RSA enVision Reviews

Vendor: RSA

3.6 out of 5

6 reviews
83% willing to recommend

1,430 followers

What is RSA enVision?

RSA enVision is a comprehensive security information and event management (SIEM) solution offered by RSA, a leading provider of cybersecurity solutions. It enables organizations to collect, analyze, and manage security event data from various sources, providing real-time visibility into their IT infrastructure. With RSA enVision, organizations can proactively detect and respond to security incidents, ensuring the protection of critical assets and sensitive data.

Get the Security Information and Event Management (SIEM) Buyer's Guide and find out what your peers are saying about RSA enVision, Splunk Enterprise Security, Microsoft Sentinel and more!

RSA enVision is the #34 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give RSA enVision an average rating of 7.2 out of 10. RSA enVision is most commonly compared to Splunk Enterprise Security: RSA enVision vs Splunk Enterprise Security. RSA enVision is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a manufacturing company, accounting for 13% of all views.

Buyer's Guide

Security Information and Event Management (SIEM)

December 2024

Get the category report

Helped 831,158 peers since 2012

Featured reviews

reviewer1093020

Cyber Security and Compliance Lead Engineer at a comms service provider with 1,001-5,000 employees

I rate the initial setup a seven and a half out of ten. So, it's closer to seven. The tool is deployed in our organization on-premises with some test servers. In only two tests in a test environment, the deployment can be carried out. The deployment time only depends on the size of your infrastructure. If I limit the company's size, it will not take too much time. So, it can be done in seven to eight hours. Regarding the deployment process, we have managed some test servers, after which we need to install some agents. If you include more servers, you need to install more agents. If you want to use agent-based, I would say that it is totally up to the stakeholder. You will get some additional benefits if you can choose the agent since you will be more assured that less positive false positive results you will get from the tool. For deployment, one test server, a few deployment servers, and some policy configurations are done by the OEM with some local support. We used some Windows servers and Linux servers, and we installed some agents in different types of operating systems. So different versions of Linux and different versions of Windows. We also integrate some network devices like firewalls to integrate firewalls and logs. So, the amount of logs and firewalls is too much. I have to engage too many employees for deployment. So there are those for Linux servers, others for Windows servers, and the rest for network devices. One for SIEM policy creation and one for SIEM management administration is also required.

Read full review

Simon Fontaine

Président at ARS Solutions

You need a skilled engineer to deploy it because you can do anything with this tool. You can see everything on the network. A good engineer will be surprised and have fun using this tool because it's very powerful. Deployment process: You need to build a recipe/layout when you want to deploy something. Once the recipe is done, you just have to copy it. So you really need a good engineer at first, but then any other technician can copy the recipe. You don't need to be an expert once the recipe is finalized. So, once you have it set up, it's easy to deploy. But you need a good engineer to deploy it correctly. You will get alerts from the system, but if you want to fully explore and maximize the tool, the engineering needs are different.

Read full review

PredragSkundric

Chief Information Security Officer at a financial services firm with 51-200 employees

It is not scalable at all. This is an area that could have been improved, but it is out of date and no longer used. RSA enVision does not share the system anymore. We have only one user in our organization. I am the only one who is using this solution. I am the system administrator.

Read full review

RSA enVision mindshare

As of January 2025, the mindshare of RSA enVision in the Security Information and Event Management (SIEM) category stands at 0.4%, down from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Key learnings from peers

Last updated Nov 21, 2024

Valuable Features

RSA enVision is highly appreciated for its comprehensive log management, robust reporting capabilities, and powerful correlation engine. It excels in real-time monitoring, ease of deployment, and scalability. Additionally, RSA enVision provides timely alerts and in-depth forensic analysis, which enhances security posture. It supports a broad range of devices and integrates easily with existing systems, offering a high degree of customization to meet diverse requirements.

"We developed around this solution and received excellent support from the company."
"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."
"The most valuable feature of this solution is the reporting."

Room for Improvement

RSA enVision requires enhancements in its reporting capabilities, customization options, and alerting system. Confidence in troubleshooting and managing logs could be increased by improving documentation and training materials. Performance issues, especially in larger environments, affect efficiency and scalability. Integration with other tools lacks flexibility, while the need for a simpler configuration experience is evident. Security updates and patches should be more consistent and communication about them made clearer.

"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."
"In general, the solution currently isn't user-friendly."
"RSA enVision log manager is out of date and is not in use anymore."

