OpenText Corporation

ArcSight Enterprise Security Manager (ESM)

Composite Score

7.4 /10

CX Score

7.7 /10

12 Reviews Write a Review

Claim Software

What is ArcSight Enterprise Security Manager (ESM)?

Empower your security operations team with ArcSight Enterprise Security Manager (ESM), a powerful SIEM that delivers real-time threat detection and native SOAR to your SOC.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

ArcSight Enterprise Security Manager (ESM) Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on ArcSight Enterprise Security Manager (ESM).

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

82 Likeliness to Recommend

87 Plan to Renew

80 Satisfaction of Cost Relative to Value

{y}

{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+91 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love ArcSight Enterprise Security Manager (ESM)?

5% Negative

0% Neutral

95% Positive

Pros

Enables Productivity
Unique Features
Client Friendly Policies
Altruistic

Feature Ratings

Average 85

Business Intelligence Tools

100

Data Security and Retention

Correlation

Analytics and Reporting

Scalability and Network Performance

Forensic Analysis Support

Incident Management and Remediation

Security Threat Visibility

Log Collection

Big Data Analytics

Data Enrichment

Vendor Capability Ratings

Average 75

Breadth of Features

Ease of Data Integration

Quality of Features

Ease of IT Administration

Business Value Created

Ease of Implementation

Ease of Customization

Usability and Intuitiveness

Product Strategy and Rate of Improvement

Vendor Support

Availability and Quality of Training

ArcSight Enterprise Security Manager (ESM) Reviews

Rabi Bhushan P.

Role: Information Technology
Industry: Technology
Involvement: IT Development, Integration, and Administration

Validated Review

Verified Reviewer

Submitted Mar 2024

Easy to deploy and manage Easy to view results

Likeliness to Recommend

10 /10

What differentiates ArcSight Enterprise Security Manager (ESM) from other similar products?

It is having good correlation engine for making beautiful dashboards for events

What is your favorite aspect of this product?

Customise the dashboard with multiple events and type of correlation between events

What do you dislike most about this product?

Manually updating the use cases no advance use case is available with product

What recommendations would you give to someone considering this product?

Yes they can opt for having good correlation of events and results

Pros

Reliable
Performance Enhancing
Efficient Service
Inspires Innovation

Goodness C.

Role: Information Technology
Industry: Finance
Involvement: IT Leader or Manager

Validated Review

Verified Reviewer

Submitted Oct 2023

Fantastic, reliable.

Likeliness to Recommend

9 /10

What differentiates ArcSight Enterprise Security Manager (ESM) from other similar products?

1. Scalability: ArcSight ESM is known for its scalability, making it suitable for organizations of various sizes, from small and medium businesses to large enterprises. It can handle a high volume of data and events, making it a robust choice for organizations with diverse IT environments. 2. Real-Time Correlation: ArcSight ESM offers advanced real-time correlation capabilities that allow security teams to detect and respond to threats as they happen. It can correlate and analyze a wide range of security events, logs, and data sources to identify patterns and anomalies.

What is your favorite aspect of this product?

1. Customizable Dashboards: Users can create customized dashboards and reports tailored to their specific security monitoring and reporting needs. This flexibility allows security teams to focus on the most critical information. 2. Threat Intelligence Integration: The platform integrates with external threat intelligence feeds, enriching security event data with contextual information about known threats and vulnerabilities.

What do you dislike most about this product?

1. Cost: The total cost of ownership for ESM, including licensing, hardware, and personnel, can be high. Smaller organizations with limited budgets may find it challenging to justify the costs associated with ESM. 2. Deployment Time: Deploying ESM can take time, especially for large enterprises with complex IT environments. The initial setup and configuration may require a significant investment in terms of time and effort. 3. Alert Fatigue: ESM can generate a large volume of alerts and events, potentially leading to alert fatigue within security teams. It's crucial to fine-tune the system to prioritize and reduce false positives.

What recommendations would you give to someone considering this product?

1. Determine Your Budget: Understand the total cost of ownership for ESM, which includes licensing, hardware, personnel, and ongoing maintenance costs. Ensure that your budget aligns with the resources required for the successful deployment and operation of the platform. 2. Evaluate Expertise: Assess your organization's in-house expertise in cybersecurity and SIEM solutions. Consider whether you have the necessary personnel with the skills to configure, manage, and optimize ESM effectively. Training may be required.

