LevelBlue USM Anywhere Reviews & Product Details

We have had alienvault watching our network for years and everytime we have a problem, much sooner than Sophos, Alienvault detects it! Review collected by and hosted on G2.com.

They are faster to detect intruders and malware than our primary antivirus software. Review collected by and hosted on G2.com.

I like that we solve a lot of issues such as vulnerability assessments, correlated to alerts under one solution Review collected by and hosted on G2.com.

support is not the greatest. They can be good depending on who you get, or they can be not great. The issues we have had have sometimes been resolved in a timely manner, and others that were more pressing have taken way too long. Review collected by and hosted on G2.com.

AlienVault can really be your one stop shop for security data, especially for a small organization. Review collected by and hosted on G2.com.

It's unfortunate that they sold out to AT&T, I fear for the product and team's future Review collected by and hosted on G2.com.

It has many useful features.

Dashboard is easy to use, highly customizable. Review collected by and hosted on G2.com.

Slow support.

Need more ability to filter logs form. Review collected by and hosted on G2.com.

AlienVault is overall an easy product to use that has a significant amount of documentation and a growing community to help learn the product rather quickly. Our company has only been using AlienVault for a couple of years and we have a pretty solid understanding of the product. Review collected by and hosted on G2.com.

The UI can be rather buggy. There isn't a day that goes by that we don't run into an error banner from trying to view an alarm that "doesn't exist in the database" or that the UI page isn't found. My personal favorite is viewing an event through the alarm information page and getting the "this event doesn't exist in the database". These types of errors make it significantly harder to do investigations. Review collected by and hosted on G2.com.

I like the entire package. I cannot think of just one thing Review collected by and hosted on G2.com.

Nothing at all. Very impressed with everything. Review collected by and hosted on G2.com.

Cheap pricing. Great support. Easy to use. Detect everything. Review collected by and hosted on G2.com.

Only for big enterprises. Console gets cluttered. RAM extensive. Review collected by and hosted on G2.com.

The software is user-friendly, and anyone can be trained to use it. New employees don't take a LOT of time trying to get used to it. In my organization's scenario, the on-premise appliance provides great value as we are a small company with site inter-connectivity. Where I am not too sure of is how exactly the product scales with very large networks with separate Windows and network domains. Review collected by and hosted on G2.com.

Could be a little less expensive for other companies to try out. Walking through all the devices after a Nmap or device discovery scan can be tedious to get the data correct Review collected by and hosted on G2.com.

The log analysis component works well and adding additional alerting rules is pretty simple.

They have a large number of modules for ingesting logs from a variety of systems.

Support is pretty good.

Open threat exchange is an excellent idea and well implemented.

The UI is ok

Annual cost is better than most

Using the USM client is a quick and easy way to forward system logs into USM.

They have a easy to read task list of what is in their pipeline for new features. Review collected by and hosted on G2.com.

The lack integration with other tools. They have a ticket system that is ok, it would be better if they had integration with third party tools like Jira.

They have assets that are used to conduct scans and assign modules for understanding logs taken from it. Again there is no integration with any third party asset management system.

They have a vulnerability scanner however its not as through as some of the alternatives and you can not initiate scans via an api.

They claim to have a compliance scanner what they really have is a set of canned reports that you can provide to an auditor. A compliance scanner is something like openscap.

They only allow in the ingesting and processing of Office 365 logs in their cloud solution. There is no reason why this couldn't also be done with their on premise solution as well.

It would seem that development of their USM product has slowed to a crawl. If you monitor their change lists on their website the upcoming changes to their USM product is woefully lacking. It would be better if they used the same code base for both platforms and when one feature was added to one platform it would also be available to the other. Review collected by and hosted on G2.com.

1. It's an appliance.

2. It's easy to setup.

3. It's a ton of information.

4. Integrated ticketing system allows for assignment of vulns and closure.

5. UI is good. Easy to use. Review collected by and hosted on G2.com.

1. Customization capabilities are limiting:

- We want the AlienVault to be the dashboard for state of health. You get some things.

- Reports are good, but that data can't be put on the dashboard in many cases.

2. AlienVault has BI capabilities, but doesn't leverage BI on the dashboard effectively.

3. AlienVault advertises it's central solution for InfoSec. True for SIEM, but not true for many other aspects. Frustratingly, it could be as the solution is very capable through it's modularity of functions. Review collected by and hosted on G2.com.