ArcSight Enterprise Security Manager (ESM) Scalability

Ramnesh  Dubey - PeerSpot reviewer
Solutions Architect at a tech vendor with 10,001+ employees

I would rate the scalability a seven out of ten because there are some limitations. 

It is a good tool for enterprise-level businesses. 

View full review »
Irfan Ali - PeerSpot reviewer
Lead Principal Architect at Injazat Data Systems

I would rate the scalability an eight out of ten. 

View full review »
BenNnatuanya - PeerSpot reviewer
Manager, Security Operations Centre at Deloitte

We have integrated a couple of technologies into ArcSight, both on-premise and on-cloud. We were able to integrate the DNS and the firewalls. We were not able to integrate the EDR.

View full review »
Buyer's Guide
ArcSight Enterprise Security Manager (ESM)
March 2024
Learn what your peers think about ArcSight Enterprise Security Manager (ESM). Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,234 professionals have used our research since 2012.
DB
Security Operations Director at Axon Technologies

If you have employees with knowledge, the solution scales vertically and horizontally. You can just sit there and say, "I'm ingesting this many more log sources, I need this much more processing, and this much more storage," and you can just drop and place. It's easy to scale because we're using clusters and blade servers, so we just slap in a new blade, add it for the cluster, and now it's scaled.

We have SAN storage, all high-speed disks for the 90-day storage, and then mechanical disks for the 188-day storage, and then you go to cold storage after that, which is disk as well, and it's a SAN, so we just swap in new JBODS every time we need more storage.

There are about 40 people using this solution from an analyst point of view within my company. We have threat hunters, endpoint protection research, vulnerability research, and security analysts on levels one through three. Pretty much anyone that operates in a security operation center is using it. We run three shifts, 24 by seven. Each shift is an eight-man team of analysts, and then we have endpoint protection subject matter experts, forensic subject matter experts, and threat hunting subject matter experts all using it Monday through Friday. At any point during the day, there's about 40 active users on the solution. All in all, I think we have 150 named accounts inside of it, but usage, there's about 40 at any one time on it.

I rate the scalability as an eight out of ten.

View full review »
it_user858882 - PeerSpot reviewer
Business Development Manager- Threat Management Services at Insight Enterprises, Inc.

No scalability issues.

View full review »
Anand-Dutta - PeerSpot reviewer
Head Global Alliances Director at Tech Mahindra Limited

ArcSight Enterprise Security Manager (ESM) is a scalable solution.

View full review »
PM
Sr. Group Manager at a tech vendor with 10,001+ employees

Scaling up ArcSight isn't a challenge.

View full review »
ON
Chief Information Officer at Bassein Catholic Co-Op Bank

It is pretty scalable.

View full review »
Riccardo Rosso - PeerSpot reviewer
Consultant at Libero

We have not had any problems with ArcSight ESM's scalability.

View full review »
PM
Sr. Group Manager at WNS Global Services

ArcSight is scalable. I started out with three data centers, and now I have it deployed at more than 48 locations.

View full review »
it_user140673 - PeerSpot reviewer
Senior Manager of System Security with 501-1,000 employees
Not so much on the ESM level, but it gets expensive to scale at the logger level. View full review »
Seshi Dumpa - PeerSpot reviewer
IT Security Manager at a tech services company with 10,001+ employees

On-premises is a challenge to scale, and we haven't tried the cloud but we've heard it's quite scalable and robust.

View full review »
Abbasi Poonawala - PeerSpot reviewer
Chief Enterprise Architect at a financial services firm with 10,001+ employees

Scalability is okay although if we had better typology, we could scale more and performance could be better. It's similar to QRadar. We are onboarded for security core processing or data disk core processing. If I wanted to add another 20 line of businesses under that, it should be okay. There's a trade off between the security and performance so the more secure your typology is, will result in degraded performance. We currently have around 2,000 users but hope to increase that number. 

View full review »
Md. Shahriar Hussain - PeerSpot reviewer
Cybersecurity and Compliance Lead Engineer at Banglalink

It's costly to scale up ArcSight ESM, but it's scalable. You have to pay for extra storage, licenses, and log processing.

View full review »
Ashraf Abbas - PeerSpot reviewer
Information and Cyber Security Analyst at a financial services firm with 10,001+ employees

It has been good when it comes to scalability. As an MSSP, we provide services to other customers, and we have customers with different capacity requirements. It is good in terms of moving from one particular size to another.

