Netsurion reviews

The best managed SEIM out there

Pluspunten:

We use the managed version of Event Tracker for several clients. A central portal has all of the info we need for compliance and security of our client's business.

Minpunten:

Setup can be a bit of a challenge as an agent has to be deployed at every endpoint. Syslogs also need to setup to be collected which needs to be done on each device.

EventTracker is a great asset in our security toolbox...

Opmerkingen: Endpoint security and an awareness what is going on with users' machine is key.
-We can see what new Windows processes are running (good or unwanted), connections to risky IP addresses.
-Preventative alerts for low disk space on servers has prevented unwanted down-time.
-DHCP alerts when new machines attempt to plug into our network
-File Integrity Monitoring for PCI compliance
-Audit support during PCI on-site assessments
-Insightful dashboards for NOC TV/monitoring

Pluspunten:

The integrations from 3rd party systems helps show us the full picture of our security footprint, on-prem to Office 365. Support is very responsive to developing new integrations, if necessary.

Minpunten:

None come to mind. Most anything we've had an issue with has been corrected in a timely manner.

Left a lot to be desired

Opmerkingen: Terrible - would not use them again. They have their own security vulnerabilities we discovered in our own research (such as not encrypting users passwords in Eventtracker database, fixed in newer versions after our recommendation)

Pluspunten:

The ease of set up and the ability to pick and chose what devices you could monitor vs all in was a highlight

Minpunten:

I did not like the tacked on SOC, it left a lot to be desired and when searching for other products comparable, Netsurion definitely was left in the rear view

We have had a great experience with EventTracker. We could not manage our Risks without them.

Opmerkingen: Staff augmentation, real time alerts, log correlation, centralized log management, visibility into security threats

Pluspunten:

The fact that they are able to manage our risks which effectively is staff augmentation for us. Our Information Security Department is one person (me) and without EventTracker monitoring the environment, sending weekly reports, proactively calling me when they see something unusual and holding quarterly collaboration meetings we would not be able to accomplish what we have been able to accomplish.

Minpunten:

Tech Support is based out of India. It can be difficult to get same day turn around. With that being said, though, if it is an urgent matter I normally will hear back from them in a few hours.

Good product but difficult to set up

Pluspunten:

Very flexible and accurate. It provides visibility and insight into what is going on with all our systems and network devices.

Minpunten:

It is complicated to set up and non-intuitive. It lacks the modern approach to data analysis, such as machine learning.

EventTracker good for small MSPs with 2-5 employees

Opmerkingen: It's hard to get a SOC engineer who knows security. They are more of a support. you can't reach SOC directly and get assistance. It might be that they are overseas.

Pluspunten:

It adds more resources to the CPU. The agents failing to send an alert to our support .

Minpunten:

It's not a true multi-tenant and can't be white-labeled. The price is attractive at first but then it adds up. We failed compliance and audit because their log storage can't retrieve log files.

Product designed to run internally, badly adapted for the cloud

Opmerkingen: We had not a very good experience at all and are in process of moving our last customers and servers off it to different products. Support was not very great when we engaged them and when we discovered some serious security flaws (like being able to see other customers data and usernames/passwords) promises were made about fixes and responsible disclosures that were not kept.

Pluspunten:

It does the job of logging events from your windows servers and syslog decently

Minpunten:

It is difficult to search and generate reports. Adding extra alerts is difficult or not possible. The cloud version of the software has lots of security holes as it is just the local software that was quickly adapted for multi-tenancy

CTO

Opmerkingen: reporting, alerts, log archiving

Pluspunten:

Real time alerts for network activity such as failed logons, Administrator changes, software install/uninstalls, etc.. Reporting that satisfies regulator requirements (FFIEC and GLBA) plus comprehensive log search.

Minpunten:

The user dashboard for v8 is a bit clunky and search can be difficult to use and slow. However I have seen the new v9 interface and the redesign seems to have addressed these issues and the search speed.

Simple Easy to use and deploy

Pluspunten:

The ability to gather all the logs from windows computers in real time. Ability to filter events at the sending server side so extra events are not using network bandwidth Very easy to see and use GUI. Ability to alert on events and recieve notifications Very robust and stable platform.

Minpunten:

Upgrading agents can be a little troublesome but that is because we don't use a decent software distribution platform.

We like their managed event analysis and reporting, which helps with PCI requirements

Opmerkingen: We need it to meet business requirements. Consequently it is important to us that it does what it is supposed to do.

Pluspunten:

Support people are easy to work with and have been good at customizing to our needs. We rely on them to create reports and alerts for us. We have monthly reviews to go over what has been happening in the past month. These are good, to follow up on questions and make changes. Balaji and company are great to work with and responsive to our needs.

