Overall Satisfaction with AlienVault Unified Security Management
We currently use AlienVault to help us with our PCI compliance. That was the initial use, but it has given us tremendous insight into our environment.
- AlienVault gives us insight on the network intrusion inside of the external firewall.
- The HIDS agents collect a great number of data points letting us know what is going on.
- Asset management and detection has been easy to use and has given us an inventory of everything on our network.
- I think the biggest room for improvement is more documentation of what is going on behind the scenes with the different plugins.
We reviewed Splunk Light and even the full version for a month. The cost for the amount of data being gathered just wasn't cost effective. It was also not nearly as easy to set up.