View full review »
RS
Consultant at a financial services firm with 10,001+ employees

The scalability is pretty good. I would rate it eight out of ten. 

It's an enterprise solution. We have deployed the solution deployed to 30 or 40 clients. 

We do not have plans to increase usage.

View full review »
Rikin Rathod - PeerSpot reviewer
Senior Officer IT at Tech Data Limited

This solution would be more scalable if the interface were more user-friendly. There are rules and alerts, and the user has to have the proper knowledge of all of these things. With a walk-through, I think that it would be quite easy to scale.

We have two people using this solution, and we perform monitoring on a daily basis. In our environment, adding users is quite rare. 

View full review »
Wessam Altoumi - PeerSpot reviewer
Chief Commercial Officer at Yamamah Information Technology & Communication Systems LLC

The scalability of ArcSight ESM is very good.

On the client's bank site, there are approximately 1,500 users using the solution.

View full review »
MY
Soc Cybersecurity Analyst at VaporVM

The solution is scalable. My company has 20 users. 

View full review »
it_user410400 - PeerSpot reviewer
Senior Cyber Security Analyst at a tech services company with 10,001+ employees

We've had no issues scaling it for our needs.

View full review »
it_user409212 - PeerSpot reviewer
Cyber Security HP Arcsight Dev Ops Lead Developer with 10,001+ employees

We did have issues at the start, but this comes down to having good HP ArcSight architects to start with, which we didn't when the project started.

View full review »
RS
Mdr of Presales & Customer Success Head at a financial services firm with 1-10 employees

The tool is scalable. 

View full review »
Subhadip Pakrashi - PeerSpot reviewer
CEO at Kapstone Technological Services LLP

ArcSight Enterprise Security Manager (ESM) is scalable, but you must size it well.

View full review »
NB
Senior IT security Administrator and solution at scada.ci

 ArcSight Enterprise Security Manager has good scalability.

We have three administrators and seven analysts using this solution in my organization.

View full review »
it_user257376 - PeerSpot reviewer
Lead Splunk Architect at a financial services firm with 10,001+ employees

No scalability issues have been encountered so far. ArcSight's architecture is very scalable, especially when set up in a layered architecture.

View full review »
HungTran2 - PeerSpot reviewer
Technical at HPT Vietnam

The scalability of ArcSight ESM is good.

We have approximately 10 people using this solution. There are 1,000 devices using the solution. We are using the solution to its full capacity. 

View full review »
it_user700140 - PeerSpot reviewer
Ex Senior Security Analyst and Onsite consultant at Paladion Networks

This product is designed for easy scalability and can easily scale up without major challenges. However, we have a specific team which looks after the setup and maintenance of the tool.

View full review »
it_user417483 - PeerSpot reviewer
Senior IT Security Consultant, Cybersecurity Technology Services at a consultancy with 1,001-5,000 employees

We have had no issues scaling it for our needs.

View full review »
SS
Principal Enterprise Architect (Technology, Cloud & Security) at a retailer with 10,001+ employees

It is not always scalable.

View full review »
it_user406062 - PeerSpot reviewer
Sr. Director, Corporate Information Security at a comms service provider with 1,001-5,000 employees

We've had no issues scaling it in the last three years.

View full review »
it_user400656 - PeerSpot reviewer
Security Practice Director at Rolta AdvizeX

It's highly scalable. It works in small scenarios as well as the biggest that I can imagine.

View full review »
it_user147210 - PeerSpot reviewer
Sr Security Engineer at a tech services company with 51-200 employees
Again, none. It is a system that is more than capable of multi-tenant implementations. View full review »
TB
IT Manager at Royal Cemerlang

Our initial sizing is enough for our needs. 

View full review »
it_user571005 - PeerSpot reviewer
System Support Engineer at a tech services company with 501-1,000 employees

HPE ArcSight scales very well at the connector level, Logger level and the ESM level.

View full review »
VN
Senior Manager at PT Permata Anugerah Abadi

Our organization has 10 ArcSight Enterprise Security Manager (ESM) users. It is a scalable platform. We are preparing for the budget to increase the usage.

View full review »
JA
Forensic Consultant at A Cyber 1 Company

The solution is scalable and has approximately 500 users utilizing it for enterprise businesses.

