We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"The correlation engine is good."
"The features I have found most valuable are it capabilities for behavioral analytics and anomaly detection."
"The most valuable feature is the log monitoring."
"We found the correlation engine to be very good. It takes logs from different types of devices and does the correlation in a good way."
"ArcSight is not a user-friendly solution and the interface needs to be improved."
"ArcSight's features that can be improved include anything related to its visualization capabilities and user friendliness."
"It needs more user analytics and aggregation user queries. And it's slow. When you query over ArcSight, it is very slow."
"The frequency of the updates that we are getting can be improved because the number and types of incidents that are happening at the global level are far more than what we are receiving. The frequency of updates feeds related to our rules should be increased. There should be more frequent information about the new rules that are coming and the global threats that are happening. There should be better options for dashboard creation. At present, the dashboards are good, but there is scope to make them better."
"Its price is average and not very high. Splunk might be a bit cheaper than this. Its licensing is on a monthly basis."
ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.
Interset provides an insider and targeted outsider threat detection solution to protect sensitive data, such as intellectual property, trade secrets, and classified files. Interset proactively detects enterprise threats and enables immediate forensic investigation allowing IT teams to stop attacks before data is compromised. It uses agentless data collectors, lightweight endpoint sensors, advanced behavioral analytics, and an intuitive user interface for providing visibility over sensitive data, enabling early attack detection and actionable forensic intelligence without false positives or white noise.
ArcSight Analytics is ranked 16th in User Behavior Analytics - UEBA with 3 reviews while ArcSight Interset / Intelligence is ranked 14th in User Behavior Analytics - UEBA with 1 review. ArcSight Analytics is rated 6.6, while ArcSight Interset / Intelligence is rated 8.0. The top reviewer of ArcSight Analytics writes "Has good behavioral analytics and anomaly detection features ". On the other hand, the top reviewer of ArcSight Interset / Intelligence writes "Good correlation engine, average price, stable, and easy to deploy". ArcSight Analytics is most compared with Securonix UEBA and Varonis Datalert, whereas ArcSight Interset / Intelligence is most compared with Microsoft Sentinel, Securonix UEBA, Exabeam Fusion SIEM, ArcSight Enterprise Security Manager (ESM) and Splunk User Behavior Analytics.
See our list of best User Behavior Analytics - UEBA vendors.
We monitor all User Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.