I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
Veeam One works great for monitoring virtual infrastructure. However, other dedicated server monitoring apps do better with monitoring the individual VMs. Where it stands out is its reporting functionality, which allows you to forecast growth and keep track of how you are using your resources. It is also great for companies without a big monitoring budget, as there is a pretty functional free version.
Proactive Alerting - the product can provide email alerts to notify one of any issues in the environment.
Capacity Planning and Forecasting - it has the ability to provide an analysis of the current environment as well as provide a report to forecast future capacity requirements.
Monitoring and Reporting - the software can monitor you environment 24x7 with the ability to provide comprehensive reporting.
Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
The licensing is tricky to understand. You can have an enterprise BR license or a Veeam ONE license, and the split modules read from only one module where the license is actually loaded into it.
Documentation could be a little better.
It's not exactly pretty to look at. Themes and tweaks are pretty limited.
QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
The software is a joy to use. The user interface is good overall and you can find frequently needed things easily and quickly. Some less frequently needed things eg. settings are hidden under several menus and one might have to look for those for a while. We also haven't had any issues with the products reliability.
Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
We rarely if ever call support, but overall Veeam is very responsive, quick to get a hold of, and knowledgeable in there help. Some companies get big like Veeam and their support drops off, but we haven't seen that with Veeam (but again, their products seem really solid and trouble free so we rarely need help).
The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
Veeam One is very easy to use, easy to configure and get what you want. The integration for Veeam Backup is perfect, for today i think Veeam need to make Veeam One monitor Microsoft 365 envirioment, this will give great imput and integrated with Veeam Backup for 365 will be amezing.
The most positive impact has been a centralized platform to manage all our vCenter Tags, which orchestrate all our BCDR solutions with Veeam.
Response time for analyzing system performance when there are issues has greatly increased due to the simplicity of the software, plus we have been able to allow access to application developers and managers to view and asses their servers when they feel there are issues, without the need to contact the infrastructure team members.
