2017-07-23 19:53:00 UTC

Between Alien Vault and LogRhythm, which solution is suitable for Banks in Gulf Region


I would like to know the evaluation parameters and reviews for SIEM-Alien Vault and LogRhythm to implement in a banking environment in Gulf region.

Guest
1414 Answers

author avatar
Top 5LeaderboardConsultant

IBM QRadar is the best option because they are using UBA for the quick detection of insider threats, targeted attack and financial fraud instead of tracking devices or security event by using machine learning algorithm.

2017-07-25 06:15:56 UTC
author avatar
Vendor

The http://siemcomparison.com appears to be heavily weighted in LogRhythm's favor; however, I didn't spend much time adjusting the variable options, so perhaps I am jumping to conclusions. Best advice I can give is to consider the normal factors when selecting any software/services vendor. 1. Do they have a significant presence in your industry/market? 2. Can they provide reference accounts you can speak to directly (and privately)? 3. Do the features provided match your requirements/systems being monitored? 4. Will the company be around 3-5 years from now? 5. How big and qualified is your team to run one of these systems? (do you need a co-managed option for 24/7 SOC?) 6. Can you afford the software, staff and upkeep? 7. How will it impact your infrastructure (Storage, Compute, etc.)? There are a lot of good options out there...all with their own good, bad and ugly.

2017-08-22 19:38:46 UTC
author avatar
Vendor

Check out InfoTech's SIEM Comparison Tool. While I've seen LogRhythm win multiple RFPs and I have personally had excellent success with it, the tool may help you in your search based upon the scenario and criteria you enter. Their tool compare 10 vendors, consisting of: AlienVault, EventTracker, HP, IBM, LogRhythm, Intel Security, NetIQ, RSA, SolarWinds, and Splunk.

http://siemcomparison.com/

2017-08-22 19:02:21 UTC
author avatar
Top 5LeaderboardReal User

if ur forced Between Alien Vault and LogRhythm,alien vault is the better

2017-07-25 07:42:57 UTC
author avatar
Top 5LeaderboardReal User

Alien Vault-2 be sure

2017-07-25 02:47:25 UTC
author avatar
Vendor

I would need more info on this - specifically what regulations are required and what are good additions?

2017-07-25 00:04:07 UTC
author avatar
Vendor

I thing you have to go solution Splunk or Qradar Siem is best option

2017-07-24 18:59:02 UTC
author avatar
Vendor

In my opinion, LogRythm can provide more for banks and is easier to deploy/manage.
Some of the most important eval params would be in the case of small to medium banks thus:
- product must be easy to deploy with minimum overhead (personnel)
- Manageability of the product after implementation
- Compatibility with e.g. AS400 which is what most banks use to run (save) the core banking data

The rest is up to each company and their respective requirements.

2017-07-24 18:13:03 UTC
author avatar
Vendor

If you are just limiting your options to those 2, you are leaving out key players such as Splunk and Eventtracker (who also provides 24/7 co- management and software for less than most players charge for software alone)

2017-07-24 12:18:16 UTC
author avatar
Consultant

Why only consider AlienVault and LogRhythm? In any case, this is a very open question and I do not see how one could expect anything other than a broad answer... :-(

2017-07-24 12:17:39 UTC
author avatar
Consultant

Define 'suitable'... What do you want to do?

Also consider Splunk and HPE ArcSight, and maybe more solutions.

2017-07-24 12:08:50 UTC
author avatar
Vendor

if it is only in between Alien Vault and LogRhythm, Then go with LogRhythm. There are number of parameters we have to consider before finalizing the solution. Centralized or standalone, Multitenancy, log formats, Number of EPS, use cases, Law and Regulatory reuirements, Shipping logs to SIEM tool.
As per my opinion go ahead with LogRhytham .

If you are considering other vedors aswell, Then IBM Q Radar and Splunk is fine. But in middle east Splunk is not that much popular. I experienced banks in Muscat with HP ARC SIGHT and IBM Q Radar.

Let me know if there any help is required.

2017-07-24 12:05:18 UTC
author avatar
Consultant

personally, I never worked on Alien-Vault or LogRhythm, but if you have the third vendor name in mind, can consider Splunk as well.

2017-07-24 11:56:00 UTC
author avatar
Consultant

AlienVault should be the way to go here I think!

You can integrate ANY custom log source to the siem and comes with over 3000+ pre-built correlation rules

Having a good partner to assist with integration and implementation is also key.

... and well, I work with a partner firm who sells and deploy both siem solutions, hence, my candid input on subject matter

Regards
Ibukun

2017-07-24 11:53:32 UTC
Find out what your peers are saying about LogRhythm, Splunk, IBM and others in Security Information and Event Management (SIEM). Updated: March 2020.
407,845 professionals have used our research since 2012.