Item: LevelBlue USM Anywhere
Rating: 5
Author: Verified User

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

It is being used by our Network Operations Center to monitor potential security alerts and suspicious activity. It is also used as an additional investigation tool if users or customers report potentially malicious activity.

Pros and Cons

Pros

Easy to set up/use
Cost-effective

Cons

Interface is slow and quirky
Lacks functionality compared to other products
Documentation (both troubleshooting and informative) is lacking detail
Ease of use also has downfalls in that when detailed information is needed it's harder to obtain when investigating/troubleshooting

Alternatives Considered

Splunk Enterprise, LogRhythm NextGen SIEM Platform and Alert Logic Cloud Insight

AlienVault was able to provide the same basic functionalities as the other competitors. Open Threat Exchange is a really good feature, and the fact that it came with intrusion detection was a huge plus and key part of why we purchased.

Likelihood to Recommend

If you're looking for something easy to set up and cheap while hitting the checkboxes, this will suffice. In order to get real functionality out of it, you need to tweak things. During the sale that was a big selling point, but once we implemented the "out of the box" solution, it all needed to be configured. And it wasn't like we could configure them because most of the issues found during implementation required development work. It was disappointing to learn these things once we already signed the contract.

Comments

Please log in to join the conversation

Tami Andrews
(Vendor Representative) commented 6 years ago
Thank you for your feedback!

Cost effective and easy to use

Software Version