LevelBlue USM Anywhere Reviews & Product Details

LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM

Seller

LevelBlue

Discussions

LevelBlue USM Anywhere Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Tami Andrews (Sr. Customer Advocacy Programs Manager at AT&T Cybersecurity)

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

21 months

View More Pricing Information

Top-Rated Alternatives

Splunk Enterprise Security

4.3/5(248)

View All Alternatives

User Insights

Average based on 114 real user reviews.

Implementation Time

2 months

Perceived Cost

$$$$$

G2 reviews are authentic and verified.

Here's how.

Shaun S.

Manager IT Service Operations Vancouver

Computer Software

Mid-Market (51-1000 emp.)

5/19/2017

"More than just a SIEM"

4.5/5

What do you like best about LevelBlue USM Anywhere?

I like all the features in AlienVault. Vulnerability Scanning, SIEM, IDS, File Integrity Monitoring are all critical functions we use daily Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

It does take some configuration of plugins, but AV will create ones given log files. Additionally, the vulnerability scans can take some tweaking but they are always updated with new vulnerabilities. Review collected by and hosted on G2.com.

James E.

IT Specialist

Farming

Mid-Market (51-1000 emp.)

6/1/2017

"Simple and understandable security interface"

5/5

What do you like best about LevelBlue USM Anywhere?

I do not have to 'dig' within multiple levels of information to see what is going on. I can view the current alarm notifications in 1 large readable format. If an event catches my attention I can then delve into the details from here. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

The inability for assets that have been identified to be tracked by MAC address. After spending the time to identify all our assets in the network I have found that devices with DHCP address can be incorrectly identified. Example hostname frplabws02-pc is currently recognized as:

frplabws02-pc (192.168.***.***)

jack-win7.***.local,mikes-pc.***.local,frplabws02-pc.***.local

But DHCP lease has identified the system as : lorettas-iphone.***.local Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

To monitor computer systems for vulnerabilities not previously identified. The system discovered an ongoing port scan against our servers that was not identified before. Our main server was getting hit with a port scan to RDP 3389 (default port). Once this was discovered I changed the default port, created firewall rule on the desktop and our cisco firewall to allow legitimate access. Once configured the random port scan stopped and our network seemed to be more responsive. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

thank you so much James for your comments & valuable feedback!

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

9/27/2017

"Alienvault USM"

5/5

What do you like best about LevelBlue USM Anywhere?

I love the ability to see anything and everything that is going on in my network. The dashboard and alarms page are the beginning and end of my days and it makes my daily life easier! Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

Without training, the product is quite usable, but even with some training, there is usually a need for additional training in order to fully utilize all of the capabilities. I wish it were easier to mark events as false-positives instead of having to create custom policies that can take a bit to configure properly. Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

Alienvault is the only SIEM that I've used, but I've worked with former federal agents and they swear by Alien Vault so you know it's good. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

We are concerned with HIPAA regulations and the built-in reporting is great. Review collected by and hosted on G2.com.

Wassim S.

Mid-Market (51-1000 emp.)

4/3/2018

"Very Informative."

5/5

What do you like best about LevelBlue USM Anywhere?

All of the integration parts of the Open Source products that work together seamlessly. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

Sometimes the system gets overloaded and response time becomes an issue. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

Wassim - I appreciate you taking time to provide your feedback!

Verified User in Financial Services

Mid-Market (51-1000 emp.)

10/20/2017

"Great data aggregation and monitoring"

4.5/5

What do you like best about LevelBlue USM Anywhere?

The more data you feed into AV, the better reporting and analytics you get out of it. Since AV can cross correlate different sources of data, it notifies our team much more quickly of any potential issues. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

The amount of granularity can become overwhelming. However, it becomes much easier after a bit of time with the rules. Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

If you need data aggregation for your security events, this is the tool to use. On top of the standard SIEM features, AV's OTX community is great resource for security events that happen around the world. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

Security monitoring and awareness. We now have a single pane of glass to all things related to security on the network. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

Thank you for taking time to provide your feedback!

Corey S.

CTO

Information Technology and Services

Small-Business (50 or fewer emp.)

9/27/2017

"Secure Compliance Solutions uses AlienVault to provide Managed Security Services"

5/5

What do you like best about LevelBlue USM Anywhere?

