Cofense Vision vs. Splunk User Behavior Analytics (UBA)

It is well suited in environments where there is a high mail traffic to handle. [Cofense] Vision basically journals the exchange server and keeps a copy of the mail received in the environment. Really beneficial to revoke and quarantine the mail reported by one user, but footprint is there in other mailboxes as well. Less appropriate in the cases where there is no proper segregation of duties within the organization. As it is possible to see contents of the mail. Only authorized personnel should be able to use it.

Incentivized

Splunk User Behavior Analytics application is necessary when any company wants to capture the threat based on user behavior instead of just counting the number of occurrences of particular event. With Splunk UBA, we can analyse number of anomalies captured and which in turn creating threats which are nearly true positive.

Incentivized

• AutoQuaratine prevents in advance and eliminates possible malicious emails from users' inboxes.
• [Cofense Vision] optimizes protection against any phishing attack.
• It is simple, friendly and easy to use.
• [Cofense Vision provides] super detailed analysis reports.

Incentivized

• Monitor and troubleshoot for any system errors.
• Get the insights on application data sets and do some predictive analysis.

Incentivized

• Its cost can be somewhat high when it comes to a small business, so it is perfectly suited to medium or large companies.
• It can throw problems when it comes to migrating said tool in the different versions of an email.
• Its configuration is simple, but it is important to fully understand its operation to give adequate responses to possible threats.
• It would be ideal if it could be integrated with your platform.

Incentivized

• Performance-wise, it can be improved. Queries take a long time.
• Dataset exploration - More data visualization charts can be added.

Incentivized

Apple of Discord is the pricing as we were looking for an email security tool in reasonable pricing and Barracuda was undoubtedly efficient in action and was compatible with our business but it was highly expensive and then we made up our mind for another tool and Cofense Vision was offering almost the same as Barracuda but cheaper.

Incentivized

Easier we were using Splunk Enterprise on heavy forwarder on which all the add-on were installed and were using Splunk Cloud with respect to search head and indexers stack. And with Splunk Enterprise Security premium app, we were relying on correlation rules which were throwing more number of false positive but after implementing Splunk UBA, we are now getting real-time true positive threat or incidents.

Incentivized

• Many Phishing attacks are identified and prevented in an instant.
• Classification of activity helps analysts search and find which emails pose a larger threat.
• User interface and learning is simple and easy to use.

Incentivized

• Fewer team members to work on real threats.
• Less time required to deal with real incidents.
• Easy to implement across the network.

Incentivized