ArcSight Analytics Reviews

I have used ArcSight Analytics to assess environments with more than a 100 network devices and 12 different firewalls. 

I have used it to evaluate 120 servers, which include Sybase, AIX, SAP, Windows, other Linux-based servers. 

It has been used with Db2 and Oracle databases.

ArcSight Analytics has improved our system and network policy monitoring. It comes with an option to generate and escalate a ticket. We can forward the ticket to the relevant person indicating ticket severity and incident type. A hierarchical structure can be defined to determine the right person.

Threat Level Formula is an important feature in this product. It helps users to add a critical device. In addition, the rate for log filtration is quick. The filtration options are useful and authentic compared to other products.

We implement this solution for our clients.

It is primarily used for compliance, but also for analytics and SOC implementation.

All of the deployments that we have implemented are on-premises.

This product improves visibility, whereas prior to implementing this solution there is no visibility.

This solution facilitates compliance because it is able to generate reports to see which users or servers are not compliant with specific standards, such as PCI or ISA.

I use ArcSight Analytics to make use cases, create rules in our SIEM, and provide services.

The most valuable features are that you get lots of connectors, which make it easy to log in to my ASM, and lots of prebuilt roles from the company. The community base also has a lot of information to configure and adapt the product. 

We use this solution for log management and correletion.

We have specific use cases for our platform and it helps us to monitor connexion to applications and investigation.

ArcSight Analytics is used to get a deep insight about the network.

ArcSight Analytics is used to get a deeper insight and threat analysis about the network. The solution's threat analysis gives a good view of the network. We can then compare those vulnerabilities and CVS scores worldwide and get a good understanding of how likely the network is to be hit. The kind of report ArcSight Analytics gives is really good.

ArcSight Analytics is a very scalable solution that is easy to deploy.

We primarily use the solution for logging sources. It's for analysis.

I like their filtering and their reporting tools. 

I like their integration with many other different tool sets, which is similar to other products as well.

The solution is easy to implement.

I've found the product to be quite stable.

It's scalable.

We are primarily using the solution for security alerts and correlation of security events and logs.

The ability to correlate different logs is the solution's most valuable feature.

Our primary use for this product is to cover on DCI (Data Center Interconnect) requirement and design excerpts. It is used to connect all the links from different systems and environments. We also use it to do accommodations between the systems and environments and have multiple use cases between the systems.

Our organization has improved because ArcSight allows multiple integrations with multiple systems which we did not do before using the product. There can be multiple integrations with different parts of systems that process them. This can include files, XML, how the parts of the system receive connection, a specific API, other different products like anti-virus packages, or risk prediction.

We needed a predictive function that worked with other systems. It is supposed to be possible by using different agents. There is an agent called Smart Connector. Each connector has a specific role and function and launches with specific technologies.