Security Basics mailing list archives
Re: SIEM device?
From: "Albert R. Campa" <abcampa () gmail com>
Date: Thu, 20 Dec 2007 10:25:18 -0600
I looked at TriGeo, NitroView, and Arcsight. Arcsight provides more capabilities, and a good compliance piece(good for gov, but extra price) When telling the Trigeo and NitroView sales guys, they both dissed Arcsight deployment time and high cost. TriGeo seems to be really simple to use and good for small-med environments Same with NitroView, but Nitroview has a superfast backend DB. saludos Albert On Dec 19, 2007 11:44 AM, Eggleston, Mark <meggleston () healthpart com> wrote:
Any of you fine folks using RSA's Envision? Or TriGeo? We use GFI EventsManager and appreciate it simplicity but not its lack of stability and scaling issues. Looking for something more robust w/ an easy GUI. Any suggestions? I am concerned with envisions GUI and find it cumbersome; however would like to hear if other folks use envision with ease or use other products. Thanks, Mark Eggleston Manager, Security and Business Continuity ----------------------------------------- All the information contained in this electronic communication and any attachments is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are hereby notified that you should not disseminate, distribute or copy any portion of this electronic communication. If you have received this message in error, please notify the sender by replying to this email and immediately deleting any and all copies you may have inadvertently made.
Current thread:
- SIEM device? Eggleston, Mark (Dec 19)
- Re: SIEM device? Albert R. Campa (Dec 20)
- <Possible follow-ups>
- Re: SIEM device? Olmstead, Frank M. - OTR (Dec 20)
- Re: SIEM device? Rich Borroff (Dec 20)