The Visibility it provides into the traffic traversing the network. From the moment it is set up and configured, it is providing value. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

It can get be expensive to install. Also, the product requires a handsome supply of system resources. Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

Consider going with USM Anywhere if you plan on managing it internally. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

Information security management and general piece of mind. The news is inundated with stories of system breaches. With AlienVault installed and configured, there is always a team of security researchers on your payroll. Review collected by and hosted on G2.com.

Javier R.

Network Security Specialist

Mid-Market (51-1000 emp.)

5/12/2017

"Is the SIEM you want"

4/5

What do you like best about LevelBlue USM Anywhere?

Best of USM is that you have all tools in one place, vulnerability scanner, netflow, hids...the other thing is the easy way to implement this product you have a wizard in the beggining that help step by step using the best practice like scan your network to find assets and adding to the usm inventory, next initiate the logger from security devices or other programs like, switches, firewalls, AV, you can add a span port to help improve your security this help to see malwares, danger applications, or if you have compromised the netflow help to see if there is a stranger behavior in the network. The USM have a ticket system that help to follow the alarms Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

some times the system have database problem, like generating reports that have too much time like two months ago you cant get the information sometimes, the other thing is when you do a vulnerability scanner you cant do anything because all the performance are using for the task, the other think is the dificult to follow a behaviour that you want to investigate so you have to add the alarm id and find it manually Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

the best you can do is buy a AV Appliance have all that you need that include like 24 gb ram 1 tb of hdd 16 n so that is one option to buy. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

monitoring and saving time finding threats in the network. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

Javier - thank you for your comments!

Eric S.

CSO & CPO

Computer Software

Mid-Market (51-1000 emp.)

5/12/2017

"It's a Swiss Army Knife of Functionality"

5/5

What do you like best about LevelBlue USM Anywhere?

One pane of glass covers a lot of functionality. Alienvault provides an awful lot of coverage at a very reasonable price. And, over time the user interface has improved and the linkages between functionality has become better. We are looking forward to being a long term customer. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

Updating could be better. Occassionally there is regression in small pieces of functionality during an update. Most updates are just fine; however, some of the updates have caused problems - especially with vulnerability scanning (slower scanning). This is usually resolved fairly quickly, but it would have been helpful for this to be better QA'd first. Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

If you need a lot of functionality in one solution - this is a great tool. It may not be 100% of the best point solution, but it will be 80-90% of the functionality and nearly 100% of what you would actually use anyway. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

SIEM, VulnManagement, HIDS, Asset Discovery - Basically, excellent coverage on required toolsets to manage an InfoSec Program. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

Eric - I appreciate your time & comments!

Verified User in Internet

Small-Business (50 or fewer emp.)

3/27/2018

"AV has changed our MSP business"

4/5

What do you like best about LevelBlue USM Anywhere?

Easy to use interface and configuration is fairly simple with a little bit of training. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

Would like to see a better MSP dashboard for our MSP customer. Review collected by and hosted on G2.com.

David C.

Systems Engineer

Financial Services

Mid-Market (51-1000 emp.)

6/5/2017

"Making my job easier or harder depending on how you look at it."

5/5

What do you like best about LevelBlue USM Anywhere?

I like that it one dashboard I get a great overview of what my network is doing. Review collected by and hosted on G2.com.

What do you dislike about LevelBlue USM Anywhere?

I dislike the agent deployment process and which it were more flexible. Review collected by and hosted on G2.com.

Recommendations to others considering LevelBlue USM Anywhere:

Really do like the software as any company should they continue to improve their product. As I use the product more I begin to realize the cost savings we are actually accumulating such as with the new WannaCry. I hear company after company getting hit by this malware as we had already closed up the vulnerability of SMBv1 in our network due to it showing on my vuln list weeks prior. This alone has saved my company quite a bit of funds. Review collected by and hosted on G2.com.

What problems is LevelBlue USM Anywhere solving and how is that benefiting you?

We are utilizing this software to prevent and secure our network from malicious attacks and also providing a means to measure our compliance actively. Review collected by and hosted on G2.com.

Response from Tami Andrews of LevelBlue USM Anywhere

edit

David - thank you for your time & feedback!