Arctic Wolf Managed Detection and Response vs. Trustwave Managed Detection and Response

[Artic Wolf SOC-as-a-Service is] great if you don't have a large team nor the time to look at all the systems in your network. They monitor 24x7x365 taking that burden away from a reduced IT team.

Incentivized

Trustwave firewall is a nice way to provide and maintain a secure connection between your Managed NGFW Device(s) and their platform for overall efficient security. The software comes with adequate documentation that outlines clearly your duties and theirs and I constantly remind my team to read through; prevents several conflicts. Trustwave also conducts frequent updates so you're confident while the software handles the most sensitive of data.

Incentivized

• Monitoring 365 logins
• Monitoring Windows processes
• Active Directory monitoring

Incentivized

• It is very reliable in environments without permanent refrigeration.
• The rules that it handles are static, but it has some mechanisms for detecting instruments, which for the current users are very good.
• It maintains VPNs in a stable way and its configuration is similar and compatible with other brands.

Incentivized

• Too many independent dashboards to look at (they are working on consolidating)

Incentivized

• Trustkeeper portal can be slow
• Trustwave sales and support are lacking
• The endpoint client is a little large in size

Incentivized

Different product and covers the gaps our other products do not address. CheckPoint does not offer the same security monitoring on emails and AD accounts. Ninja One is used mainly as an RMM. Arctic Wolf is just another layer of security with detailed reports and options our other products do not have.

Incentivized

After considering several major providers, we realized Trustwave will provide deeper visibility into our data lake which will allow powerful enrichment, investigation, hunting, and strong orchestration for incident response due to its robustness. Moreover, the professional services team at Trustwave delivered a turnkey setup and configuration, as well as continuous fine-tuning, to eliminate any transition-related complications

Incentivized

• I have been informed about Zero days prior to vendors releasing information to the public which has allowed me to patch in advanced of the general release of the information

Incentivized

• It has alleviated time from technicians who do not have to find RCA's for all incidents.
• It actively protects and monitors all traffic and reports in timely fashion.
• Support can be tricky to work with, but incident response makes up for that.

Incentivized