Pros

Transparent
Helps Innovate
Reliable
Performance Enhancing

Cons

Slower Product Innovation
Charges for Enhancements

Shubham T.

Role: Operations
Industry: Technology
Involvement: End User of Application

Validated Review

Verified Reviewer

Submitted May 2023

A good competitor

Likeliness to Recommend

8 /10

What differentiates ArcSight Enterprise Security Manager (ESM) from other similar products?

So the possibility to have functionality like active lists which inturn can be used to used to avoid redundant alerts is one of the best functionality I feel which makes ArcSight Enterprise Security Manager different from other products.

What is your favorite aspect of this product?

The Favourite aspect is the ease of use of the product and the amazing functionality to create co-relation rules from multiple log sources is one of the best aspect of ArcSight SIEM.

What do you dislike most about this product?

There is nothing as such that I dislike. however, if there can be improvements in the accessibility speeds of the logs then it could be really beneficial for the analysts.

What recommendations would you give to someone considering this product?

Yeah if you are someone who is really looking to start their career as a security analyst or willing to get into the SIEM Analyst or SOC operations role then ArcSight could be one of the best options for you as it has that ease of use that can really quickly make you fall in love with the SIEM tool.

Pros

Efficient Service
Continually Improving Product
Performance Enhancing
Enables Productivity

ArcSight Enterprise Security Manager (ESM)

What is ArcSight Enterprise Security Manager (ESM)?

Company Details

Need Assistance?

ArcSight Enterprise Security Manager (ESM) Ratings

82 Likeliness to Recommend

87 Plan to Renew

80 Satisfaction of Cost Relative to Value

Emotional Footprint Overview

+91 Net Emotional Footprint

How much do users love ArcSight Enterprise Security Manager (ESM)?

Pros

Feature Ratings Average rating of all product features, some of which may not be shown below

Business Intelligence Tools Includes planning and optimization, centralized console, insight into usage, resource utilization and activities, and BI security.

Data Security and Retention Access controls to system data, protection of SIEM data, system access monitoring, external storage integration, and efficient data compression.

Correlation Analyze real-time telemetry and detect attacks and other activities of interest

Analytics and Reporting Includes historical & real-time dashboard visualizations, detailed & summary reporting and easy data extraction for data analysis.

Scalability and Network Performance The product's ability to scale horizontally and vertically, while employing various methods to reduce any latency impacts from CAN activities.

Forensic Analysis Support Query capabilities with pre-built and custom drill down, pivot, and parsing; includes export functions and event session reconstruction.

Incident Management and Remediation Detection and incident management with preset and customizable remediation capabilities, integration into workflow systems, and optional automatic remediation.

Security Threat Visibility Integration with security technologies for monitoring, incident analysis, and data enrichment to enable tracking and analysis of related events.

Log Collection Collection from firewall and network logs, IDS logs, Windows server logs, web server logs, and various syslog sources.

Big Data Analytics Use of big data analytics through integration into purpose-built big data tools or native capabilities, incorporating advanced security methods.

Data Enrichment Includes the enhancement of the value of internally held data by appending related attributes from external sources .

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

ArcSight Enterprise Security Manager (ESM) Reviews

Rabi Bhushan P.

Easy to deploy and manage Easy to view results

Likeliness to Recommend

Pros

Goodness C.

Fantastic, reliable.

Likeliness to Recommend

Pros

Cons

Shubham T.

A good competitor

Likeliness to Recommend

Pros

Feature Ratings

Business Intelligence Tools

Data Security and Retention

Correlation

Analytics and Reporting

Scalability and Network Performance

Forensic Analysis Support

Incident Management and Remediation

Security Threat Visibility

Log Collection

Big Data Analytics

Data Enrichment

Vendor Capability Ratings

Breadth of Features

Ease of Data Integration

Quality of Features

Ease of IT Administration

Business Value Created

Ease of Implementation

Ease of Customization

Usability and Intuitiveness

Product Strategy and Rate of Improvement

Vendor Support

Availability and Quality of Training