AlienVault OSSIM Pros and Cons

The threat alerts it gives me from time to time on harmful code within the network, or if they are generating any network traffic, are very useful.

OSSIM is the only solution that includes the large number of modules that we need: a vulnerability scanner, a network IDS system, a host IDS system.

With AlienVault you get everything in one box.

The most valuable features of this solution are the data correlation and vulnerability assessment.

The open vault component and the checking of vulnerabilities are the most valuable features. The page management helps with this. If you know how your device is vulnerable at least you can do something about it.

The solution is very stable. Compared to Qradar and Splunk, it's very stable.

The solution has a very good open source community, and whenever we have problems, we are always able to resolve it online.

You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio.

The initial setup was straightforward. I didn't have any problems.

It takes some time. It does not give me a prompt response for any such [malicious] traffic. It takes time to get that alert from the AlienVault system.

We need more dashboards and we need more customization for dashboards.

Sometimes technical issues take very long to get resolved.

The price of this solution is very high and it could be cheaper.

The initial setup was a bit complex. You've got to do a lot of reading. It's not an intuitive implementation.

The user interface needs to be friendlier across the board.

The solution needs more integration with cyber intelligence systems.

The user interface could be improved.

It's under heavy traffic. If you have heavy traffic, the system is slow.