Review: TriGeo SIM

For: Easy to set up and use; clear reporting, reasonable price.
Against: Though the Rule Builder is easy to use, custom rule building is a little time-consuming.
Verdict: The TriGeo box is a powerhouse. It is one of the few products we've tested over the years that actually lives up to its hype. The ability to customize for various environments is a big plus.

From the time it is plugged in, all the way through day-to-day management, TriGeo SIM is simple to use. The appliance comes with many rule sets already preconfigured for most security situations, while setting rules for specific environments is made easy by the Rule Builder. This tool uses different modules with rule parts that you just drag and drop into the right place and the rule is created. Filters also are easy to configure using the same process. The main console interface is simple and intuitive to navigate as well.

This appliance is loaded with features, including real-time log analysis, pre-built correlations,and IPS/IDS. It also boasts a unique feature called USB Defender, which logs and alerts if a USB storage device is plugged into any device on the network.

The TriGeo appliance analyzes and reports information in various clear and easy-to-read charts and graphs. In addition to more than 220 stock reports, it also has the ability for the user to customize reports using the built-in Crystal Reports Engine. The TriGeo has a wide variety of log correlation and analysis tools that make it a fully comprehensive security device.

Documentation for this product is provided on the installation CD. Included are several manuals that cover all aspects of product installation and configuration. The main reference is the product installation and reference guide, which has well-detailed information for product set-up and rule configuration. The documentation also includes many step-by-step processes with screenshots and images of menus and wizards. All documentation is easy to read, understand and follow.

TriGeo offers support both by phone and email. We also worked with members on the support team via Webex, and the staff were knowledgeable and easy to work with. Also, by using the Webex system, they were able to troubleshoot all problems quickly and efficiently. At around $19,840 as tested, this appliance is an easy to afford SEM tool for mid- to large-scale companies and corporations.

The easy set-up, configuration and analysis of reports helps cut down on cost of training personnel while still delivering accuracy and performance.

This product offers excellent value both in the way of cost and performance.

eventincidentmanagementsecuritysemsim