1. Home
  2. Security Information and Event Management (SIEM) Software
  3. AlienVault USM Reviews
  4. User Review of AlienVault USM
AlienVault Review
March 23, 2018

AlienVault Review

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Software Version

USM Appliance (On-Premises)

Overall Satisfaction with AlienVault USM

We are using AlienVault as a collection point for our security and appliance logging to take advantage of its correlation engine to identify security concerns we might not otherwise notice.

We are able to run various reports as needed or schedule them to provide insight into various metrics such as account lockouts, vpn connectivity, etc.

  • Log Correlation - continuously growing list of correlation rules to catch network and security concerns.
  • Log searching - quick sorting / searching through all of our security events.
  • HIDS - It is nice to be able to track multiple specific metrics or logs against servers using the HIDS agent.
  • Difficult to configure.
  • They include training when you purchase AlienVault - which I feel is necessary. The downside is the training is really split between implementation and use, where the value for end users is really just use. Staff probably need this training to get most out of implementation.
Price - I think that this is the area they stand out the most, much easier to get into an AlienVault device than something like Splunk or Logrythm.
Entry level SIEM software - can be built into very stable SIEM but you will need to put the time in for it to do so. I do feel all SIEM software requires dedication staff time to properly configure and maintain. You do need to actively hop in and clean up false positives and whatnot or the system will be too chatty and less useful.