IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
The UI although has everything in place, but it looks a little cluttered.
What do you like best about the product?
The ease of making correlation rules using building blocks.
What do you dislike about the product?
The overall appearance of the dashboard.
What problems is the product solving and how is that benefiting you?
Used it for security monitoring.
We receive offences based on the log sources and rules and it helps have an insight what's going around in the organization.
We receive offences based on the log sources and rules and it helps have an insight what's going around in the organization.
Recommendations to others considering the product:
The overall efficiency of the User Interface can be improved.
It's sometimes difficult to go through the Network flows.
Also, adding comments to offences can be made more user friendly.
It's sometimes difficult to go through the Network flows.
Also, adding comments to offences can be made more user friendly.
- Leave a Comment |
- Mark review as helpful
Qradar Review
What do you like best about the product?
User experience, log integration, threat intelligence
What do you dislike about the product?
Parsing is not happening for fee devices
What problems is the product solving and how is that benefiting you?
Security of our organisation
More than 3 years of working experience with IBM QRadar
What do you like best about the product?
Easy to use. It has the best features like UBA, USE Case Manager, Watson Advisory etc. Mapping to MITRE attacks, IBM Thread Intelligence is among very useful tools security guys use on a daily bases.
What do you dislike about the product?
The default dashboard should be well designed. Also, I have some issues with the integration of Huawei customized devices but the issue was not at the QRadar end.
What problems is the product solving and how is that benefiting you?
Monitoring network security posture, Threat Hunting, type of communication, violations of user access rights, device misuse, and violations of configured rules.
Recommendations to others considering the product:
Have working experience with other SIEM solutions as well and I have found this tool easy to deploy and configure.
Qradar is the best SIEM solution
What do you like best about the product?
is very friendly with the users, easy to understand and easy to use and the most important thing is that is easy to add more technologies.
What do you dislike about the product?
sometimes the tool is slow to use but the biggest problem is the correct creation of rules that allow the analysis of events
What problems is the product solving and how is that benefiting you?
We have resolved the collection, analysis and subsequent resolution of security incidents from the logs that we have been able to integrate with the tool.
Recommendations to others considering the product:
It is a complete solution that can last for many years without major inconveniences.
QRadar 'A Complete Solution for Security'
What do you like best about the product?
All the features are good and easy to understand. Pulse dashboard give us complete view of offenses and events. Also user behavior analysis gives a clear look of risky user. Use case manager is also helps to analyse rules and building blocks. Log activity, network activity gives real time events and flows.
What do you dislike about the product?
Every features are useful. I like all the features and app host. Also content extension helps to increase reference set. Report might include more features and easy to generate.
What problems is the product solving and how is that benefiting you?
Collecting all logs and flows in qradar from all log sources. We detect bot connection in our system and mitigate the issue. It actually help to take action before any incident happen. Threat intelligence feed also help to know about threat ongoing in the globe.
Recommendations to others considering the product:
Useful tool for security. Very much recommended.
i’ve used it for quite sometime and love the sources pf data and the feeds are available.
What do you like best about the product?
Enriched data and the feeds and logs ingestion.
What do you dislike about the product?
Dashboard should be more user friendly and it should be self explanatory for ghe begineers as well.
What problems is the product solving and how is that benefiting you?
Data and Logs analysis and looking for malicious attempts
Good Out of the box parsing or various devices and good security use cases
What do you like best about the product?
Great device integration
Good apps for various security devices
Excellent network and security data collection
Excellent coorelation and normalization
Very good UBA
Good apps for various security devices
Excellent network and security data collection
Excellent coorelation and normalization
Very good UBA
What do you dislike about the product?
Tuning of Rules and alerts require some insights and knowledge of logs sources.
Reduce alert generated and focus on main alerts and reducing unnecessary rule triggers
Reduce alert generated and focus on main alerts and reducing unnecessary rule triggers
What problems is the product solving and how is that benefiting you?
Network Visibility.
Security Alerts from single Console.
Vulnerability Information of all assets.
Operational Information related to network. Network Traffic Visibility
Security Alerts from single Console.
Vulnerability Information of all assets.
Operational Information related to network. Network Traffic Visibility
one of the best tool for soc analysts
What do you like best about the product?
Qradar is very user-friendly.
easy to integrate other infra.
huge support available locally as well as international
ariel query language help to find the logs easily.
easy to integrate other infra.
huge support available locally as well as international
ariel query language help to find the logs easily.
What do you dislike about the product?
currently, I don't dislike any feature. because I find everything smooth.
What problems is the product solving and how is that benefiting you?
threat intelligence, event managment
The experience is awesome and features are wonderful
What do you like best about the product?
The interface and ease in data operations and data analytics. User freindly UI for playing with logs and creating new dashboards and rules
What do you dislike about the product?
There is nothing much to dislike about the product
What problems is the product solving and how is that benefiting you?
We are securing our envioronment with qradar and also uses it as a major copmonent of SOC, we are also using it to fulfill our compliance requirements.
Great tool to use and working is easy
What do you like best about the product?
Graphical user interface is the best and easiest to use without any conditions
What do you dislike about the product?
Learning and certificate is costly and we need to look in external training
What problems is the product solving and how is that benefiting you?
Used for siem and creating filters is easy
showing 121 - 130