Re: Re: SIEM device?

[vin () theworld com]

What SIEM you actually "want" seems to depend on your local SIM and SAM requirements; your need for forensic AAA; the 
talent and manpower you have available; and whichever regulatory regimes you must pay allegiance to -- but there was a 
good annotated list of available SIEM options in the Gartner Magic Quadrant market profile published last summer. I 
just saw that several vendors have put the Gartner report online. See, for one source: http://tinyurl.com/23u23b  

I'm a consultant to EMC/RSA, so I can't offer an objective perspective, but the relative strengths and weaknesses of 
enVision, dubbed the MQ market leader -- as well as all of the other competitive products in this space -- seem to be 
usefully described. 

Suerte,
     _Vin