ArcSight Delivers SIEM to Mid Market Customers

Published: April 21, 2009

by Alex Woodie

ArcSight yesterday announced a scaled-down, pre-configured version of its security information and event management (SIEM) appliance designed for mid size companies. The vendor is calling its new solution, ArcSight Express, a "security expert in a box."

Before the launch of ArcSight Express, the Silicon Valley firm ArcSight sold several products under its SIEM umbrella, including an Enterprise Security Management (ESM) product that's geared toward security, a log management appliance, and various connectors for gathering log data from nearly 300 applications and platforms, including i OS (OS/400).

While the sophisticated (and expensive) SIEM products proved capable in the hands of enterprises, the technology was too much for the average mid market organization to handle. In many medium-size companies, ensuring security is just one of the responsibilities that falls to the systems administrator. Without the resources to hire a dedicated security expert to put together a comprehensive detection system, the ArcSight products were simply out of reach for mid-market organizations.

ArcSight hopes to change all that with the new Express appliance. Instead of requiring users to customize their own setups, ArcSight Express is delivered with many settings, correlation rules, dashboards, and reports already configured, eliminating the need for an in-house security expert to do it for them.

The new Express packaging leverages ArcSight's experience with hundreds of installations at the world's largest companies, says ArcSight CEO Tom Reilly. "We are now taking our years of experience with advanced deployments and packaging a solution to address the needs of a much broader market segment," he says in a press release. "For mid-size business with constrained resources and budgets, ArcSight Express acts as their security expert, removing the need for custom rule development, and automates security operations, eliminating the need for a fully staffed 24x7 SOC [security operations center], yet providing the automated monitoring needed around the clock."

The Express setup includes two appliances--one for log management and one for security event correlation. The products also work with the SmartConnector family of data collectors. Pricing starts at $45,000. For more information, visit www.arcsight.com.

RELATED STORIES

Real Time Forensics from Log Data? ArcSight Says It's Got It

ArcSight Expands Log Management Offerings

                     Post this story to del.icio.us
               Post this story to Digg
    Post this story to Slashdot