TechValidate Research on Quest Microsoft Platform Management


Quest InTrust Case Study

Medium Enterprise Engineering Company

Introduction

This case study of a medium enterprise engineering company is based on a February 2018 survey of Quest InTrust customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“The greatest benefits of InTrust are its high availability and quick time it takes to obtain necessary information”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Quest InTrust:

  • Need to protect logs from tampering or erasure
  • SIEM tools are too expensive to be used as long-term data stores

Use Case

The key features and functionalities of Quest InTrust that the surveyed company uses:

  • Uses the following SIEM tools in their environment:
    • Splunk
  • Is collecting data from the following systems:
    • Windows (servers and workstations)
    • Linux/Unix (HP-UX, IBM AIX, Solaris)
    • Web Servers
    • DB Server (SQL Server, Oracle)
    • Custom/scripted data source
    • Firewalls (CheckPoint, Cisco PIX)
    • Exchange
    • Proxies (Microsoft ISA, Microsoft Forefront Threat Management Gateway, TrendMicro InterScan Web Appliance)
  • Uses the following systems to analyze InTrust data:
    • Quest IT Security Search
    • Quest InTrust Repository Viewer (Searches and Reports)

Results

The surveyed company achieved the following results with Quest InTrust:

  • Realized the following benefits with InTrust:
    • Stored massive volumes of data in a highly-compressed repository to reduce costs
    • Forwarded log data to their existing SIEM solution for security analytics
  • Reduced storage costs by 61-80% with InTrust’s highly-compressed repository.
  • Collects 150 events per day using InTrust.
  • Sends 100 events per day to their SIEM solutions.
  • Total size of their InTrust repositories is 2.




About This Data

This data was sourced directly from verified users of Quest Microsoft Platform Management by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on Quest Microsoft Platform Management