Filter Ratings and Reviews
Filter 29 vetted McAfee Enterprise Security Manager reviews and ratings
Reviews (1-7 of 7)
September 07, 2019
Overall, A Great Value Security Solution
McAfee Enterprise Security Manager is used in our company as the overall security information and event management system. It manages the whole network security inside our organization. Together with other McAfee services, it proactively monitors the behavior of all activities within the network and would prompt the security team whenever there seems to malicious things happening within the corporate network and connected devices.
- Updated and current incident libraries.
- It monitors the entire enterprise network proactively.
- Its monitoring activities do not impact the network.
- Widen more its integration capabilities, such as integration to some cloud platforms.
December 16, 2019
A robust SIEM solution for medium/large companies
We deploy and sell the McAfee ESM (the SIEM solution) to our clients. We had it deployed in several kinds of companies, from small companies to large organizations. From private sector to public sector. McAfee is used to monitor the events (logs) of the clients and correlate them to generate alerts regarding security threats.
- Good parsing capability
- Enables integrations
- The user interface is not the best, it is still based on Flash player (but they have plans to migrate to HTML5).
- While the "user" interface is pretty straight forward, the management interface is fairly complicated.
McAfee Enterprise Security Manager is a powerful SIEM that offers us the comfort of being in compliance with international standards in the domain of information security and helps us to assure security. Correlation of different events from different platforms is very useful and necessary. The integration with another software from McAfee is also very good (EPO, DLP).
- Integration with other software
- Log sources integration
- Very user friendly interface
- Real-time monitoring
- Pre-defined reports
- The system requirements are quite demanding
- No other tool issue or operational issue was identified
McAfee Enterprise Security Manager is easy to use and to maintain, with great results. We use this SIEM because it offers threat intelligence correlation, analytics, profiling, security alerts, data presentation and compliance. Good integration with log sources, inclusive with other McAfee tools. It is easy to monitor security events and identify incidents and cyber attacks.
- Identify brute force attaks
- Anomalous traffic detection
- Faster ingestion and query performance
- Can collect large volumes of events
- Operating in all bowsers
- Documentation detailation
- Simplify the process of creation core relation rules
December 07, 2018
McAfee ESM, a cautionary tale
McAfee Enterprise Security Manager (previously called Nitro) is used as an enterprise SIEM across multiple sites and domains. It collects system logs and system events for correlation and alerting. It's a hub for security operations.
- McAfee Enterprise Security Manager has a large library of pre-made correlations that reduces the amount of work needed to make it functional.
- This is a core McAfee product that is still getting support.
- It has a substantial amount of compatibility and integration with other products.
- The migration off of Flash has been painful. The new interface is very difficult to work with. Even support tends to fall back to the Flash version.
- The GUI is not intuitive under any version. Finding settings takes a significant amount of learning.
- While the product is supported, the transitions from various directions have left the future of the product in question. It used to be the interface for IDS, but the new IDS is stand alone.
- The way McAfee has dropped products with no warning in the past makes us skeptical of trusting any stated roadmap.
April 20, 2017
SIEM causing Anger then use Enterprise Security Manager
McAfee Enterprise Security Manager is used not only for its log collection capabilities but also for its advanced threat intelligence. We are using the product as part of moving into Intel's complete suite of products, where appliance integration will bring a commonality to our incident capabilities and help with faster response times and visibility.
- Advanced Threat intelligence gives us the ability to prioritise alerts quickly and efficiently.
- SIEM log collection allows us to integrate our other Intel products to a centralised point.
- Physical appliances is one of the areas we have moved away from, so the ability for ESM to be available as a VDI was key.
- If there is a requirement to integrate into other vendor products i.e. (log sharing) then this was very cumbersome.
- Integration of vulnerability scanning that is available in other vendor products would be a good addition.
- When integrating all of Intel's products a third party consultancy is usually required, where other vendor products can be configured without this additional cost.
April 12, 2017
ESM is great, McAfee AV, not so much
McAfee Enterprise Security Manager was used to deploy full disk encryption to sensitive end points, manage the HIPS, and end point security across the enterprise of 5000 + endpoints.
- It is a great central management tool with great reports and dashboards.
- It can easily show devices out of compliance.
- ESM is easy to manage and maintain.
- Some tools it manages lack features.
- ESM can have some issues with upgrading.
- MFA support is needed.
McAfee Enterprise Security Manager Scorecard Summary
Feature Scorecard Summary
About McAfee Enterprise Security Manager
McAfee Enterprise Security Manager is security information and event management (SIEM) software, from McAfee / Intel Security.
Categories: Security Information and Event Management (SIEM)
McAfee Enterprise Security Manager Technical Details
| Operating Systems: | Unspecified |
|---|---|
| Mobile Application: | No |