Overview

Your QRadar SIEM deployment options

SaaS
QRadar SIEM is available as a SaaS offering. This QRadar SIEM deployment option comes with the advantage of the IBM team being on your side to run and care for the infrastructure. This enables you to focus on reviewing anomalous conditions and patching important vulnerabilities.  IBM professionals manage the IT infrastructure, so you don’t have to worry about the implementation of patches or updates.

Software
QRadar SIEM is available as both hardware and virtual appliances that can be deployed on-premises or on the cloud of your choice. These options are great for organizations who desire to have detailed control over their IT infrastructure.

Managed service
IBM Security X-Force® Threat Management Services combine the best tooling, skilled security analysts, and threat hunters to monitor endpoints, network, and applications for threats. These managed services help you respond to incidents so you to focus on your business.

 

How does pricing work?

Your pricing options

The Usage model for our SIEM is based on Events per Second (EPS) and Flows per Minute (FPM). EPS is determined by the number of log events ingested per second, while FPM is determined by the network communications per minute. Licensing with this metric is available for hardware appliances, virtual appliances, and SaaS model environments.

The Enterprise model for our SIEM is based on the number of Managed Virtual Servers (MVS) used. MVS is determined based on the count of all physical, virtual, and cloud servers in the environment. Licensing with this metric enables you to ingest network behavior and unlimited log events.

What licensing models do you offer?

For an on-premise offering, we offer a choice of subscription or perpetual models.
For a SaaS deployment, we offer only a subscription model.

Features included

IBM X-Force integration / Threat Intelligence feed

This intelligence feed is a cloud-based threat intelligence sharing platform enabling users to rapidly research the latest security threats, aggregate actionable intelligence, and collaborate with peers. Integration of this threat feed data is included at no extra cost for IBM QRadar SIEM clients.

IBM X-Force Exchange / Application Exchange

Use the IBM X-Force Exchange (link resides outside ibm.com) to download apps to extend and enhance your QRadar deployment options with new data and ready-to-go use cases. A QRadar app is a means to augment and enrich your current QRadar system with new data and functionality. You can download and install other shared apps that are created by IBM, its Business Partners, and other QRadar customers.

With the exception of subscription-based app QRadar Advisor with Watson (link resides outside ibm.com), all applications are available at no extra cost for IBM QRadar SIEM clients. Two of the most popular applications are: