Elastic Security vs. SonicWall Analytics

I believe Endgame is well suited to organizations that have their own Cybersecurity department. Its not well suited for organizations that don't have a Cybersecurity department.

Incentivized

If you have Sonicwall firewalls, and want to store logs and generate custom reports, then this additional investment is worthy. If you only want to have storage for your logs, then I won't recommend this. You can opt for a Syslog tool or a SIEM platform for analyzing the same and storing logs.

Incentivized

• Identify 0-day malware.
• Provides a few forensic details on endpoints.
• Very easy to administer.

Incentivized

• Consolidated Logging
• Reporting
• Custom and predefined templates for reporting
• Ease of integration with firewall and other tools
• Similar GUI and web console like of Sonicwall UTM and firewalls

Incentivized

• I would love that it provided more memory analysis details.
• Being able to edit sensor profiles after creating them.
• I would love it if it provided more automation features.

Incentivized

• We get reports on the basis of features, like system reports, content/url filtering reports. There must be an option to get reports no the basis of complete user activity, or user timeline
• They could have bundled or included management along with reporting
• Pricing considering only collecting of logs and generating reports only from Sonicwall firewalls, I feel is high.

Incentivized

Even though their support is good, I think there are some areas where they need to provide more thorough solutions to issues, some of their solutions are pretty basic and have already been tried.

Incentivized

Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage.

Incentivized

Incentivized

• Being able to identify threats we couldn't identify before.
• Easier management of endpoints.
• Being able to immediately isolate endpoints remotely that have high severity threats.

Incentivized

• We are not able to keep SonicWall firewall logs for more than 3 months, which has given a positive rating to compliances
• We are getting custom and scheduled reports of user web activities
• Logs are now stored safely and securely

Incentivized