Item: AlienVault USM
Rating: 8
Author: Verified User

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

In our organization we use AlienVault USM for threat detection and to keep up to date with patches needed to cover for known vulnerabilities in our servers.

Pros and Cons

Pros

Threat Detection
Scanning for Vulnerabilities in servers
Event handling
Integration with other product like Google Suite to create security reports.

Cons

When handling alarms, I'd like to be able to select all the resulting alarms at once after filtering and not by groups of 100 like it's possible now.
I think filtering could be improved in the Alarms and Events sections.

Alternatives Considered

Splunk Enterprise Security

Balancing what each product had to offer, the grade of difficulty of implementation and the investment it represented for our company AlienVault came out as the better option for our infrastructure.

I think it's well suited when you when you need to tackle host intrusion detection from scratch and there's not a security specialist in your organization. AlienVault is pretty straightforward and easy to understand. You get support to implement and then you can get training. Once implemented it's easy and intuitive to navigate.

Comments

Please log in to join the conversation

Tami Andrews
(Vendor Representative) commented 5 years ago
Thank you for your feedback!

My Experience using AlienVault

Software Version