TriGeo Security Information Manager (SIM)
Strengths: Powerful SIEM with a lot of functionality right out of the box.
Weaknesses: None that we found.
Verdict: For its power and simplicity, we rate this one our Best Buy.
SummaryThe TriGeo Security Information Manager (SIM) is a very powerful tool that can provide a deep look into network events and system logs with granular controls. This appliance incorporates log management and event correlation with some added functions, such as an onboard intrusion detection system and instant active response to potential threats or suspicions activity.
We found this tool quite easy to install and configure. The appliance itself takes just a few minutes to get connected to the network with an IP address. After the solution is up and running, it can be accessed through the management console application. This management console is well organized with a very clean layout that we found to be easy and intuitive to navigate around in.
This appliance is a true powerhouse when it comes to looking into events and event correlation. Most of the heavy lifting is done by the correlation engine, which can provide real-time event correlation and processes these correlations against several hundred prebuilt correlation rules for an active response with almost no need for user interaction. The appliance also includes an easy-to-use correlation rule builder just in case there is need for customization.
Documentation included installation and user guides in PDF format. The installation guide covers not only how to install the appliance itself, but also how to install the management console and deploy agents. The user guide takes over from there and includes a great amount of detail on configuring and managing the appliance and using advance features. We found both of these guides to be well-organized with many screen shots and step-by-step examples.
TriGeo provides the first year of technical support as part of the purchase price of the product with an ongoing cost of 20 percent of the purchase price per year. Support includes 12/5 phone and email technical support, as well as product updates and upgrades. Users also have access to an online support portal with a knowledge base and many other support resources.
At a price just shy of $20,000, we find this product to be an excellent value for the money. The TriGeo SIM provides a lot of easy-to-use power right out of the box at a reasonable price.