Wir helfen Unternehmen seit 17 Jahren,
bessere Software zu finden
Security Event Manager
Was ist Security Event Manager?
Bietet umfassende SIEM-Funktionen (Security Information and Event Management) in einer äußerst erschwinglichen, einfach zu implementierenden virtuellen Anwendung. Security Event Manager automatisiert und vereinfacht die komplexe Aufgabe des Sicherheitsmanagements, der betrieblichen Fehlerbehebung und der kontinuierlichen Einhaltung von Vorschriften. IT-Profis können Bedrohungen und wichtige Netzwerkprobleme sofort erkennen und beheben, bevor kritische Systeme und Daten ausgenutzt werden können. SIEM-Tools sind einfach zu benutzen und erschwinglich.
Wer verwendet Security Event Manager?
LEM richtet sich an Sicherheitsteams mit knappen Ressourcen und Budgetbewusstsein. Vorgefertigte Funktionen wie Berichte und Regeln sorgen für einen kurzen Implementierungszyklus, sodass SIEM fast sofort einen Mehrwert bietet.
Du bist nicht sicher, ob Security Event Manager das Richtige ist?
Mit einer beliebten Alternative vergleichen
Security Event Manager
Weitere gute Alternativen zu Security Event Manager
Bewertungen über Security Event Manager
LEM for everyone needing SIEM products
Vorteile:
There is not enough room in this windows to tell you everything good about LEM. The log monitoring across the enterprise, compliance, and KPI monitoring. It has a good dashboard.
Nachteile:
I wish they had taken the time to plan out the development in to SolarWinds Orion suite so it was all one product rather than a running appliance in my virtual cluster
It is simply put a great program. Delivers detail to the nth degree
Kommentare: Node Health, compliance, and i like to call that Audit protection. We have a series of audits we go through annually. The addition of LEM has enabled us to quickly generate reports and show how good or how bad we are doing but also reduces the amount of time spent with the Auditors as they can see we are addressing it and work with us to find resolutions vs picking us apart for what we don't do. Being able to Zero in on issues like never before has opened my eyes and now keeps me awake at night to the reality of the threats and issues facing me and my limited team each day. Automatic notifications and help ticket generation has also been something that assists us knowing we are reducing guess work to fact check.
Vorteile:
Compliance, IT Operations, and dashboards. These tools are essential for knowing and preventing security issues before they are major issues. The Dashboard is your guide. The ability to create custom monitors on the fly and all the builtin logic behind LEM is simply amazing. I had no idea what i did not know. The only trouble i have now is having enough time to spend using it properly in my Small IT shop.
Nachteile:
SolarWinds has a great suite of software, and LEM is one of the jewels. however they as of yet have failed to fully integrate it in to the Orion package. you have to have it on a separate browser tab, and although the Dashboard is fantastic, not being able to put it in Orion prevents the NOC from building a Dashboard with LEM data on it with other data from other applications in Orion.
This is a great tool that allow for very robust access to all syslog data in your environment.
Kommentare: This software allowed us to pass an audit requirement for logging and retrieval of data. We also have been able to use it to notify us of penetration tests and various other events that need immediate attention.
Vorteile:
This is a single point for all of your logging needs. The agents make collecting non-syslog data easy and very manageable. There are a lot of alerts, searches, and such that are included out of the box. The platform scales well and allows for a lot of data to be logged and searched. There are multiple users and each can configure their own alerts and notifications. Being able to customize the notifications is a very big plus.
Nachteile:
Log and Event Manager can be very unwieldy and grow too large very quickly. The search building is not that intuitive and the logic sometimes fails in the queries when building them. If you have to search through a large number of events, it can be quite slow and take 30+ minuted to return results.
When it works its great, when it does not then it can be problematic.
Vorteile:
It is easy to setup and use. I use this for auditing on systems and all of the data collects on a Syslog Server also from SolarWinds. It provides me with all of the data I need and is very reliable for the most part.
Nachteile:
When it stops working it is almost impossible to get it to work again. I have had a handful of systems where the client stopped working and no matter how many times I uninstall and reinstall it does not work again. Also in the selection menu to pick what you want to log it tends to take forever and locks up a lot.
VERY COMPLETE ET EFFICIENT SIEM
Vorteile:
Easy to set up devices Easy to set up features Lots of security rules templates that are used in different standards (PCI DSS, SOX, Best practices...)
Nachteile:
The price is a little high The licence is for 30 devices minimum, so, you can have to pay for something that you don't use
