CrowdStrike Next-Gen SIEM vs. Trellix Enterprise Security Manager

Humio Log Management software has helped a lot in our organisation by automatically streaming all deployment, forms and other memos without needing additional configuration at the application level. It makes parsing logs a lot easier as we can enter our custom parsing rules and structures and conditions. Once the logs are parsed it helps sort and filter data which helps a lot and saves time while working on specific cases and data.

Incentivized

I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.

Incentivized

• Log aggregation
• Log management and sorting
• Hardcore query language

Incentivized

• McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
• This is a core McAfee product that is still getting support.
• It has a substantial amount of compatibility and integration with other products.

Incentivized

• The UI is very slow and needs lot of improvement
• It does not have premade parses for syslog data
• Scripting challenged users may face many difficulties

Incentivized

• The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
• While the "user" interface is pretty straight forward, the management interface is fairly complicated.

Incentivized

McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.

Incentivized

I have not used products such as Humio Log Management management before

Incentivized

We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.

Incentivized

• It helps a lot by saving time while finding specific log data thanks to the sort and filter feature
• It helps save time while parsing logs and arranging them
• It is cheaper than other similar softwares in the market and hence is affordable for organizations such as mine

Incentivized

• Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
• Ability to have third party management
• Actively upgraded product with good vendor support

Incentivized