AlienVault OSSIM (discontinued) vs. Powertech Exit Point Manager for IBM i

The most obvious scenario in which OSSIM is well suited is in a single office/home office (SOHO) or small business, in which budget is reduced but asset discovery and vulnerability management are greatly needed and appreciated. OSSIM is lightweight and free, so the real challenge to face is to hire or assign an administrator to manage and operate it, instead of any investment on an expensive appliance. Also, as resellers, promoting usage of OSSIM to customers charging for professional services for installation, administration, and maintenance (remember that OSSIM doesn't have official support from AlienVault) is a great asset for the organization.

Incentivized

As specified earlier, the product is very helpful to monitor the FTP, ODBC, JDBC, SQL and remote commands. What queries are coming to the system and who is issuing the commands so that we can analyze the and restrict their access if its not required. It helped us catch [a lot of] unauthorized users.

Incentivized

• Threat analysis. It can correlate different events happening to detect a pattern or an attack.
• Dashboard provides a clean, single location to see what is going on in our environment.
• Up to date open threat exchange means everything new popping up out there is included and watched for in our environment.

Incentivized

• Restricted FTP users
• ODBC/JDBC connection restrictions
• Exit Point Security Performance, Flexibility

Incentivized

• Creating custom rules is a bit complicated
• Reporting could be improved
• Agent has caused conflicts with a couple of our other applications

Incentivized

• Adding a user to the exit point manger and then specifying the same user to restrict for particular service is bit complex i feel, instead of that making only one entry to restriction would be good.
• All Features are good
• Can maintain all systems from central system.

Incentivized

AlienVault OSSIM is far easy to use and manage - provided you know what you're doing. As any SIEM application, there is some background knowledge required in order to take advantage of the product's functionalities, such as the log correlation and analysis. Other than that, the application is quite usable and robust.

Incentivized

Everything is done through MSSP and installation pro services. Once those hours are burned up, then you're on your own without a lot of help. Typically the pro services hours aren't enough to get past 60 days and MSSP are hit and miss. We had a miss for installation helpers.

Incentivized

AlienVault OSSIM as the first experience with a SIEM is very fine, especially if your company is an SMB. Every SIEM shares some features in common with other products, features such as log retrieval and normalization. So if you stick with principles, you can learn other SIEM products as well. If your environment is not of a minimum size, LogRhythm might be overkill for your network, same with McAfee Enterprise Security Manager.

Incentivized

Helpsystems was one of the best leading third-party service provider in the Market for IBM i. Since we are already customer for the Helpsystems and their support is awesome. We need the best products in market and Helpsystems has all the good tools that suits to my environment. All we need is the best support when its required which Helpsystems support team doing at its best.

is
be identical or equivalent to
More (Definitions, Synonyms, Translation)

Incentivized

• OSSIM and the installers didn't really help us optimize at installation. OSSIM went without optimization for almost two years before that fact was noticed. I think this decreased ROI.
• Finding and researching incidents is much faster with all data available. Sometimes too much data, though.

Incentivized

• Controlling of unauthorized access
• Monitoring the exit point manger logs to restrict data access only to authorized people.
• Monitor of FTP, ODBC, SQL, Remote Commands and block attacks on IBM i DB2

Incentivized