Final thought: If Broadcom invests in cloud scalability and log parsing, Symantec could dethrone the big players. But as of today, it remains the best "second SIEM" you'll ever buy. Do you run Symantec in your SOC? Have you migrated away? Share your experience in the comments.
In a modern SOC, you wouldn't replace your log aggregator with Symantec. Instead, you would use it as a next to your primary SIEM. Feed the alerts from Symantec into your main SIEM, but keep Symantec as the "video replay" system for deep investigation. Final thought: If Broadcom invests in cloud scalability
(10/10 for packet forensics, 4/10 for cloud log management). Have you migrated away
Is it a true SIEM? And more importantly, can it compete? Here is an operational evaluation of Symantec for SIEM. To understand Symantec’s SIEM, you must understand its heritage. It came from Blue Coat (acquired by Symantec in 2016, then absorbed by Broadcom). Instead, you would use it as a next to your primary SIEM
Powered by moviekillers.com.com