Item: LevelBlue USM Anywhere
Rating: 10
Author: Ryan Hart, MBA

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

We used to monitor our web application, firewall, and our G Suite logs. AlienVault USM solves the problem of manually monitoring logs. We were able to filter our alerts to ignore known non-threatening behaviours. AlienVault USM also gave us a more efficient way to search our logs rather than viewing the raw log files in our data provider.

Pros and Cons

Pros

Easy to Install
Good use of filters
Great training
Good support documentation

Cons

Paying per GB of usage is not ideal

Alternatives Considered

Splunk Cloud

I researched Splunk, AlienVault USM, and two other competitors, but the first two were the only ones seriously considered. AlienVault USM was able to offer better pricing and consummate a deal faster than Splunk. Splunk just could not get their act together to close the deal. Their sales rep assigned to our account turned over twice during the negotiating period.

Likelihood to Recommend

AlienVault USM provides good overall value and support. I am not a fan of on-prem monitoring hardware. Alien Vault USM has fantastic cloud-based monitoring solutions which we host in our cloud environment.

Comments

Please log in to join the conversation

Better than Splunk

Software Version