G2

Hiran T.

SOC Analyst

Information Technology and Services

Mid-Market (51-1000 emp.)

2/28/2024

"A SIEM tool for monitoring real-time security events."

4.5/5

What do you like best about OpenText ArcSight Enterprise Security Manager (ESM)?

ArcSight ESM gives real-time security events from the security devices, network devices, and endpoint machines. The ArcSight connectors support Linux and Windows servers. The microfocus customer support is good and responsive. The User interface of the ArcSight ESM is in classic style. It is easy to assign and annotate the security to the client and senior security analysts. We can integrate the firewall, proxy, Web application firewall, EDR, Servers, IPS, IDS, etc with the Arcsight SIEM Tool. The security analyst can create custom correlation rules and import the most used case for correlation. Review collected by and hosted on G2.com.

What do you dislike about OpenText ArcSight Enterprise Security Manager (ESM)?

The license and pricing model is expensive for small-scale enterprises. Violation of the license usage may result in disabling the searching and reporting feature. The implementation of ArcSight needs skill and support from the vendor to deploy on the IT infrastructure. Review collected by and hosted on G2.com.

What problems is OpenText ArcSight Enterprise Security Manager (ESM) solving and how is that benefiting you?

ArcSight ESM helps in looking over the real-time cyber attacks happening to the company. We can see the security events in real time and can help in incident response. We can create dashboards and reports according to the client's requirements and also share the base logs and security logs with the client. Review collected by and hosted on G2.com.