Likelihood to Recommend QRadar is very well suited on environments where there are not multiple tenants or domains, we do have success on this kind of scenario. IBM Security QRadar SIEM is less appropriate for environments with multiple tenants, specially when each tenant represent a different End Costumer (such as for MSSP companies), those environments require a high amount of rules and building blocks replications, since each tenant will have its own "BB definitions", servers, rules exception, etc. Also, some information, such as EPS count or EPS dropped are generated by QRadar's own log sources, which takes place on default domain, therefore users associated with different domain can not have access to those logs, even when the information is related to other domain's environment. For example, even if Event Collector 1 is associated to Domain A, the log informing its dropped EPS is generated by System notification, log source that must be associated to Default domain.
Read full review Ivanti ITAM suite is very robust and offers all the features you need in an ITAM solution. Out of the box, you get all you need, but you are able to customize and add processes that are missing very easily. It will work for any organization, regardless of complexity. We have the full suite of Ivanti products and there are nice integration options that make usage very seamless.
Read full review Pros Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action. Facilitates security incident investigation and forensic analysis. Provides a real-time view of security events, enabling immediate incident response. Can integrate with external threat intelligence sources to enrich data and improve threat detection. Enables the generation of detailed and customized reports. Read full review Remote PC Inventory Remote PC access (PC access) Reporting Offsite PC access (through LANDesk Gateway) Read full review Cons Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources. While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete. IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting. Read full review Licensing can be complex and is fairly expensive. I did not research other ITAM solutions as we use the entire Ivanti suite to see how pricing compares, but it does seem expensive. Be careful when you are building you CMDB module in the Ivanti Service Desk tool, we found the hard way that create custom CI processes requires an ITAM license. We have submitted a few bugs and the resolution from support seems slow. I find this is common with many vendors, but was hoping for better resolution times with Ivanti. Read full review Likelihood to Renew With the arrival of IBM Security QRadar SIEM at our company, we have a better vision of all the security needs that may arise, it is a very safe software to use that prevents threats from damaging our IT environment, it is impossible to change it for another software.
Read full review Usability A very special system to use without problems, the process is very genuine and does not require complicated procedures.
Read full review Support Rating Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
Read full review Alternatives Considered IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
Read full review This is the only software suite in its category I have any real professional experience with, so I cannot speak to how it stands up to the competition
Read full review Return on Investment Offense investigation was really helped in tackling the incidents. It was accurate and brief The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database Read full review We have seen tremendous ROI with custom processes set up to manage the lifecycle of our assets. This was a huge void for us previously and now we can see when assets are coming/going and when they should be retired. Integration with other apps via API has allowed us to automate manual tasks and streamline processes. Tie-ins with the CMDB function of Service Desk have allowed us to create dynamic workflows to manage the lifecycle of assets and other related assets. Very powerful use case. Read full review ScreenShots