Making sense of the logging overload.
September 30, 2015

Making sense of the logging overload.

Mayson Morrissey | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Software Version

5.1.1

Overall Satisfaction with AlienVault Unified Security Management

We purchased AlienVault Unified Security Management to assist with our efforts to become PCI compliant. AlienVault Unified Security Management rolls up a significant number of the PCI compliance steps into a single package streamlining our compliance and ongoing management.
  • Identifying risks and vulnerabilities on systems it is monitoring.
  • Log consolidation and analysis.
  • Threat correlation between different systems.
  • Building customized plugins for systems that do not already have plugins is very daunting. Some tool to help with analyzing the data from new log sources and helping to build the new plugin would be great.
  • Wizards to step you through directive creation.
  • Support for VM installations on Hyper-V as well as VMWare.
What set AlienVault Unified Security Management apart was that is was an all-in-one solution at a reasonable price. Other products were significantly more expensive and were very "module" based which made me fear module creep as I would try to implement them.
While AlienVault Unified Security Management consolidates a lot of security into a single system it is not simple to manage and customize. While I would recommend it, I would also recommend that anyone using it will likely need to also allocate a budget for consulting services or managed services.