/Umbrella is a very good product. I think that fact that Cisco absorbed them is one of the proofs of that. I have used the product back when it was free for companies our size. I have not always appreciated the cost - but in the post pandemic cyber chaos, I believe the cost benefit ratio is still very high. I have honestly not looked at other products because Umbrella continues to work to my satisfaction. I consider Umbrella to be one of the key layers in my cyber security strategy.
    Incentivized
    Read full review
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    Usability
    Cisco
    Better features and easy to manage system with great customer support and overall usability is great as it works for hybrid environment with ease as it is having features for on prem users as wells as cloud users with great customer support and great team of trained engineers to support our opeartions.
    Incentivized
    Read full review
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    Cisco umbrella services in the cloud are always available. However, the weakness is the VM installed in the data center that are the first resolvers. If the VMs become unavailable for any reason or the vSphere goes down, then all DNS is affected
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Performance
    Cisco
    our experience with cisco products has always been awesome and same is the case with cisco umbrella .Under umbrella cisco provides flexible and scalable software solution to use across different dept and sites . These softwares are very user friendly ,pages load quickly as these applications are designed for minimum latency and reports are also provided quickely
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Support Rating
    Cisco
    Whilst the support is good once you get through to them, it's email only and the response is slow. This is a issue, because its a core system that needs to work. We have had issues in the past where several of our companies have gone down due to Umbrella and support is nowhere to be seen. It is very difficult to know whether Umbrella is having service issues, since they do not regularly update customers on the status of their services, such as is seen by providers such as Microsoft (status.umbrella.com just seems to show up all of the time, I'm not sure it's even updated)
    Incentivized
    Read full review
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    In-Person Training
    Cisco
    No answers on this topic
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Online Training
    Cisco
    Quite easy to understand training modules prepared by knowledgeable trainers. Training modules have included all the desired features of these softwares and the content delivery is very good from the respective module trainers and it explains in details the features and apart from that further training material support is also provided if needed.
    Incentivized
    Read full review
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Implementation Rating
    Cisco
    At the time we were forced to move from Cloud Web Security to Cisco Umbrella, Cisco Umbrella was far from being a direct replacement. It was frustrating and difficult to migrate due to the lack of functionality. This has since been addressed, however we now have legacy rulesets that were built as bandaids that cannot be removed. Hopefully the migration to Secure Access will address this.
    Incentivized
    Read full review
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Umbrella checked all the boxes for us (at the time) because it supported multiple domains and multiple IPs to protect (we have 20+ offices), and its configuration and policies cover a lot of different options for us. We used another product prior, and it worked well, but it didn't have all the features we needed at the time.
    Incentivized
    Read full review
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    Scalability
    Cisco
    Cisco umbrella provides fleaxible and scalable software solutions which are easy deploy across multiple departments and sites wherever needed and this softwares are very easy to use and provides the best interface along with cisco support for other devices apart from cisco infrastructure but still there is scope for improvement on the inclusion of latest features
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Return on Investment
    Cisco
    • It's a costly product and we have to admit that, but security breaches are costlier, and they can take more than we can afford so we always had positive mindset over our security purchase and Cisco Umbrella had overall positive impact.
    Incentivized
    Read full review
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview