Researching SIMs

From: Alfred Huger (ah@securityfocus.com)
Date: 03/19/02 

Date: Mon, 18 Mar 2002 19:54:14 -0700 (MST)
From: Alfred Huger <ah@securityfocus.com>
To: focus-ids@securityfocus.com

Hey folks,

I am in the process of deciding on a series of SIM products which we will
be integrating one of our products into. However before I decide to
support these products (and which order to support them) I would love to
hear off the record from people who have used them and what their opinions
are.

I'm particularly interested in products that follow the vein of:

ArcSight from ArcSight
e-Sentinel from e-Security
ActiveEnvoy from netForensics
SystemWatch from Open Service
Solsoft NP from Solsoft
NS Control from Ponte
Etc..

I am not exposed to these systems day to day and would rather not make
this decision in a vacuum or solely off marketing testimonials. Any
comments would be deeply appreciated. If I get enough data I will happily
repost to the list.

-al

VP Engineering
SecurityFocus
"Vae Victis"