AlienVault OSSIM Pros and Cons

OSSIM is the only solution that includes the large number of modules that we need: a vulnerability scanner, a network IDS system, a host IDS system.

Inbuilt IDS, inbuilt integration with threat intelligence platform and with vulnerability assessment modules.

The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols.

With AlienVault you get everything in one box.

The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on."

Better than other SIEM solutions because almost everything can be integrated.

The most valuable features of this solution are the data correlation and vulnerability assessment.

The open vault component and the checking of vulnerabilities are the most valuable features. The page management helps with this. If you know how your device is vulnerable at least you can do something about it.

The solution is very stable. Compared to Qradar and Splunk, it's very stable.

Its user-friendliness is the most valuable. It is very easy to use and explore. The dashboard is very well packaged and integrated. You don't have to spend a lot of time in configuring it and checking out the RPM etc. It is also free and very powerful.

We need more dashboards and we need more customization for dashboards.

Lacking in depth of reporting.

There needs to be more support or some kind of training program so users can self-learn the system more effectively.

Sometimes technical issues take very long to get resolved.

I would like the solution to be able to integrate with my firewall, my IDS and my Honeypot solutions so that it can provide real-time reporting as things occur and then have alert sent to me on my phone when suspicious activity is happening.

GUI could be improved.

The price of this solution is very high and it could be cheaper.

The initial setup was a bit complex. You've got to do a lot of reading. It's not an intuitive implementation.

The user interface needs to be friendlier across the board.

They can add more compliance templates.