All solutions pertaining to log management is ok. However, McAfee SIEM is cost effective in the areas of dash boarding because it is readily available as compared with others since you will be required to pay for it.

We have used Norton before. McAfee has more secure features that suit our organization’s requirements.

Before using McAfee ESM, I employed IBM Security QRadar. Although it was not the most user-friendly platform, I was able to create a significantly higher number of correlation rules compared to what I can do in McAfee ESM.

Though I haven't used other technologies besides Trellix ESM, I know about solutions like Splunk.

I have worked on Splunk.

Previously, I did not use another solution. McAfee ESM is the only solution I know.

We switched to them because of the pricing.

We did not previously offer a different solution to our customers. We are currently onboarding Splunk to work concurrently with this solution, but it depends on the customer. Splunk is a little bit expensive.

We also work with Splunk and we have experience with similar solutions such as IBM QRadar.

We used another solution prior to this one.

I have used other products before. Having been an endpoint engineer before, there was this feeling of familiarity when I started out using Enterprise Security Manager. The flow for me was the same as with ePO.

• QRadar
• RSA enVision

I used ArcSight at a different job, but when we bought SIEM at my current job, it was NitroView. Later, McAfee acquired them.

I also work with with RSA and McAfee SIEM solutions.

My company did use another product previous to this one but I do not know why they switched.

We used HP ArcSight, IBM Q1 Labs, Splunk, and we chose McAfee Enterprise Security Manager because it’s very easy to deploy.

I used different solutions, but for different clients.