Sentinel and USM Anywhere are leaders in the cybersecurity solutions category. Sentinel stands out with its advanced threat analytics and Microsoft integration, while USM Anywhere shines due to its affordability and deployment ease.
Features: Sentinel's key features include robust threat visibility, innovative KQL query capabilities, and seamless Microsoft tool integration. USM Anywhere provides centralized visibility with host-based intrusion detection and a built-in vulnerability assessment package, offering users an all-in-one security experience.
Room for Improvement: Sentinel needs better integration with vendor-specific devices and cloud systems and a more intuitive dashboard interface. USM Anywhere should enhance its search and reporting modules and streamline third-party device integration. Both systems could benefit from refining their correlation engines.
Ease of Deployment and Customer Service: Sentinel supports diverse deployments, including on-premises and hybrid clouds, and generally provides robust customer support. USM Anywhere is primarily cloud-based but offers some on-premises flexibility. Users appreciate its easy setup and generally positive support experience, although complex configurations can present challenges.
Pricing and ROI: Sentinel is a premium option with a cost-effective pay-as-you-go model suitable for large enterprises. USM Anywhere offers competitive pricing and flexible licensing for small to mid-sized businesses, delivering strong ROI with its comprehensive feature bundle.
Customers see ROI as they save on staff and other resources.
The customer support for Sentinel is very good; any tickets logged will be answered immediately within the given timeframe.
USM Anywhere faces scalability issues because of a 60 TB limit.
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks.
Price is always a consideration, so the price would be nice if it were lower.
The pricing is amazing and really cheap.
They nearly always bill it in dollars, so if it can be billed in our currency, that would be helpful and fixed in our currency.
My experience with pricing, setup cost, and licensing shows that while it is a little on the higher side, since it is part of a package for all Microsoft products, I feel it is a better choice comparatively than other SIEMs in the market.
The 365-day block query is a major feature.
In terms of metrics showing how Sentinel has helped, as part of log filtering, we have reduced around thirty to thirty-five percent of false-positive incident creation.
Sentinel's best features include that it's a very easy product to use.
| Product | Mindshare (%) |
|---|---|
| Sentinel | 2.7% |
| USM Anywhere | 1.5% |
| Other | 95.8% |
| Company Size | Count |
|---|---|
| Small Business | 65 |
| Midsize Enterprise | 29 |
| Large Enterprise | 25 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 3 |
| Large Enterprise | 8 |
USM Anywhere provides centralized logging, vulnerability scanning, and real-time event correlation, enhancing cybersecurity management and compliance with standards like PCI DSS and ISO 27001. It integrates smoothly with third-party applications and offers diverse, flexible deployment options.
USM Anywhere stands out for its integrated network and host IDS, asset management, and intuitive deployment that enhances efficiency. The platform simplifies security tasks by offering a comprehensive view that aids in compliance and aligns with security regulations such as PCI and GDPR. Despite its strengths, areas like IPv6 support, custom rule creation, and reporting require attention. Users note awkward reporting features and limited integration options. Enhancements are needed in threat detection and vulnerability scanning for faster response times and better support.
What are the key features of USM Anywhere?
What benefits and ROI can users expect?
In industries such as cloud services and enterprise security, USM Anywhere is used extensively for SIEM, managing logs, and detecting security incidents. It supports AWS environment monitoring, providing managed services to clients and facilitating compliance with standards like PCI and GDPR.
Sentinel is a robust platform offering seamless native integration, enhanced security through transactional data, and a user-friendly interface reminiscent of Microsoft Windows. Its capabilities in threat detection, monitoring, and business intelligence integration make it an attractive choice for organizations.
Sentinel simplifies security management with its advanced features, including the Kusto Query Language and automation abilities that reduce the complexity of coding tasks. The platform's correlation engine allows for efficient rule generation, while its threat visibility and intelligence features offer preparation against risks. Advanced hunting queries, anomaly dashboards, and scalability options enhance its utility. Users appreciate its seamless connections with Microsoft tools and ability to improve threat detection through cloud and business intelligence integration. However, enhancements could improve documentation on security aspects, simplify dashboards, and optimize drag-and-drop features. There are suggestions for better device integration, a shift to web interfaces, and improved customization options, although some users face challenges with Unix scripting.
What are the most important features of Sentinel?Sentinel finds application across sectors for logging, security event monitoring, and integration with tools like Microsoft Defender for Endpoint. Users from industries such as government and academic institutions leverage its advanced SQL query support for customized responses, enhancing security measures with AI capabilities in diverse environments.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