Minpunten:

I don't use the software much my self but do use the generated reports. With most support being based in India, it can sometimes takes almost a full day to get questions answered if we ask them in the afternoon, our time (CST). That said, their support people are good and easy to work with. Our weekly vulnerability scan reports are not really configured in a way to make them very useful. They show vulnerabilities, but it is hard to get information on the machines affected.

The software provides good functionality, sometimes hard to configure.

Opmerkingen: It provides ease of information for auditing and alerting purposes, allowing us to bring up this info quickly and efficiently.

Pluspunten:

It provides good functionality and information as needed, along with good reporting and adhoc event reporting.

Minpunten:

It can be quite difficult to configure for logs outside of the windows systems, it allows great flexibility and you can usually end up doing it but sometimes support is required.

EventTracker has helped us log and track critical history on proprietary machines for several years

Opmerkingen: We derive compliance to most agency's requirements for remote hosting. We receive timely notices when servers are touched or error in any way.

Pluspunten:

Its thoroughness is a primary asset. Its usefulness as a security compliance tool makes it a necessary part of our hosting suite.

Minpunten:

Setup (not installation but configuration) is tedious and requires both user and support intervention to get it up into a useable state.

works as advertised, support goes beyond expections

Opmerkingen: security alerts

Pluspunten:

great support they do custom mods for you, alerts are very easy to setup compared to other packages. All you have to do is click box.

Minpunten:

gui can be improved, you have to go to different screens and apps to do all the functions. All control should be in single app

Really helps to prevent major/minor server problems

Pluspunten:

I really like the Technical Support provided by your company. I have called many times and have been happy with the provided service.

Minpunten:

The software needs to focus more on the user interface. It needs to be more user friendly.

Great technical support

Pluspunten:

let you know what is going on in network, get email on alerts, ease of filters logs in one place.

Minpunten:

complication on how to set up customize advance threats, no online training for self training to get the best out of the software.

EventTracker is a powerful SIEM.

Pluspunten:

EventTracker is highly configurable, can digest any logging source, and provide precise reporting of events. The company has excellent customer service along with managed services if needed.

Minpunten:

Because EventTracker is so powerful and configurable, it can be overwhelming to setup by yourself. I highly recommend professional services when implementing.

The security compliance tool is very helpful when comes to our IT audit review.

Opmerkingen: it meets compliance and audit requirement without question from auditor or examiner.

Pluspunten:

The pricing was very promising that meet our IT budget need when comparing to SolarWinds LEM and LogRhythm.

Minpunten:

Won't auto generate all reports in general for our needs. We need to manual customize each report. Also, the reports description is not precise to the point and cause confusion.

EventTracker8 is a good all round product that assists our organization with our internal auditing

Pluspunten:

The user interface is very easy to use, and the customer support is excellent. The software is web-based so our administrators can open it via a browser from different locations.

Minpunten:

It can be a little slow at times and the search/reporting functions sometimes timeout/expire during particularly large event searches.

Great offer for small to mid-size businesses

Opmerkingen: Price, ease of use.

Pluspunten:

We are a MSSP and we use Eventtracker for log and event management and it is hands down the best featured product in the market for the price. Some MSP's do not like agent solutions but we do and eventtracker is an agent based product, although they call it a sensor.

Minpunten:

Slow to market with a true MSP program. They are just now working to implement a good MSP program and still they don't have it to cater to MSP's of all sizes so you have to use one of their partners if you are really small.

UI is far behind today's expectations

Pluspunten:

Asset management seems well done. The support team is friendly and capable of solving any issues we have had.

Minpunten:

UI is clunky, and performance is not great. Fixed-width screens are wasteful. Egregious data requirements (e.g. requiring start time and end time in addition to start and end dates when searching for event data) and navigation (popup, forward/back) is not helpful, requiring reinput of field text in second, third and subsequent queries instead of remembering what I had the first time. Basically contemporary UI features are omitted here for some reason, and we therefore avoid using the product to the extent possible.

The program is too slow to use

Opmerkingen: When it works it will send alerts for specific events.

Pluspunten:

It has some good features. I cannot find too many pros about the product. It advertises some good features however the program is too slow and for me not usable.

Minpunten:

The application takes forever to load and is difficult to use. I've stopped using it because it is too slow and difficult. I think part of the problem might be that we have too much auditing turned on which is overloading the system.

Painfully slow to get setup, complex to manage

Opmerkingen: Insight into Windows environment.

Pluspunten:

Pricing was very favorable against QRadar, LogRhythm and that is really the only positive I can find in my experience.

Minpunten:

Ability to scale on virtual platforms, slow searching, complex management, behind in log parsing support against competitors. Support was inconsistent.

Overall good experience, customer support is sometimes slow

Pluspunten:

I like what this product can do to protect my environment, invaluable visibility that would otherwise not be possible

Minpunten:

Support team is sometimes slow to respond, they take a very long time to fulfill requests. Hard to understand the support team sometimes. They are very polite and professional. Makes me think they have a small team