Item: AlienVault USM
Rating: 5
Author: Verified User

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

One department is using AlienVault as a HIDS, NIDS, FIM, and security alerting system. It was selected as having the integrated feature sets to accomplish unique certification and security requirements for that department.

Pros and Cons

Pros

Has a range of features in one package. HIDS, NIDS, FIM, reporting, and alerting.
Report templates for SOC, NIST, ISO 27000.

Cons

The support since the recent purchase by AT&T has really dropped off. Answers to questions are much slower and sometimes wildly inaccurate. Asking the same question multiple times of different support will yield totally different answers.
Some of the features that existed in the on-prem version has still not made it into the cloud version.
Asset scanning has become buggy in the latest updates, and bugs are getting fixed much slower than our previous experience before the AT&T purchase.

Alternatives Considered

Cisco Firepower, Rapid 7, Splunk, McAfee, and Qualys were all considered in our search for a security solution. Each of them had elements that fit but required more than one package or multiple vendors to accomplish what Alienvault did in one.

Likelihood to Recommend

Right now it is a product in transition. While the features are there for a solid security package, both the on-prem and cloud versions are in a state of transition. I hope the new owners continue to invest and stabilize what should be an amazing security package.

Comments

Please log in to join the conversation

Tami Andrews
(Vendor Representative) commented 5 years ago
Thank you for your comments & feedback. If you would be open to discussing some of the issues you've raised, please reach out to me at tandrews@alienvault.com and I'll be happy to arrange a call with the appropriate team members.

Very promising, but immature product.

Software Version