Vendor Landscape: Security Information & Event Management

More documents

Recommendations

Info

NitroSecurity’s SIEM features a powerful and intuitive interface Vendor Landscape Product Vendor Overall Feat. Use. Afford. Arch. Overall Via. Strat. Reach Chan. What we’re hearing “I’m happy with things like base-lining, notifications and reports, get down to packet level which is one of the coolest things we can do and it’s very fast.” Senior Security Engineer, Insurance Value Index “It is a near real-time logging tool that excels at taking gobs and gobs of data, correlates it, creates baselines for that data, with alerting and reporting all in a single pane of glass. My number 1 complaint is that I wish it had real-time tail logging ability for troubleshooting purposes.” Network Engineer, Food Industry Production 67 Features 7th out of 10 Log Data Enrichment Advanced Correlation Advanced Alerting Advanced Reporting Forensic Analysis Data- Security Data - Retention UCF MITRE CEE Info-Tech Recommends: NitroSecurity’s SIEM interface is above and beyond the competition in terms of fluidity and capability to drill drown into the data. Users wanting a breadth of features, complete with the most attractive and intuitive interface, will find an ideal solution with NitroSecurity. Info-Tech Research Group 32
SolarWinds is a newer face in the market, but already a strong competitor Innovator Product: Employees: Headquarters: Website: Founded: Presence: Endpoint SolarWinds Security LEM (formerly & Data Protection TriGeo SIM) 1,200+ 600+ Abingdon, Austin, TX UK Sophos.com SolarWinds.com 1985 1999 Privately NYSE: SWI Held FY11: $198M 3 year TCO for this solution falls into pricing tier 5, between $25,000 and $50,000 $1 $1M+ Pricing provided by vendor Overview • SolarWinds has taken TriGeo’s compliance-focused solution and added in operational capabilities for full-featured, but affordable, solution. Strengths • SolarWinds aims to solve the “enterprise SIEM” problem for the mid-market by offering basic features in reporting, correlations and endpoint coverage, a drag and drop rule builder, and by bringing information to user’s fingertips instead of making them dig deep. • With a price point that is unmatched by its competitors, SolarWinds offers exceptional value for users without sophisticated SIEM needs. Challenges • SolarWinds’ focus on supporting compliance requirements is clear; however, they currently lack in advanced security-oriented capabilities. • SolarWinds LEM lacks internal retention management: though data can be archived to a network share, the general storage limit inherent within the product is 2TB. If a system reaches full storage and external shares are not used, data simply expires out. Info-Tech Research Group 33
Page 1 and 2: Vendor Landscape: Security Informat
Page 3 and 4: Executive Summary Understand SIEM T
Page 5 and 6: Understand SIEM Trends and Consider
Page 7 and 8: Like every tool, SIEM has limitatio
Page 9 and 10: Determine how and where SIEM will h
Page 11 and 12: Be clear about the impact of SIEM-e
Page 13 and 14: Evaluate SIEM Vendors What’s in t
Page 15 and 16: SIEM Vendor selection / knock-out c
Page 17 and 18: The Info-Tech SIEM Vendor Landscape
Page 19 and 20: The Info-Tech SIEM Value Index What
Page 21 and 22: Advanced Features are the capabilit
Page 23 and 24: LogRhythm’s comprehensive SIEM fe
Page 25 and 26: Sensage is a small company that eas
Page 27 and 28: Q1 Labs QRadar: a quality product l
Page 29 and 30: LogLogic provides a strong solution
Page 31: NitroSecurity continues to bring a
Page 35 and 36: RSA has a solid solution, but also
Page 37 and 38: Symantec offers vendor stability an
Page 39 and 40: ArcSight offers both enterprise- an
Page 41 and 42: Trustwave’s strength is in their
Page 43 and 44: Streamline monitoring, alerting, an
Page 45 and 46: Ensure the reduction of enterprise
Page 47 and 48: Issue an RFP to ensure SIEM vendors
Page 49 and 50: Take charge of vendor demonstration
Page 51 and 52: Getting to a SIEM implementation st
Page 53 and 54: Identify constraints for your SIEM
Page 55 and 56: Account for implementation resource
Page 57 and 58: Determine how you intend to staff S
Page 59 and 60: Start modestly, but keep the final
Page 61 and 62: Vendor Landscape Methodology: Overv
Page 63 and 64: Vendor Landscape Methodology: Scori
Page 65 and 66: Vendor Landscape Methodology: Infor
Page 71 and 72: Vendor Landscape Methodology: Fact
Page 73 and 74: Product Pricing Scenario, continued
Page 75 and 76: Country Info-Tech Research Group 75
Page 77 and 78: FTEs Info-Tech Research Group 77

Vendor Landscape: Security Information & Event Management

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?