Exabeam Fusion vs. ManageEngine ADAudit Plus

As a SIEM tool for investigations, Exabeam is the best in class. The AI assigns numeric values to observed logs them presents high scores to the analyst in a simple dashboard. We can see what is a real threat and ignore so many false positives. Exabeam is the best SIEM was used from an alert fatigue perspective. The simple interface allows other teams not just InfoSec to utilize the tool; helpdesk for asset diagnoses, HR for staffing questions, etc.

Incentivized

ManageEngine ADAudit Plus is well suited for monitoring Active Directory changes, tracking user activity, and meeting compliance requirements. Its real-time alerts and audit reports help quickly identify security issues and simplify troubleshooting. It may be less suitable for very small environments that have minimal auditing needs

Incentivized

• Simple graphical interface
• Plan text searching, no need to know another coding language
• Very very fast response
• All saved logs up to 7 years instantly searchable
• Not cold or frozen buckets for years old logs

Incentivized

• ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
• You can build your own reports based on almost every logic you can think of
• You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
• First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
• I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.

Incentivized

• Improvements on top of Lucene/KQL to add more search functions.
• Stability of the overall deployment.
• Ability to run version upgrades quicker and without data ingestion problems afterward.
• More documentation and examples about the API functionality available.

Incentivized

• It's based on Java engine that is slow -- reports are often difficult to build (we are going to upgrade the machine it's running on to see if this is the issue)
• Keeping this software up to date is a pain; there should be a better "update" function
• The naming and navigation are terrible -- it's never clear which feature you're looking for and where it's hidden in the menus
• Adding machines is not as easy as it should be; occasionally there are IP conflicts that are nearly impossible to resolve

Incentivized

It works great for everything we need and use. Any issues in the software are pretty easy to resolve with tech support. And they are very responsive to resolving issues. Even ones where a fix/patch are required. At present, the software does everything we need it to for compliance, audit, and account review.

Incentivized

The system is set up to run out of the box. It has a simple easy to understand the graphical interface. Exabeam designed its SIEM from the ground up to be user-friendly and intuitive. They designed it to use plain text searches so no special training is needed. You do NOT have to learn another programming language and keep up with it daily to be proficient and productive with the tool, unlike all other SIEMs we have used before. Did I mention we love Exabeam?

Incentivized

ADAudit with its cloud and on prem install option allows any organization to get in on AD report management. Whether you need to report internally only for for external audit controls its a great tool with flexibility to handle most any user or group report capability. Since this also includes m365 integration it enables IT pros to administer usage, license, cost control and permission access to most anything in Microsoft's portfolio. Its a great tool all around for AD integrated access needs.

Incentivized

uptime good

Incentivized

Integration/overlap between products could be improved

Incentivized

The engineers working to support Exabeam are very professional and competent. They always arrive prepared for troubleshooting meetings and provide helpful input to resolve most issues without requiring excessive escalation whenever possible. Their support team is good at promptly providing parsers that can be used to enhance the product's functionality and ensure fields are all populated.

Incentivized

Support is always helpful, but they can sometimes be difficult to understand which adds a level of complexity to troubleshooting an issue. They are very persistent at making sure you get your issue fixed though, which raises this rating substantially.

Incentivized

knowledgable and prompt response

Incentivized

The remote setup team helped when i needed it and setup weas very straight forward and easy. The advanced setup for an external db and customizations for our latest version AD environment went pretty easy once they found documentation on customization.

Incentivized

We use the ManageEngine Log360 bundle, which includes ADAudit Plus and EventLog Analyzer. Back in 2016, when we evaluated the ManageEngine solution, we compared it to an existing Juniper JSA deployment, mapping specific PCI DSS requirements against both products. That was 10 years ago now; much may have changed, but at the time, the ManageEngine solution mapped well to the PCI DSS requirements, so we retired the Juniper JSA solution.

Incentivized

updates are effective and system is reliable

Incentivized

• Reduced time to triage alerts.
• Reduced number of alerts which need escalation to senior tiers.
• The ability for analysts to quickly run playbooks for additional information and enrichment.
• Ability to retain data for longer periods for forensics purposes.
• Improved search performance compared with other SIEM solutions.

Incentivized

We no longer have to spend time or manpower digging through logs. The product presents the information you need (whatever that may be in your situation) on the dashboard, via à la carte reports, or automatically to your inbox. You save a lot of time not having to mine for data with this product. Everything is there in the morning for me to review, or on hand if I feel like looking before reports run.

• ManageEngine ADAudit Plus has reduced the need for additional IT FTEs by allowing our lean staff to do their jobs well in the background.
• It is not a very resource-intensive product, so you won't need a dedicated or high-performance server to run it. It runs in VMs or on bare-metal servers just fine.
• The pricing is good. There are products that do more, but their cost can be exponentially higher, depending on the features.

Incentivized