View full review »
LH
Works at NOOSC Global

There are more than six thousand users. However, because it is a log-based system, the scalability is limited. As such, our customer is looking for a solution that can scale better as the number of users and the number of devices in the infrastructure increases.

View full review »
it_user142611 - PeerSpot reviewer
Information Security Professional at a financial services firm with 1,001-5,000 employees
I don't think there are any issues with Scalability. View full review »
it_user597606 - PeerSpot reviewer
Associate Manager at a tech services company with 10,001+ employees

We didn't encounter any scalability issues. We were able to scale it as and when required.

View full review »
it_user409203 - PeerSpot reviewer
Security Business Analyst at a tech services company with 10,001+ employees

We have had no issues scaling it to our needs.

View full review »
VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

No. ArcSight is very scalable.

View full review »
BS
Head - Professional Services at a computer software company with 51-200 employees

The solution is easily scalable. If an organization needs to expand it, they most certainly can.

What we used to do traditionally, to scale, that each device throws up certain EPS and we size the solution accordingly. Once they have a cloud solution, it will be even easier to scale.

The solution works for any size of organization, from small companies to large enterprises.

View full review »
HM
Senior Security Consultant, CISSP, HPE ArcSight Specialist at a retailer with 5,001-10,000 employees
it_user418164 - PeerSpot reviewer
Senior Security Consultant & Solution Architect at a financial services firm with 10,001+ employees

We've been able to scale it for our needs. We've had no issues with scalability.

View full review »
it_user399357 - PeerSpot reviewer
Security Response Engineer at a media company with 10,001+ employees

We have well over 100,000 employees and we've virtualized a lot. Again, the problem is with getting support as we scale.

View full review »
SW
Senior Manager at a tech services company with 51-200 employees

The scalability of ArcSight ESM is average to poor.

We have approximately 60,000 users using the solution.

View full review »
JM
Security Sales Engineer

On our end it's pretty good. We haven't had any problems adding more sources.

View full review »
it_user587595 - PeerSpot reviewer
Dynamics Nav Expert at a tech services company with 51-200 employees

There were no scalability issues.

View full review »
it_user180471 - PeerSpot reviewer
Security Expert at a tech services company with 501-1,000 employees

Scalability was one of our main concerns while choosing a solution and, so far, it has satisfied our needs in this area without any issues.

View full review »
it_user401781 - PeerSpot reviewer
IT Security Assistant Manager at a insurance company with 5,001-10,000 employees

We've had no issues with scalability.

View full review »
VN
Senior Manager at PT Permata Anugerah Abadi

It's a scalable product and the scalability is good.

Our clients are usually enterprise companies.

View full review »
it_user402840 - PeerSpot reviewer
Senior Manager Fraud Services at a financial services firm with 1,001-5,000 employees

HP has delivered for our company and its size.

View full review »
FS
Senior Manager - Cyber Security at a comms service provider with 1,001-5,000 employees

We haven't had a need to scale yet, and maybe not for another two or three years.

View full review »
SS
Security Engineer at a tech services company with 1,001-5,000 employees

It is scalable.

View full review »
AB
Associate Vice President at a consumer goods company with 201-500 employees

We haven't tried to scale the solution at this point.

We have about 2,100 people on within the company, and five of those are focused on this solution specifically. We don't have plans to increase the usage of ArcSight at this time.

View full review »
TG
Chief Executive Officer at a tech services company with 11-50 employees

The tool is scalable and my company has 20,000 users. 

View full review »
it_user661260 - PeerSpot reviewer
Security Consultant at a tech services company with 5,001-10,000 employees

We encountered no issues with scalability. If needed, ESM can be setup in tiered form. Loggers can be scaled horizontally very efficiently. One box can handle a lot of events.

View full review »
it_user597603 - PeerSpot reviewer
Manager at a financial services firm with 1,001-5,000 employees

Scalability was not an issue. The environment was relatively stable and we filtered out non-security events using custom scripts.

View full review »
it_user124926 - PeerSpot reviewer
Security Expert at a tech services company

This product is not easily scalable. We particularly required skilled personnel to do this activity and it also took a significant amount of time.

View full review »
it_user286302 - PeerSpot reviewer
Network Security Administrator at a government with 1,001-5,000 employees

The ArcSight Logger is extremely limited when it comes to scalability. For a large deployment that could be handled by a single ESM, a dozen Loggers might be required. The cost of such an undertaking is prohibitive, and there are much more scalable solutions available (ES for instance).

