Overall Satisfaction with AlienVault USM
AlienVault has been implemented across the whole organization. We monitor and raise the alarms/alerts and reach out to the end user/business for mitigation. It addresses all kinds of network-related activities, not limited to third-party chat applications, torrent connectivity, P2P connections, etc.
- It raises the alarms/notifications at the same moment it happens.
- The correlation job is wonderful. It correlates all the events and checks with the vuln also.
- The pcap is not available in USM Anywhere, where it was available in the USM appliance.
- I feel at times that the correlation is quite slow.