Overall Satisfaction with AlienVault USM
We are primarily using the product as our SIEM system to correlate logs across our infrastructure and provide useful analysis on potential threats and anomalies. We also use the built in vulnerability scanning, IDS and asset management functions as a complement to our existing vulnerability/IDS/asset management systems. With this level of intelligence, it helps us determine what course of action to take to an incident and assists us in prioritization.
- Log correlation is excellent and on par with other more expensive solutions.
- Ease of use is a big plus.
- Initial setup was simple and quick.
- The OTX threat intelligence is a great complement to our other threat intelligence feeds to ensure we have as many 'eyes' out there informing us of all the potentially malicious threat actors out there.
- There are a couple of things that can only be done through the CLI and unless you're familiar with the CLI, there may be a large learning curve for some.
- The vulnerability scanner lacks a number of advanced features that other solutions have which make it simpler and more efficient to manage.
- Plugins are limited (although they are adding more as time goes on). If you need a plugin that is not available you will need to create one on your own which requires modification of a number of files and can be daunting for someone new to the platform.
Based on our requirements, budget and the goals we had set, the AlienVault USM was a perfect fit when compared to the other solutions we considered.
Using AlienVault USM
4 - From Security Analysts, to IT personnel to Executives.
3 - Security analysts, IT skills are required to support the AlienVault USM.
AlienVault USM Implementation
AlienVault USM Support
Pros | Cons |
---|---|
Quick Resolution Good followup Knowledgeable team Problems get solved Kept well informed No escalation required | Difficult to get immediate help Need to explain problems multiple times |
Yes - The AlienVault USM is an integral part of our security architecture so we see the value in paying for support.
Yes - Yes, although it would've been quicker if the support person had just called me rather than trying to communicate via email.
There have been a few times recently when AlienVault support did go out of their way to provide exceptional support. If they keep this up their customer satisfaction rates will no doubt go higher in the future.