RSA enVision Review

You can drill down to specific metadata values for event sources.


What is most valuable?

In the investigation panel, you can drill down to any specific metadata values for any event source.

How has it helped my organization?

The custom dashboard and correlation alerts in this solution improved our incident response process.

What needs improvement?

Sometimes the investigation panel and reporting engine work very slowly.

For how long have I used the solution?

I have been using this solution for three years.

What do I think about the stability of the solution?

Sometimes the investigation panel and reporting engine work very slowly. Other than that, I have not faced any issues.

What do I think about the scalability of the solution?

We have not faced any scalability issues.

How is customer service and technical support?

I would give technical support a rating of 6/10.

Which solutions did we use previously?

We used Envision. It was outdated, so we switched to this solution.

How was the initial setup?

The setup was straightforward. The only complexity is with high availability.

What's my experience with pricing, setup cost, and licensing?

If you get a good discount on the product, or if you feel you need a less expensive solution compared to QRadar or ArcSight, you can definitely go for this solution.

Which other solutions did I evaluate?

We looked at ArcSight. I felt that this solution was better.

What other advice do I have?

It's very simple to implement. The only problem is with the high availability mode for VLC. If you want this, work with one of VMware's engineers to implement HA in VCL.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Guest
Sign Up with Email