Item: LevelBlue USM Anywhere
Rating: 10
Author: Kirk Crespin

Overall Satisfaction with AlienVault Unified Security Management

Use Cases and Deployment Scope

AlienVault USM is used across the whole organization. As a bank, security is vital. Having the ability to perform weekly internal vulnerability testing, asset management, log correlation and intrusion detection is amazing; however AlienVault USM does much more.

Working in one of the most heavily regulated industries, making sure the products we utilize meet a certain standard of performance and capability. AlienVault USM has been reviewed by our 3rd party and Regulatory Auditors with favorable opinions.

Pros and Cons

Pros

Vulnerability assessments with vulnerability remediation task management
Threat Detection with Host and Network based IDS
Security information event management with log/event correlation
Reporting and Alarm with ticket tracking

Cons

Automatic updating of threat intelligence updates

Alternatives Considered

I considered and compared different SIEM solutions before I purchased AlienVault. Solutions such as the Solarwinds, Symantec, HP/ArcSight and Splunk solutions.

When I compared the pricing and features, AlienVault won on every level. AlienVault is more than a SIEM solution. AlienVault is the most complete Information Security management solution that I was able to find.

Likelihood to Recommend

It is well suited for a higher security conscious environment. If you have multiple users or one user, the task management and the alarm management tool is a great way to manage tasks.

I would suggest some basic knowledge of Linux and would suggest purchasing a setup review with the AlienVault tech team after your initial installation. This will help to ensure that your settings are correct and are maximized for the best security and performance.

Comments

Please log in to join the conversation

Much more than just a cool product name!

Software Version

Modules Used