3 out of 5.0, Reviewed Jun 13, 2016
System is easy to use but the personnel at the vendor changed a lot, which made communication difficult and delayed getting it deployed.
Make sure you have DNS logs, as many of the things that are detected trace back to a proxy IP and not the end system IP, which can only be found by digging through DNS logs.
Now that it's in, it does a good job of identifying events and live help takes a first stab at assessing the risks.
Communication from the vendor!
Make sure the transition from relationship manager to relationship manager was streamlined.
Get a better understanding/commitment from the vendor on who and how the deployment would go.
Basic IDS functionality for now and it does the job well.