Egnyte vs. LevelBlue USM Anywhere

If you're simply sharing and syncing across devices and don't care about granular security permissions, this is an easy win. If you're needing more control over the ability to restrict users from deleting folders, sharing folders, and allowing only certain groups to be able to view a folder, this can work but will ultimately give you arthritis as you'll end up having to perform a multitude of clicks for a task that should be able to be done in a fraction of the action. Have a folder template that allows for the first two levels of folders to be view only and the third level allowing file/folder creation and deletion? Have fun setting each of the third level folder's permissions-- they should give out free wrist braces. When discussed with their engineers about this function, a suggested $28,000 custom script was suggested. I don't believe them when they say that they haven't heard of other customers wishing to assign rights to multiple folders-- Something any sort of real admin would require. It simply isn't important to them, which is fine. The current ability

AlienVault Unified Security Management (USM) Anywhere is a cloud-based security information and event management solution that provides effective and affordable threat detection, incident response, and compliance management capabilities. USM Anywhere is well suited to mid-size enterprise environments operating in the cloud. USM Anywhere is also well suited to enterprises whose operations teams require easy deployment and management. Last, USM Anywhere is considered a highly affordable option compared to competitors. USM Anywhere lags competitors in several areas, such as application monitoring, database monitoring, and integrations with third-party solutions such as cloud access security brokers (CASB), DAM, DAP, and DLP.

Incentivized

• Drive map tool on Windows and flexibility on client configuration, can change drive letters fairly easily if needed.
• New user setup is straightforward and permissions not too difficult to set up and assign.
• Support has been fairly responsive and helpful with issues as they have come up.

Incentivized

• The USM platform provides the essential security capabilities that work together for a fast and cost-effective way for organizations to have complete visibility into the security of their environment.
• With the information gathered during asset discovery, USM will correlated that information with known vulnerabilities for continuous vulnerability awareness. In addition, USM contains an active scanner capable of scanning for over 30,000 known vulnerabilities.
• To give better visibility into your network, and possibly detect intrusions that don’t follow behavioral patterns, we offer Netflow information, bandwidth monitoring, and traffic capture, all part of our behavioral monitoring capabilities built into USM.

Incentivized

• We often have issues with WebEdit, changes not saving/overwriting
• No functionality to drag and drop files/folders within the UI, can only move things by going through Move > Select location
• When previewing Word files in the browser, tracked changes are not shown so there can be misunderstandings when quickly reviewing documents

Incentivized

• USM Anywhere doesn't allow you to multi-home sensors. So if you have non-routable networks, you'll need to investigate the on-premise solution too.
• You have to be on top of tuning else a constant stream of alerts will cause your SOC staff to begin ignoring alarms.
• You have to be on top of tuning else you'll eat your allotment of storage for that month. It is really easy to exceed your storage quota if you don't proactively monitor log sources. USM could do a better job letting you know if a log source is too chatty.

Incentivized

We found that usage of Egnyte in our supported clients, with sufficient bandwidth, provided all the features and stability we required. The billing setup was fair and the support provided was ample for end users and well as our in house admins. There was a concern about high usage clients but this was taken into account during the vetting process.

Incentivized

The centralized logging and retention for PCI compliance was our main driver, and it is meeting that need. Otherwise there has been enough frustration with the lack of documentation and the need to customize through the CLI that I would be open to alternatives.

Incentivized

Really easy to use the interface. The web browser is very intuitive and I have not had any notable issues with this. It's easy to work on documents as a team, and the only issues we have to tend to come with Apple apps and downloading large files to WebEdit. It's very similar to the filing systems that come on Apple and Windows devices so not a steep learning curve.

Incentivized

Once you are able to navigate the different panels, finding what you need is quite easily. Before getting used it it can be a bit of challenge . Each panel is quite well laid out and the filtering search capabilities are quite strong.

Incentivized

We do have issues with maintenance on the AlienVault USM as the disk fills up from time to time with other data sources. Sources for scanning logs and net flow data isn't calculated in regular disk maintenance and can easily fill up our disk if we do not keep an eye on it with some custom Nagios plugins. The system does properly trim logging data from logging sources properly.

Incentivized

Egnyte works very well across all platforms and as an add-on to other programs. Load time is close to nothing. Reports can be made in no time as well. All in all no performance issues. We can see that it depends on the local network connection. If you're running with fiber there won't be any issues.

Incentivized

With the latest release of AlienVault USM overall performance has not been an issue. We have noticed single source events per second does not scale well with the overall system. 2,000eps on a vmware system with a single source produces delays of up to an hour for us. Pages, reporting and even raw log searches are rather quick though.

Incentivized

I never had to reach out to customer support for Egnyte. I don't know any coworkers who have had to reach out to Egnyte for support either. As far as I am concerned, the support team is doing a good job since I have not had to reach out to them.

Incentivized

Support is friendly but response time has been spotty. Also initially when we signed up there was a lot of pointing us at the documentation, which has been spotty and ad-hoc for what is supposed to be a commercial product. Overall the feel of AlienVault and the support has been of a very new and startup company that is trying to grow up out of it's open source roots, and I'm not sure if they've totally been able to make the transition to being able to meet the expectations of the enterprise customers.

Incentivized

I did not have any experience with "in person" training directly. The free online classes offered for a half a day are based on the actual training offered. These little teasers are very good and well worth your time to learn a few quick and dirty ways of getting more information from your SIEM

Incentivized

The instructor gave detailed overview and went through the labs before allowing us to attempt using them. I enjoyed the balance of time and level of instruction received. The content went deeper that usual and the lab environment was easy to use and all results were consistent. I came away from the course knowing more than i did if I had just read the course notes.

Incentivized

AlienVault USM was a very simple to implement and get up and running. We started with a trial version and had that up and going within an hour of receiving email instructions from the sales engineer. We never had to contact support to get the system up and going. It was extremely easy to convert over to a full license once we started with a paid version.

Incentivized

Egnyte syncs with Windows machines better than any competitor I have come across. The service focuses on just this platform and their in depth focus shows in the end result. Google is not really made with Windows in mind. Box is cumbersome and the web portal is not easy to use. SharePoint sync to PC is terrible.

The cost of AlienVault is what sold us on AlienVault. However, considering the amount of time and effort that has gone into getting it set up and realizing that views and reports cannot be shared across groups makes it not worth the savings.

Incentivized

The AlienVault USM is not very scalable. Some scalability can be achieved by installing additional sensors, but this only offers 500eps per sensor and is still overall limited by the installation type of VM or physical. We have also noticed the EPS (events per second) is rated overall and not towards a single source. A single source on a very healthy VMware partition tops out at 2,000eps for us, no matter how we configure it. Maybe this is a problem of the 5.2 release?

Incentivized

• The promising advantage of Egnyte is that user can access their files from the cloud anywhere without any cumbrance like connecting to VPN or other third-party soft wares.
• No risk of data loss.
• The platform is lacking in changing the parent administrator of a folder as if one person is the administrator of the file or folder and when needs to change it becomes clunky and does not supports it properly.

Incentivized

• Once you hit the 150 asset mark, you have to jump to their unlimited license. There is no middle ground. We were only 10 or so assets above the 150 so we had to chose to either not monitor those assets or pay the price of the upgrade.
• AlienVault brings all the information to one place which makes it much quicker to track down problems.

Incentivized