IBM Security QRadar SIEM v7.4.3 (BYOL)
IBM Security | IBM Security QRadar SIEM v7.4.3 (BYOL)Linux/Unix, Red Hat Enterprise Linux RHEL-7.7 - 64-bit Amazon Machine Image (AMI)
Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
In-depth network forensics and integration with other tools
What do you like best about the product?
It helps in threat detection and response solution to remediate the threat. It has open architecture to deploy on premises, on cloud or as a service. We can integrate EDR, SIEM, SOAR and other threat intelligence while leaving data where it is for to complete the XDR approach.
What do you dislike about the product?
The EPS cap limits the amount of logs that can be integrated in Qradar can generate many false positives. Not a much user friendly, a bit difficult to set the rules.
What problems is the product solving and how is that benefiting you?
It is a good solution to monitor,investigate detect and respond to threats on devices and endpoints of the environment. Logs retention capability is good. It collate large amount of data from the cloud and on-site sources.
- Leave a Comment |
- Mark review as helpful
Can't prefer QRadar alone but prefer to use with SOAR concepts
What do you like best about the product?
It has variety of searches that you can easily do and correlation queries can be easily altered
What do you dislike about the product?
I am not a fan of Qradar View. when I see it I feel that's a pretty outdated view.
What problems is the product solving and how is that benefiting you?
When it is connected with XSOAR the user experience is better as alerts are directly linked and synced.
Best SIEM for small to medium organizations
What do you like best about the product?
Easy to integrate with other tools, availability of extentions, simple rule creation, good customer support, large community to discuss queries, able to trigger alertsin real time
What do you dislike about the product?
Tool is very bulky due to this problems occurs during upgrading, search is slow if data is High, some time refrence set cause problem
What problems is the product solving and how is that benefiting you?
It is event management system, Central console to collect all events, you can build rules to trigger alerts for anomalies
Best SIEM product in the market. Easy to integrate new devices and other security technologies.
What do you like best about the product?
Simple GUI and ease to configure rules, dashboards, reports and searches
What do you dislike about the product?
There are issues related to the wincollect agent wherein the services stops automatically and log reception stops
What problems is the product solving and how is that benefiting you?
Compliance
security
visibility
Threat intelligence
security
visibility
Threat intelligence
Overall experience was really good using the tool.
What do you like best about the product?
Integration of almost all the types of different devices makes it a very useful and very capable tool for monitoring the infrastructure. Availability of the documentation also helps in resolving any kind of issue.
What do you dislike about the product?
Upgrading to a newer version is a little bit hectic task. This is the one thing that I don't like about this tool. Apart from that everything is good and smooth.
What problems is the product solving and how is that benefiting you?
It gives a wide picture of cyber threats which are external and internal. The more devices you integrate the broader picture you get of your system. Various use cases and building blocks are just cherries on top.
IBM QRadar is quite convenient SIEM
What do you like best about the product?
It is easy to deploy, user-friendly interface, informative manuals, responsive and helpful technical support.
What do you dislike about the product?
Integrating ESET logs are still in progress. I think it is a matter of time and technical support will resolve this issue soon.
What problems is the product solving and how is that benefiting you?
It collects logs from different sources and detects potential threats.
Have 7 years for deployment and operation IBM Qradar
What do you like best about the product?
Friendly GUI and helpful rules, help me monitor overall
What do you dislike about the product?
Sometimes GUI responds slowly and some rule is not helpful
What problems is the product solving and how is that benefiting you?
IBM Qradar has large communication and have more rules for security
Nice tool for getting an overview of daily cyber attacks.
What do you like best about the product?
Easy to use, compatible, and scalability according to your use and the size of the infrastructure that you currently have. And the customizable dashboards give a nice touch to it.
What do you dislike about the product?
The need for a continuous upgrade because of the app's support issue. This gets a hectic task as we might face issues if we have a huge environment with multiple components.
What problems is the product solving and how is that benefiting you?
It helps to get a clear picture of daily cyber-attacks that are being done against your organization and UBA also helps to detect insider threats which give an upper hand in this changing digital world.
It is easy to learn with good GUI experience.
What do you like best about the product?
Its ability to write custom UDSM and integrate custom applications to cover the security in a broader way. Also the Pulse dashboard app that they provide is really good and customizable helps to have breif understanfing about whats going on in the environment.
What do you dislike about the product?
Pricing for the license is a little bit higher as small firms that are not so big and developed have to think a lot before buying and implementing this SIEM solution.
What problems is the product solving and how is that benefiting you?
It is providing our clients an overview of external and as well as of internal threats. Now a days ransomware attacks have risen drastically and this solution helps to track down the lateral movements as well if configured correctly.
A SIEM solution to fit all your needs
What do you like best about the product?
The GUI of Qradar is easy to use, we can add dashboards as per our requirements, check the health status of our devices and even go through all the admin tabs in such a way that is easy to understand.
What do you dislike about the product?
The price to deploy Qradar on a big level is very high as compared to the competition, which offers much more malleability at a low price point.
What problems is the product solving and how is that benefiting you?
Qradar is providing live data feeds, which helps us in identifying and mitigating various security risks, & attacks.
Recommendations to others considering the product:
For every SOC center, we need a SIEM, and Qradar is probably the best SIEM to go with.
showing 51 - 60