SolarWinds Kiwi Syslog Server vs. Trellix Enterprise Security Manager

To monitor syslog events Kiwi syslog much helpful and needed .Its saving human efforts and cost.Easy to check on GUI panel flow and status of server ,start and stop services we can do them from GUI panel it self . Recent version also no need C++ libraries to install .We can store the ingested events and archive based on our threshold criteria .We can import and export INI file which contain everything what we have configured

I believe that McAfee Enterprise Security Manager is best-suited for anyone in an office setting with a computer containing sensitive information. McAfee Enterprise Security Manager is constantly working to make sure that your device is free from an threats. Our field workers, however, probably wouldn't have a need for McAfee Enterprise Security Manager. They do not use computers for work and have no sensitive information stored in a work-related cloud.

Incentivized

• Collection of SNMP traps a reliable and stable collection server for these is crucial to troubleshooting and time to ROS. Kiwi excels at this.
• Easy to install set up and train users on.
• The free version is a good free tool and handy to use for personal labs and other smalle use cases.
• SNMP traps to user readable format is great, sometimes syslog and smnp messages can be hard to interpret and read with out a knowledge of how to do this.

Incentivized

• McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
• This is a core McAfee product that is still getting support.
• It has a substantial amount of compatibility and integration with other products.

Incentivized

• Minimalistic; If you're looking for something with analysis features look elsewhere.
• Operating System support is Windows only.
• Some management features cannot be configured via web interface.

Incentivized

• The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
• While the "user" interface is pretty straight forward, the management interface is fairly complicated.

Incentivized

Kiwi Syslog has the best usability of any syslog server. While not being able to offer the most features, the ones it does have are intuitive and easy to work with. Everything that it has is where you think it should be. If you can't find it in the menus, it doesn't exist.

Incentivized

Because the solution is so simple to use and implement, support wasn't very necessary. The one time I did call them to better understand where logs were stored, they were very helpful and friendly. Kiwi has been around for some time and not a lot has changed over the years, so support for it is pretty straightforward and quick.

Incentivized

McAfee Enterprise Security Manager overall is a great tool. It is effective in today's setting, wherein lots of potential threats are lurking. Its operations within the network are seamless. Users won't even notice that a SIEM is working in the background. But in today's trend, most of the businesses is heading towards the migration to cloud, which McAfee should improve its integration with.

Incentivized

PRTG is a great package and very useful, but the jump from the free 100 sensor price model to the first tier of the paid model is WAY too expensive. SolarWinds Kiwi Syslog Server is very inexpensive and provides us with the results we needed for log monitoring.

Incentivized

We selected McAfee Enterprise Security Manager because the pricing is competitive in the industry. It is very reliable. The vendor offers good support in real time. Offers the results that we have been looking for. The ability to get the logs may be of last 2 years in a matter of seconds. The ability to retain logs for a very long time.

Incentivized

• Its provides centralized console for Server and Network devices log collection, reducing need of two separate Log collectors.
• It reduces cost

Incentivized

• Centralisation of events form NIDS/IPS/IDS, Firewall(s), Web Proxy and Endpoint
• Ability to have third party management
• Actively upgraded product with good vendor support

Incentivized