IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Working with QRadar
What do you like best about the product?
Threat detection system for providing a complete protection
What do you dislike about the product?
Everything is working perfectly but little bit improvement required to filter threats
What problems is the product solving and how is that benefiting you?
Network security issues which means threats detection
- Leave a Comment |
- Mark review as helpful
IBM Security Qradar Genuine Review
What do you like best about the product?
Easy to use with all GUI pre design tool
What do you dislike about the product?
I didn't find deep scanner that is very very important for vulnerability assessment. You need to focus deep scanner and more AI features specially cloud security
What problems is the product solving and how is that benefiting you?
I found multiple security tools in one platform that is very impressive and for VA and SoC Analyst. Analyst can easily to use this tool, nothing too much complex.
Recommendations to others considering the product:
Those who wants to use a best security tools, I think this tools I'll recomend to use. Your work load will reduce and you can do other security works.
User Friendly and easy to setup
What do you like best about the product?
GUI and the ability to drill down deep in logs for investigation, Qradar apps which provide enhanced functions and widely supported integrations to a lot of third party products.
What do you dislike about the product?
The GUI works great but it looks outdated. Most modern SIEMs nowadays have better-looking interfaces which attract analysts who have to look at it most of the time.
What problems is the product solving and how is that benefiting you?
Offence investigation, SOC monitoring, Incident Management, Third Party integrations, SOC reporting. Qradar has a wide range of features which can be utilized in the form of different Apps.
Qradar for SOC
What do you like best about the product?
simple to use and understand and requires limited knowledge on working of SIEM
What do you dislike about the product?
Time to pull logs is slow compared to others
What problems is the product solving and how is that benefiting you?
SOC monitoring for small to medium organizations and benefits include low cost and minimum SIEM knowledge for starters
Recommendations to others considering the product:
Good for small to medium scale enterprises with servers/data points (log sources) less than 100
Leader for a reason
What do you like best about the product?
Fast log search, onboarding protocols, content creation ease and flexibility.
What do you dislike about the product?
Not so user-friendly User Interface for log search.
What problems is the product solving and how is that benefiting you?
Need flexible autoscaling model.
Best in analysis but bad support
What do you like best about the product?
Good for analysis. Group by function is really good.
UEBA feature is really good.
UEBA feature is really good.
What do you dislike about the product?
UEBA machine learning function not working since years and support not bale to solve issues. Use creation not so easy. Option should be provided to add new condition. Regex feature should be added in reference set.
What problems is the product solving and how is that benefiting you?
Analysis is very easy compared to other siem tools. Historical correlation feature not seen with other siems. Resilient not so good when it comes to work with qradar.
IBM QRadar
What do you like best about the product?
Complete suite of products.. ease of use
What do you dislike about the product?
Nothing at the moment.. licence costs could be lower
What problems is the product solving and how is that benefiting you?
Single source for monitoring for our agents. Easy to colorate and plugin multiple sources of input
Recommendations to others considering the product:
Can recommend
One of the leading SIEM Tools for enterprise settings for threat analysis and correlation
What do you like best about the product?
It is helping security teams to reduce manual workload by automating all security monitoring processes by implementing the Zero Trust security model and it also supports multiple protocols to ingest logs and events from multiple endpoints to make it more diverse in terms of device vendor support.
What do you dislike about the product?
IBM QRadar is somehow hard to configure compared to other vendors and onboarding log sources or assets can sometimes prove to be a hectic process
What problems is the product solving and how is that benefiting you?
We used QRadar as a Security Operations Monitoring tool in our SOC
Recommendations to others considering the product:
An organization should first consider the business requirements as this tool might prove to be costly and it will only make business sense if ROI is acceptable there should be skilled administrators and analysts to operate this tool to get the best out of it
It was good
What do you like best about the product?
The content of the course is good. It has good practical hands-on exercises that helps to understand and grasp the concepts.
What do you dislike about the product?
The content could have had more sessions on analysis of alerts.
What problems is the product solving and how is that benefiting you?
I started off with Qradar architecture. But it had more in-depth concepts and made us to understand the core concepts of Qradar.
Recommendations to others considering the product:
IBM Qradar had an edge on other siem tools. It is very user friendly and anyone can learn so easily.
very versatile and convenient program
What do you like best about the product?
The program is very powerful and versatile. we were able to set up integration on it with our various equipment and servers (Juniper. Aix. Unix. Oracle)
What do you dislike about the product?
it's a bit difficult to write parsers, but if you have experience in programming, then it's possible
What problems is the product solving and how is that benefiting you?
it became more convenient to respond to incidents and it became easier to recognize hacking attempt
Recommendations to others considering the product:
Universality, you can write your own parser without much programming skills, solves many problems
showing 111 - 120