Vendor Landscape: Security Information & Event Management

Symantec offers vendor stability and different deployment
options
Market Pillar
Product:
Employees:
Headquarters:
Website:
Founded:
Presence:
Endpoint Security Information Security & Data Manager
Protection
1,200+ 17,500
Abingdon, Mountain View, UK CA
Sophos.com
Symantec.com
1985 1982
Privately NASDAQ:SYMC Held
FY11: $6B
3 year TCO for this solution falls into pricing
tier 7, between $100,000 and $250,000
$1 $1M+
Pricing solicited from public sources
Overview
• In contrast to most players in the space, Symantec positions its
SIEM solution as a security tool first, and compliance tool
second. Its integration into other product lines backs this up and
makes it a good choice for the security conscious.
Strengths
• Symantec offers the broadest base of deployment types –
software, hardware, virtual hardware, and managed service
offerings, allowing every enterprise to find a fit.
• Security Information Manager is integrated into Symantec’s
Global Intelligence Network, meaning system configuration can
be adjusted based on more than just local event data.
• Symantec is splitting their product into separately licensable
components, so log management can be deployed to feed cloud
SIEM services.
Challenges
• Symantec misses on a number of advanced features, most
notably associated with compliance reporting. However,
Symantec does leverage the UCF in its separate Control
Compliance Suite, providing its users with a way to supplement
their security-focused SIM solutions.
Info-Tech Research Group
37