ArcSight Review

It correlates security events and then allows us to take action to address those events.


Valuable Features

The most valuable feature for us is its ability to correlate security events and then allowing us to take action to address those events.

Improvements to My Organization

We're able to customize it so that it suits our business needs.

Room for Improvement

Although we're able to customize it, it requires some level of subject-matter expertise for all the special adapters for collection.

We also had initial stability issues that were probably caused by our architecture and not the solution itself.

Use of Solution

We've been on the on-site platform for four years.

Deployment Issues

We've had no issues with deployment.

Stability Issues

We had some initial issues withs stability, but we worked through it. I think our architecture and design were initially flawed, so that was more of our problem and not HP's.

Scalability Issues

We've had no issues scaling it in the last three years.

Customer Service and Technical Support

We've used technical support several time and found them to be good.

Previous Solutions

We moved from a managed outsource service, provided by a competitor. He wanted to in-source it, or in-house it, so we had the ability to be a little bit more effective and nimble.

Initial Setup

The initial setup was complex, but HP's professional services helped us out.

Other Advice

Make sure you staff up internally, and have the right subject-matter expertise to take advantage of the platform. Otherwise, it's not going to help.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Guest

Sign Up with Email