ROI

RSA enVision significantly enhanced threat detection capabilities and streamlined compliance reporting. Users experienced improved network security posture and reduced incident response time. Implementation led to operational efficiency and better resource allocation. ROI was noticeable through faster threat identification, decreased manual effort, and lower costs associated with security breaches. Enhanced visibility into network activities and comprehensive log management provided added value. Customizable alerts and automated workflows further contributed to measurable financial benefits.

Pricing

The pricing for RSA enVision is moderate. There are no additional costs, and the tool provides SIEM and SOAR services. However, if one wants to purchase the SOAR service, an extra license fee is required. Recently, similar services have been covered with SDR and other solutions, so excluding the SOAR service seems reasonable.

"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."
"We no longer pay a licensing fee because it is out of date and don't pay for support."

Popular Use Cases

RSA enVision primarily serves security teams for event log management and compliance reporting. It helps in real-time monitoring, threat detection, and investigations. Many highlight its capability to collect data from various sources, providing centralized log management. It assists IT departments in tracking security incidents and generating regulatory reports. Some find its correlation engine valuable for identifying patterns and anomalies, enhancing overall security posture. Stress was placed on its robust performance in handling large volumes of data.

Service and Support

Customers find RSA enVision's customer service responsive and knowledgeable. Support representatives assist efficiently with queries and resolve issues promptly. Some mention timely responses and clear communication from the support team. The majority appreciate the expertise and professionalism shown during interactions. A few instances of slow responses are noted, but these seem infrequent. Generally, RSA enVision’s support team meets expectations adequately with a helpful and supportive approach.

Deployment

Initial setup for RSA enVision is straightforward and user-friendly. Configuration is intuitive, allowing for a smooth installation process. Many find the setup documentation to be clear and helpful. The process is quick with minimal challenges, enabling a swift deployment. Assistance from technical support, when needed, is prompt and effective. RSA enVision’s initial setup is designed to be efficient, making it easy for teams to get started quickly.

Scalability

RSA enVision scales effectively, handling large data volumes seamlessly. Extensive capabilities support complex deployments, adaptable for various business environments. High performance ensures continuous, reliable monitoring even under heavy loads. A flexible architecture allows easy integration with existing systems. Prone to occasional lag with extensive datasets but remains a strong choice for growing enterprises.

Stability

The stability of RSA enVision is affirmed with consistent performance reliability. Frequent updates ensure the system remains robust against vulnerabilities. Limited downtime and quick recovery times are noted as standout features. Performance is rated high even under heavy log management loads, and the system handles varied scale implementations efficiently. Although some note occasional minor bugs, the overall consensus points to a very dependable and solid platform.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Security Information and Event Management (SIEM) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews

Computer Software Company

13%

Manufacturing Company

13%

Financial Services Firm

10%

Educational Organization

Energy/Utilities Company

Comms Service Provider

Healthcare Company

Real Estate/Law Firm

University

Government

Non Profit

Construction Company

Outsourcing Company

Aerospace/Defense Firm

Media Company

Legal Firm

Hospitality Company

Logistics Company

Import And Exporter

Retailer

Insurance Company

Consumer Goods Company

Compare RSA enVision with alternative products

Learn more about RSA enVision

The solution offers a wide range of features, including log management, event correlation, threat intelligence, and compliance reporting. One of the key strengths of RSA enVision is its ability to collect and normalize data from diverse sources, such as network devices, servers, applications, and databases. This allows organizations to gain a holistic view of their security posture and identify potential threats or vulnerabilities.

The event correlation capabilities of RSA enVision enable the detection of complex attack patterns and the identification of potential security incidents. By analyzing events in real-time and correlating them with historical data, the solution can provide actionable insights and alerts to security teams, enabling them to respond quickly and effectively. RSA enVision also offers advanced threat intelligence capabilities, leveraging machine learning and behavioral analytics to identify anomalous activities and potential indicators of compromise. This helps organizations stay ahead of emerging threats and proactively mitigate risks.

RSA enVision provides comprehensive compliance reporting capabilities, helping organizations meet regulatory requirements and demonstrate adherence to industry standards. The solution offers pre-built compliance reports for various regulations, such as PCI DSS, HIPAA, and GDPR, simplifying the audit process and reducing compliance-related costs. In summary, RSA enVision is a powerful SIEM solution that enables organizations to effectively manage their security events, detect and respond to threats, and meet compliance requirements.

With its robust features and capabilities, it provides organizations with the necessary tools to enhance their cybersecurity posture and protect their critical assets.