|
SIEM
|
Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial DirectorPrice: Starts at $25,900
EnVision is a powerful and manageable tool that enterprises can easily leverage to reduce the resource requirements of the security team for event analysis, incident handling and baseline compliance reporting. It possesses a strong mechanism for gathering data from myriad devices and applications around the enterprise and performing parallel processing, correlation and analysis.
Software configuration was a snap, and RSA includes onsite time with its engineers as part of the sale. Configuration and log delivery mechanisms are typical of this type of tool. Any system or network administrator with a modest level of experience should be able to get enVision working with any device or application in the enterprise. We had no problems setting up a variety of platforms and applications in our lab. The appliance is well equipped with RAID, multiple power supplies and powerful cooling units. It's a bit louder than some server devices we have tested in the same size range, but this is trivial once it's installed in your network room.
|
This was first published in July 2008