Item: AlienVault USM
Rating: 8
Author: Verified User

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

We use AlienVault across the whole organization. AlienVault USM creates an all in one security solution where we are able to correlate events from different source types, such as server events, but also the complete cloud trail from our public cloud provider Amazon Web Services. All the security logic, which is part of the offer, has really relieved our operations team.

Pros and Cons

Pros

Many event sources, including public cloud!
Setup is easy.
Filtering options for browsing events is convenient.

Cons

Reporting cannot be automated currently. Every month we need to open the web console and generate them ourselves.
MFA authentification cannot be forced.
The license fee for each sensor is costly when you have a multi-account cloud setup at AWS.

Alternatives Considered

Splunk Cloud

More costly then Alienvault,

Likelihood to Recommend

AlienVault USM is well suited when your assets live in the public AWS cloud because of the available integrations they've made.

Comments

Please log in to join the conversation

All In One SIEM Solution

Software Version