Item: LevelBlue USM Anywhere
Rating: 8
Author: Javier Ramirez

Overall Satisfaction with AlienVault Unified Security Management

Use Cases and Deployment Scope

We use the SIEM for clients in a SOC for log correlation of different products, vulnerability scanner, IDS and status of the assets.
The problem that I have with it is the documentation for self support. We find poor content and lot of things on forums that have been erased that probably help.

Pros and Cons

Pros

Cheaper
Many funcional security tools to use
Includes Vulnerability Scanner
All in one

Cons

Poor Documentation
High system requeriments
Can't associate alarms

Alternatives Considered

LogRhythm and Splunk

The [AlienVault] product is very good, cheap and they have an easy wizard implementation and [information on] how to do it, [and they] have a lot of different tools that help to fortress our security in our systems.

Likelihood to Recommend

This product can be use for Enterprises that need intelligence detecting threats in the infrastructure, and unifying all security logs from different products (Firewall, Web filter, linux, Windows).

Comments

Please log in to join the conversation

Tami Andrews
commented 9 years ago
Javier, Thank you for your comments & feedback. You mentioned that one of the 'cons' of USM is our poor documentation. We've made some recent changes to our documentation so I'd encourage you to visit the site https://www.alienvault.com/documentation/usm.htm. Additionally, the AlienVault team is always happy to discuss any other issues you're experiencing and try to help to resolve. If you'd like to reach out to me directly, I'm happy to help facilitate the conversation with the appropriate channel to get answers and resolutions. My email address is: tandrews@alienvault.com. Again thank you for your feedback!

good option¡¡¡