The Forrester Wave™: Enterprise Security Information Management, Q4 2006

Forrester evaluated leading enterprise security information management (SIM) vendors across 62 criteria and found that both ArcSight and Symantec had a solid current offering, especially for analysts in the security operations center (SOC), plus a strong vision for where their SIM solutions should fit within the IT ecosystem. Network Intelligence and Consul risk management also offer excellent solutions, especially for those overseeing the security program. Intellitactics, Novell, and netForensics are strong offerings but exhibit certain weaknesses around product vision and cost. CA, eIQnetworks, and NetIQ have solid feature functionality in some areas of SIM but are lacking in others. Finally, Cisco Systems lacks the breadth required by a SIM but is nevertheless a top-class network monitoring tool.