Freely subscribe to our NEWSLETTER

Leveraging expertise and insights gained from serving over 1,200 organisations, including clients of MSSP customers, ArcSight Express includes the correlation rules, dashboards and reports that matter in the protection of mid-size organisations. ArcSight Express eliminates the need for in-house security experts to build custom threat detection rules, dashboards and reports as is the norm for customers of other security information and event management (SIEM) products focused on this market segment.

ArcSight Express is tailored to organisations with little in-house security expertise and looking for increased compliance and security at affordable prices and reduced administrative requirements. Many businesses are unable to staff a dedicated security operations centre. In these firms, IT personnel may have multiple roles and cannot afford to dedicate their time to monitoring the network. With ArcSight Express, security incident detection and notification is automated and IT personnel are able to focus on responding to important security incidents.

ArcSight Express includes an ArcSight Express correlation appliance for real-time correlation, an ArcSight Express log management appliance for long-term storage and built-in expert correlation rules, dashboards and reports needed to secure the IT infrastructures found in mid-size organizations. ArcSight Express works with the ArcSight SmartConnector family that collects event data in native format from more than 275 devices and applications, and normalises the data into a common format for correlation and analysis.