View full review »
it_user417585 - PeerSpot reviewer
Information Security Architect at a tech services company with 51-200 employees

The scalability options are pretty good although costly.

View full review »
it_user126642 - PeerSpot reviewer
IT Security Consultant at a tech services company with 51-200 employees
The solution itself is very scalable, but it is also a lot more expensive than other players. View full review »
LL
Network Security Engineer, Security Monitoring Center at a tech services company

ArcSight can be extended to meet the biggest customers (large enterprise) needs.

View full review »
GS
Product Specialist Security Solutions at a tech services company with 201-500 employees

There were no scalability issues. A single Express/ESM Appliance is usually enough to support most of the enterprise’s needs. Only package upgrades need to be purchased. No hardware changes are necessary.

As for the loggers for long retention, you can add multiple loggers and cluster them as one virtual appliance. This provides for an easy scalability feature.

For the connectors part, you can implement as many connectors as you need so you can cover all your zones/branches. At a later time, a load-balanced connector for syslog can be introduced to make sure that logs for sensitive UDP packets are lost.

View full review »
it_user406278 - PeerSpot reviewer
EVP & Global Head - Services at a tech company with 1,001-5,000 employees

It's very scalable.

View full review »
VN
Senior Manager at PT Permata Anugerah Abadi

This solution is stable and scalable. 

View full review »
GK
Chief Technological Officer at a tech consulting company with 51-200 employees

Arc Sight Enterprise Security Manager is scalable.

The number of people running it should be based on the organization's size. If you have a  company with 500 assets, you should have at least one field engineer for the ESM product and two security analysts to operate this software. This is minimum. One engineer and two security analysts is minimum to start if the organization is midsize.

View full review »
it_user427377 - PeerSpot reviewer
Senior ICT Security Officer at a financial services firm with 1,001-5,000 employees

It's scaled fine for our needs.

View full review »
OO
Cyber threat Intelligence Manager at CyberLab Africa

We have not had any issue with the scalability.

We have approximately 20 users using this solution in my organization.

View full review »
it_user468321 - PeerSpot reviewer
Chief Technology Officer (CTO) at a tech company with 501-1,000 employees

I've not had any problems with scaling into tens of thousands of nodes. I guess the biggest problem you're going to have with that would be actually the compute power to make the tangible decisions that's needed on large-scale environments where you have hundreds of firewalls coming in from different points of ingress. That would be a concern, but again that's not because of the ArcSight, it's just basically that's compute power.

View full review »
MS
Managing partner at a tech services company with 11-50 employees

The solution can scale if you need it too. It's just an expensive process.

Regarding the scalability, it was a problem that their license model was EPS. If you're familiar with EPS licensing model, events per second, it is not a very good idea as a model as you cannot foresee what's in 2021 or what will be in 2022. From our point, it causes a lack of proper budgeting due to the fact that it's very difficult to budget how many events per second you will generate in all your systems. 

View full review »
it_user415854 - PeerSpot reviewer
Senior Information Security Engineer at a tech services company with 501-1,000 employees

We've had no issues with scalability.

View full review »
it_user428250 - PeerSpot reviewer
System Engineer at a tech services company with 51-200 employees

We have had no issues scaling it for our needs.

View full review »
it_user256617 - PeerSpot reviewer
Sales Engineer at a tech services company with 1,001-5,000 employees

I did not have any issues with scalability.

View full review »
it_user126918 - PeerSpot reviewer
Information Security Consultant with 1,001-5,000 employees
it_user126648 - PeerSpot reviewer
Senior Security Analyst at a tech services company with 10,001+ employees
MJ
Techniqal Lead Enterprise Solution at a tech services company with 51-200 employees

I am satisfied with the solution's scalability. 

View full review »
it_user730782 - PeerSpot reviewer
Delivery Consultant - Security Solutions with 1,001-5,000 employees

Yes. Storage is an issue. Before deploying the product in the organization, proper scaling has to be done or else you end up losing the oldest data, hence failing to meet the audit.

View full review »
it_user285777 - PeerSpot reviewer
Solutions Architect- SIEM and Solutions with 1,001-5,000 employees

I have not had any issues with scalability.

View full review »
Buyer's Guide
ArcSight Enterprise Security Manager (ESM)
March 2024
Learn what your peers think about ArcSight Enterprise Security Manager (ESM). Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,234 professionals have used our research since 2012.