We just raised a $30M Series A: Read our story
2017-10-11T08:40:00Z

What advice do you have for others considering AT&T AlienVault USM?

7

If you were talking to someone whose organization is considering AT&T AlienVault USM, what would you say?

How would you rate it and why? Any other tips or advice?

ITCS user
Guest
2121 Answers

author avatar
Top 20MSP

I would advise knowing your requirements and your data. What are you trying to protect or monitor? Before implementing something like this, you really should have basic security in place. You should have systems that are generating logs, for example, antivirus software and firewall. You have to have that all in place first to make this kind of product useful because this type of product is really meant to aggregate things after the fact. After you've put all the systems in place, then this system aggregates and collects everything together. You really need all the endpoint security, firewall security, and server security first, so you have meaningful data to look at. The SIEM is not going to be useful if you don't have any meaningful data for it to collect. I still need to dig into it deeper to see exactly what it does. Our practice is kind of evolving, so this is probably something that we need to offer more to customers. We need to get more product knowledge on it and develop a practice around it. A lot of customers are asking for security operations center (SOC) services for remediation of problems. We don't do that right now, but that's something that I know is probably on the roadmap. With everything going on, that would be a helpful service to our customers, and I think they're asking for that. We've encountered customers asking for that type of service. We don't do it yet. I know there are other partners out there that do that, so really it's on our side to develop the product more. Whether it involves staying with this AT&T product or going for maybe another one, customers are looking for a little bit more. They are not just to have it set up, but also to have someone to act on any kind of alerts or any kind of potential breaches. They're looking for a service for somebody to actually remediate. From what I know of the product, I would rate it an eight out of 10.

2021-07-04T11:19:34Z
author avatar
Top 20Real User

I would not recommend anyone to use it. I rate ATT AlienVault USM a one out of ten.

2021-04-01T09:42:53Z
author avatar
Top 20Real User

I would encourage others to go with this solution because it is easy to deploy, and it provides good tools to know more about your network and the traffic on it. Its reporting needs some improvements, but it fulfills the needs. I would rate AlienVault USM an eight out of ten.

2021-01-26T10:49:18Z
author avatar
Top 20Real User

I would recommend this solution to other users.

2021-01-03T10:42:00Z
author avatar
Top 20Real User

Most of our clients are small to medium-sized businesses; they can't afford to go out and purchase a SIEM on their own. They're looking for us to provide something for them. This was why we provide HCZ cybersecurity and Alien Vault, etc. If you're in an MSP and you're servicing small to medium-sized clients, this is definitely a product that you want to look at and evaluate. When we were doing our evaluations, we were looking at the applications that are supported out-of-the-box, without having to develop any special ATIs — we wanted a pre-built application that supported most of the applications that we use within our client base. On a scale from one to ten, I would give this solution a rating of eight. I'd like to see a little bit more work, out-of-the-box, regarding the dashboards. I'd like to see them provide us with branding capabilities, to be able to put our logos on the dashboard so that the client understands that it's coming from Ice Consulting instead of Alien Vault.

2020-11-18T06:20:55Z
author avatar
Top 20Reseller

We're not using the solution ourselves. We're resellers. USM Anywhere is cloud-based, although they have a different version that is on-premises or on a private cloud called the USM Appliance. We're using the on-premises version, which is quite different from the cloud version. Overall, I'd rate the solution nine out of ten. There are a few areas where they can improve, however, overall, it's been a very good product for us and our customers. We'd recommend the solution. We've looked into other options and we always come back to this product.

2020-10-27T06:28:59Z
author avatar
Top 5Reseller

We use both on-premises and cloud deployment models. We both use the solution and sell the solution as well. Overall, on a scale from one to ten, I would rate the solution at an eight. We're more focused on servicing medium to small businesses. This solution may not be suitable for a large enterprise-level organization. That said, we highly recommend it. I'd recommend that new users decide to first go for the trial. Take the trial and then make sure that you like it before investing in the subscription. The company offers a free trial - you might as well use it.

2020-10-27T06:28:59Z
author avatar
Top 20Real User

My advice for anybody who is considering this product is to evaluate all of the options that are out there. There is no one, great answer, so you have to figure out what best fits your needs. I would rate this solution a seven out of ten.

2020-07-08T09:01:00Z
author avatar
Real User

This is a good product but it can be made more user-friendly. I would rate this solution a seven out of ten.

2019-08-12T05:55:00Z
author avatar
Real User

Be careful with AT&T, make sure you are confident the tool will be what you expect throughout the life of your contract. Make sure AT&T isn't going to change anything on you suddenly.

2018-12-23T18:41:00Z
author avatar
Real User

AlienVault is an amazing product that I would highly recommend.

2018-12-17T17:56:00Z
author avatar
Real User

Have an idea of a plan and know where things in your network are and know who can give you access to certain things you might need. In terms of how extensively we're using it, I'd be surprised if there was anyone outside of our team that is using it more extensively then we are. I would rate AlienVault at ten out of ten.

2018-12-12T10:23:00Z
author avatar
Real User

They should have to improve support. So they can solve customers' problems in less time.

2018-11-13T13:52:00Z
author avatar
Real User

Efficiency Of Security Team: Yes, a team of 2 managing a reasonable sized network has been achieved. Events Per Day: 700,000

2018-10-29T09:48:00Z
author avatar
Real User

Compare it to the other vendors in the field, some of the top vendors. Make sure it fits your needs. It's more for a mid-sized company or a small company, not a large enterprise. Regarding using it for discovering assets in our network which do not belong, our network isn't that big so we really don't use it for that. We also don't use the solution for compliance with regulations. When it comes to staff using the solution, at the moment it is me and a monitoring service. We're the only ones who log into the solution. As for deployment, one person could probably do it because they help you deploy it. I did the deployment myself, with AlienVault. For maintenance, if you have a monitoring service that's fine, but if you're doing it yourself, you probably need somebody monitoring the log. When there's an incident, you probably need one or two other people. I would rate it a nine out of ten. It does what we need and it's reliable.

2018-10-21T07:40:00Z
author avatar
Reseller

Overall, the automation features of this solution are good. The issue here is that there are really two solutions. There's the AlienVault Appliance product and then there's the AlienVault Anywhere product. The Appliance product, which is the older product, has a lot more customization and automation capabilities because it's very extensible. The newer product, the Anywhere product, is still very limited. We're very dependent on AlienVault to build in any kind of connections or integration. If you are a mostly-cloud environment this is a good fit. If you have very few other security controls outside of a firewall this is a good step forward. But if you have a solid security program you may find this product lacking in a few areas. And most importantly, be very careful about subscription size and licensing.

2018-09-16T12:32:00Z
author avatar
Real User

AlienVault is a great fit, especially for smaller organizations, as it will enable you to produce quick results with no need to worry about too many details.

2018-08-16T08:29:00Z
author avatar
Real User

In terms of the product itself, it depends on what features you're looking for. We just use it for PCI compliance and it works for us. You need to do your own evaluation. I would give the product an eight out of 10. The reason it's an eight is that it seems to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs.

2018-08-14T07:42:00Z
author avatar
Real User

It is a great product. Just get it.

2018-08-12T06:33:00Z
author avatar
Real User

Check other products, do POC as change from one to other get be very pricey and time consuming. Also training of people and changes cost lots of resources and not all employees like such changes every year.

2018-06-06T07:15:00Z
author avatar
User

It is quite awesome.

2017-10-11T08:40:00Z
Learn what your peers think about AT&T AlienVault USM. Get advice and tips from experienced pros sharing their opinions. Updated: November 2021.
552,695 professionals have used our research since 2012.