Home page logo

basics logo Security Basics mailing list archives

Re: Re: Picking a SIEM: How's envision compared with Arcsight?
From: roys81 () gmail com
Date: Mon, 6 Feb 2012 05:57:47 GMT


i'm sorry to be rude but the guy who answered you about arcsight and envision obviously don't understand much in 
envision - i've been deploying envision for 5 years now and i can tell you a thing or two about it, 1st of all arcsight 
is a great product but it does have it's weaknesses.
envision supports: wmi, lea, odbc, http/https, ftp/sftp, syslog and snmp - if you want to be more precise, if there is 
a log you can read it with envision also you can develop a parser for every unknown device so envision will recognize 
it and a little secret about it - it's free of charge. if you want to compare the two systems than you need to know 
that arcsight is based on oracle DB (for better and worse) while envision's using IPDB (flat file storage method) i'm 
not saying that envision is a perfect solution you'll need to do some out of the box developing to get some special 
features out of it but the simplicity of connecting devices, storing data at envision is the best i've seen in the 
another thing that you need to know about arcsight is that it's one of the most complexed SIEM products in the markek 
and you'll probably need at least one person in a full time job to deploy and maintain it for you (and that's not cheep 
at all). if you have more questions about envision i'll be glad to help you.

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]