AlienVault - Funny name but a great security product
Updated September 07, 2017

AlienVault - Funny name but a great security product

Jeremy Wanamaker | TrustRadius Reviewer
Score 9 out of 10
Vetted Review

Overall Satisfaction with AlienVault USM

We are an AlienVault Managed Service Security Provider (MSSP). We use the product internally, as well as for customers. AlienVault is a great product because it provider a level of visibility into network activity that is difficult to achieve with traditional infrastructure monitoring tools. Like any good tool, there is a learning curve. I highly recommend working with a partner or a consultant if you are considering implementing AlienVault. Once it's set up properly on a network, it provides excellent data about vulnerabilities and network activity that would otherwise be missed. In every case where we've deployed AlienVault, the tool has exposed risks and/or activity that was unknown prior to the installation. AlienVault support is excellent. In every case where we've had to escalate an incident or problem to support, they have been very responsive initially and in fixing the problem. I highly recommend the AlienVault product for any organization that is looking for a cost-effective and comprehensive security tool.

Pros

  • Identifying network vulnerabilities
  • Alerting on suspicious network traffic
  • Providing a single pane-of-glass for security monitoring

Cons

  • Ticketing - the internal ticketing system is not very good and integration with external ticketing systems is limited to email forwarding
  • Out-of-the-box usefulness. The product requires a significant amount of time and expertise to make it useful. AlienVault could provide better documentation and/or GUI workflows to make setup smoother
It's well suited to midmarket businesses with a straightforward network setup. I don't have much experience in setting up the product on very complex networks but I can imagine it would complicate deployment and administration quite a bit. It's not a suitable product for enterprise environments with a full support staff of security experts.

AlienVault USM Implementation

AlienVault USM is a great improvement on the AlienVault interface. They have streamlined the interface. There are some features that are not yet working, such as reverse-DNS, which I would consider essential to a mature product. If the development team can improve the functionality and maintain the streamlined interface, this will be a very good product.

Using AlienVault USM

Good product. It's a significant improvement in UI from AlienVault's previous offer. It could use more polish. The feature set also needs to improve. There are features that existed in AlienVault's previous product that are not included in this product. I understand the developers are rapidly adding features. We expect this product will mature into a best-in-class offering.

Comments

  • Tami Andrews | TrustRadius Reviewer
    thank you Jeremy for your feedback!

More Reviews of AlienVault USM