Vendor Landscape: Security Information & Event Management

More documents

Recommendations

Info

Sensage may be small, but its SIEM solution and support offerings are on par with the big companies Vendor Landscape Product Vendor Overall Feat. Use. Afford. Arch. Overall Via. Strat. Reach Chan. What we’re hearing “(Sensage) stayed up with us one night when we were fixing an issue. We had implemented a near-line storage solution, and we had performance issues. It was a solution we chose and didn’t do a good job consulting with Sensage on, but they stayed up to fix it even though it wasn’t their issue. They took it on to do the right thing.” Value Index 79 2nd out of 10 “They need more opportunities to expand in real-time alerting capabilities. Because you can get into the guts area (with the solution), it does take some effort. I’m excited for the new version, (as) they’ve made enhancements in that area. Jason Stead, Director of Information Security, Choice Hotels Log Data Enrichment Advanced Correlation Advanced Alerting Advanced Reporting Features Forensic Analysis Data- Security Data - Retention UCF MITRE CEE Info-Tech Recommends: Sensage remains a leader in the space, expanding its capabilities to handle big data and continuing to offer top-notch support for its users. Sensage boasts a small but impressive (and growing) client list. Users wanting a consistently strong solution from a dedicated vendor should consider Sensage. Info-Tech Research Group 26
Q1 Labs QRadar: a quality product line, now part of the IBM portfolio Champion Product: Employees: Headquarters: Website: Founded: Presence: Endpoint QRadar SIEM Security & Data Protection 1,200+ 400000 (IBM) Abingdon, Armonk, NY UK Sophos.com Q1Labs.com 1985 2001 Privately NASDAQ: Held IBM FY10 Revenue: $95.8B 3 year TCO for this solution falls into pricing tier 7, between $100,000 and $250,000 Overview • Q1 Labs was the largest independent player in the SIEM space prior to its acquisition by IBM. Q1 Labs supplements its SIEM play with a broad suite of products to allow for comprehensive security management. Strengths • The broadest and most comprehensive set of internal reporting capabilities of any product in this test; integration to third-party reporting solutions is usually unnecessary. • Cleanly integrated set of hierarchical products allows enterprises to grow their security management capabilities in an additive, not rip-and-replace manner. Challenges • Q1 Labs is participating in neither UCF nor MITRE CEE efforts at this time, which may limit future compliance reporting or security system integration capabilities. $1 $1M+ Pricing solicited from public sources Info-Tech Research Group 27
Page 1 and 2: Vendor Landscape: Security Informat
Page 3 and 4: Executive Summary Understand SIEM T
Page 5 and 6: Understand SIEM Trends and Consider
Page 7 and 8: Like every tool, SIEM has limitatio
Page 9 and 10: Determine how and where SIEM will h
Page 11 and 12: Be clear about the impact of SIEM-e
Page 13 and 14: Evaluate SIEM Vendors What’s in t
Page 15 and 16: SIEM Vendor selection / knock-out c
Page 17 and 18: The Info-Tech SIEM Vendor Landscape
Page 19 and 20: The Info-Tech SIEM Value Index What
Page 21 and 22: Advanced Features are the capabilit
Page 23 and 24: LogRhythm’s comprehensive SIEM fe
Page 25: Sensage is a small company that eas
Page 29 and 30: LogLogic provides a strong solution
Page 31 and 32: NitroSecurity continues to bring a
Page 33 and 34: SolarWinds is a newer face in the m
Page 35 and 36: RSA has a solid solution, but also
Page 37 and 38: Symantec offers vendor stability an
Page 39 and 40: ArcSight offers both enterprise- an
Page 41 and 42: Trustwave’s strength is in their
Page 43 and 44: Streamline monitoring, alerting, an
Page 45 and 46: Ensure the reduction of enterprise
Page 47 and 48: Issue an RFP to ensure SIEM vendors
Page 49 and 50: Take charge of vendor demonstration
Page 51 and 52: Getting to a SIEM implementation st
Page 53 and 54: Identify constraints for your SIEM
Page 55 and 56: Account for implementation resource
Page 57 and 58: Determine how you intend to staff S
Page 59 and 60: Start modestly, but keep the final
Page 61 and 62: Vendor Landscape Methodology: Overv
Page 63 and 64: Vendor Landscape Methodology: Scori
Page 65 and 66: Vendor Landscape Methodology: Infor
Page 71 and 72: Vendor Landscape Methodology: Fact
Page 73 and 74: Product Pricing Scenario, continued
Page 75 and 76: Country Info-Tech Research Group 75
Page 77 and 78:
FTEs Info-Tech Research Group 77
show all

Vendor Landscape: Security Information & Event Management

Create successful ePaper yourself

Delete template?

Save as template?