Who Uses This Software?

Designed for all business sizes, it is a vulnerability management solution that helps monitor applications for internal and external threats.


Average Ratings

5 Reviews

  • 4 / 5
    Overall

  • 4 / 5
    Ease of Use

  • 2.5 / 5
    Customer Service

Product Details

  • Starting Price
    Not provided by vendor
  • Deployment
    Cloud, SaaS, Web
    Installed - Windows

Vendor Details

  • Micro Focus
  • www.microfocus.com
  • Founded 1976
  • United Kingdom

About ArcSight

User behavior analytics and vulnerability management solution that helps identify internal and external threats.


ArcSight Features

  • Asset Discovery
  • Asset Tagging
  • Network Scanning
  • Patch Management
  • Policy Management
  • Prioritization
  • Risk Management
  • Vulnerability Assessment
  • Web Scanning

ArcSight Reviews Recently Reviewed!


It provides powerful features to make every operation with received logs.

May 04, 2019
4/5
Overall

4 / 5
Ease of Use

4 / 5
Features & Functionality

3 / 5
Customer Support

4 / 5
Value for Money
Likelihood to Recommend: 8.0/10 Not
Likely
Extremely
Likely

Pros: ArcSight supports functions such as processing, categorizing, normalizing, converting alarms and correlations and receiving reports on SIEM with very powerful search and filter operators. The product also supports making and running trend reports. It offers very powerful features for SIEM. It has features that provide great flexibility on logs. My favorite feature is the trend report. With this feature, real-time logs over the logs of the report to match the results of the report with a different database to get instant reports to access the report provide quick access.

Cons: Ticket management feature is one of the least favorite features. It does not have an interface that can be easily adapted and applied according to your environment. If you want to use this feature, you need professional support and software support.

Overall: I have been using this product for about 3 years. We use ESM and Logger products. As a SIEM solution, we are able to host this product in our environment. We monitor the alarm and correlation rules, abnormal activities and cyber threats, which we write through the logs we receive from various security products and applications in our environment and monitor our incident response processes.

Vendor Response

by Micro Focus on June 20, 2019

Thank you for the 4-star review, it is very much appreciated. We did note your comments about your `least favorite feature? and this certainly helps us build a better product. ArcSight has Case Management; that is different from Ticket Management. Ticket Management is more of a support function / ITSM issue; and while ArcSight does have connectors for ServiceNow, we know it's been problematic for some customers. As you point out, we typically recommend that Professional Services be engaged as each implementation has its idiosyncrasies. That said, improving this area is a KPI for us and we will be looking at options as we move to advance the ?Open? portion of our strategy in late 2019. We'd be happy to hear your thoughts / recommendations in more depth.

World of Data

May 17, 2019
4/5
Overall

4 / 5
Ease of Use

4 / 5
Features & Functionality

4 / 5
Customer Support

4 / 5
Value for Money
Likelihood to Recommend: 9.0/10 Not
Likely
Extremely
Likely

Pros: The most important feature of Arcsight is that it is the only point of communication for observation and control. collects all appropriate data and puts it into a standard form. these data are stored on a hard disk and are expected to be analyzed. With arcsight, it is monitored with the help of side applications and with the help of monitoring tool (see arcsight esm).

Cons: The ESM platform is Java. This causes slowness and excessive welding in intensive processes.

Overall: The ArcSight product is seen as one of the leaders and leaders in the Safety Information and Event Management category, according to Gartner's Magic Quadrant report.

ArcSight's approach is to create a single point of communication for observation and control. Gathers all appropriate event data and puts it into a standard form. It collects at a central location for analysis. As a result, the company allows you to easily monitor and, if necessary, take measures. This increases your compliance with your legal requirements and business continuity.

First layer for enterprise SIEM

May 08, 2019
4/5
Overall

3 / 5
Ease of Use

4 / 5
Features & Functionality

3 / 5
Customer Support

5 / 5
Value for Money
Likelihood to Recommend: 8.0/10 Not
Likely
Extremely
Likely

Pros: Ease to perform the intake of virtually any data source.

Cons: The learning curve is very complex and requires specialized personnel

Overall: The current configuration of the platform allows the intake of millions of events and its ability to integrate third-party applications and addons facilitates the availability of a functional SIEM in a reasonable time. However, deepening and getting to have very customized configurations implies...

Good tool for Network Security Monitoring

Oct 02, 2018
4/5
Overall

4 / 5
Ease of Use

4 / 5
Features & Functionality

2 / 5
Customer Support

4 / 5
Value for Money
Likelihood to Recommend: 7.0/10 Not
Likely
Extremely
Likely

Pros: Flexibility and scalability

Third party integrations

Cons: Reporting and searching becomes difficult when data pipe is huge above 10k EPS

Lack of Support

Jun 13, 2019
3/5
Overall

4 / 5
Ease of Use

4 / 5
Features & Functionality

1 / 5
Customer Support

2 / 5
Value for Money
Likelihood to Recommend: 2.0/10 Not
Likely
Extremely
Likely

Pros: The flexibility. I liked that even without good product support, the application was still flexible enough for our team to create work arounds.

Cons: The lack of enterprise support. There are no out of the box connectors for new SSO products like Okta.