Cofense Vision stores emails offline and provides threat hunting analytics. Cofense Vision allows the user to search and quarantine emails in minutes — across an entire organization, and is designed to provide threat hunting at speed.
N/A
Sumo Logic
Score 9.4 out of 10
N/A
Sumo Logic is a log management offering from the San Francisco based company of the same name.
The kind of granularity Cofense Vision provides in [...] configuring the policies is just amazing and not limited [to] other solutions. It reduces the efforts of the administrator to create the policies. Threat hunting IOC Signatures can be stored on on-premises, AWS, Azure …
Apple of Discord is the pricing as we were looking for an email security tool in reasonable pricing and Barracuda was undoubtedly efficient in action and was compatible with our business but it was highly expensive and then we made up our mind for another tool and Cofense …
We have utilized Avanan for the same purpose we are using Cofense [Vision] right now but we were highly disappointed with Avanan and the rate of that software made us feel like that it should be the best anti-phishing tool but it went opposite and we had to suffer a lot because …
We used Trustifi for a jiffy and it was effective against
obsolete viruses and was not effective against attacks such as phishing and it
wasn’t fulfilling its claims. So, we decided to move to an anti-phishing email
Agari Phishing Defense is extremely easy to use software, with an immediate response capacity in the presence of phishing, but Cofense Vision is a tool with flexible implementation and a great capacity to adapt to the needs of each company, as well as having a high level of …
Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when …
It's cheaper, by an ungodly number of dollars. Splunk is insanely expensive. But Splunk is also incredibly fast and efficient. Splunk also holds information indefinitely (forever) so if I wanted to see if a specific end-user clicked a very specific button in 2012, I can search …
We felt the features were comparable and Sumo Logic offered a better price. This was our first log aggregation tool so we don't have a lot of insight for competing products. I speak with many others specifically regarding splunk and it seems to be comparable in many ways except …
Provides the same basic solution as Splunk as it is a central log aggregator. The main difference for us is hosted or cloud vs. on-premise. The other large difference for us was the central management of the collectors. Sumo provides a single view of all the collectors, …
For use this was a better overall solution for our needs. Between reporting, access and the ability to support an external two-factor solution for controlled access.
Comparing them to Logstash and other open source tools, Sumo Logic is a clean, already well built tool that is ready to ingest and analyze data instantly. Other open source tools take a lot of time to build and manage; and their graphs/dashboards are almost always lacking. Sumo …
We had used Splunk previously. Sumo Logic defeats them when it comes to cost, including the costs that would normally come with supporting/managing/patching/upgrading your own infrastructure and storage. Those were wins, but especially the real-time CDN integrations due to Sumo …
It is well suited in environments where there is a high mail traffic to handle. [Cofense] Vision basically journals the exchange server and keeps a copy of the mail received in the environment. Really beneficial to revoke and quarantine the mail reported by one user, but footprint is there in other mailboxes as well. Less appropriate in the cases where there is no proper segregation of duties within the organization. As it is possible to see contents of the mail. Only authorized personnel should be able to use it.
SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you
Log Aggregation and uploading. The architecture for Sumo Logic makes a great deal of sense and works very well.
Automated analysis. It still impresses me how well a newly uploaded log can be broken into intelligent parts, then searched and sorted using their tools.
Dashboards. It might not be what YOU will need as an IT admin, but you can give access to these dashboards easily to business users who love that kind of stuff. Most other types of (monitoring / alerting) tools, for no apparent reason, lack this feature.
Reporting, monitoring, and graphing. Given, you need to have useful log generation for an application or service as a prerequisite for sumo logic to be able to gain use, once it has it is an amazingly powerful tool.
Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.
I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.
I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.
Agari Phishing Defense is extremely easy to use software, with an immediate response capacity in the presence of phishing, but Cofense Vision is a tool with flexible implementation and a great capacity to adapt to the needs of each company, as well as having a high level of integration with other software and its great capacity to carry out searches, detection and give rapid responses to incidents that is why we have chosen Cofense Vision.
We had used Splunk previously. Sumo Logic defeats them when it comes to cost, including the costs that would normally come with supporting/managing/patching/upgrading your own infrastructure and storage. Those were wins, but especially the real-time CDN integrations due to Sumo Logic's collaborations with other vendors. We had spoken to Logentries and discovered that many of the cons we found with Sumo Logic seemed to have been resolved in their product. Their pitfall was that, at the time, Logentries did not have the ability to get real-time log ingestion from our CDN. They said they had a solution, which was scripted, but we had not evaluated/tested. Logentries also did not have a User / RBAC REST API, and are nowhere near the level of compliance that Sumo Logic had (https://www.sumologic.com/press/2015-02-19/sumo-logic-successfully-completes-pci-data-security-stand...). In the end, I believe Logentries and Sumo Logic would be two good vendors to get involved in a bake-off