Erie and Niagara Insurance Association strengthens compliance and log management with Log360

Breaking down the business requirements

As an insurance provider operating under strict regulatory oversight, Erie and Niagara Insurance Association needed a log management solution that could do more than just collect data. Meeting compliance with Regulation 500, a mandate from the New York State Department of Financial Services, was their top priority. This regulation demands long-term data retention and precise event traceability, especially when responding to audits.

The team previously used SolarWinds Log and Event Manager, which offered long-term log retention on paper, however, retrieving historical logs for audits proved to be less straightforward in practice.

The solution: ManageEngine Log360

After evaluating several SIEM tools, including LogRhythm, the team chose ManageEngine Log360 for its usability, functionality, and intuitive interface. While other tools required extensive manual configurations and coding knowledge, Log360 stood out as a GUI-driven, easy-to-use platform that required minimal training and setup. The product's built-in reports, advanced filtering, and real-time dashboards offered the visibility and efficiency the team needed, while also laying the groundwork for seamless compliance audits and long-term log access.

Streamlined implementation and expert support

The IT team was able to implement Log360 with relative ease despite operating in a highly secure and tightly controlled IT environment. The onboarding experience, led by ManageEngine's implementation specialist Afshaan Ahmed, played a crucial role in making this possible. He provided timely support, resolved technical challenges, and guided the team through complex configurations, earning high praise from both Kryman and Jason Falblo.

Outcomes and improvements

Since adopting Log360, the organization has significantly improved its log retention and compliance readiness. Logs are now archived for six years, aligning with Regulation 500's mandates. Though the platform is still in preproduction at the time of this feedback, early outcomes include better usability, reduced administrative overhead, and improved filtering and reporting capabilities. The team also appreciated the flexibility to tailor the interface by hiding irrelevant modules based on technician roles.

While the UEBA module is currently underused due to false positives, the team acknowledges its long-term value as the system learns more about their environment.

About OnboardPro

OnboardPro is a ManageEngine service that provides solution implementation to clients upon request. This service includes the installation and customized configuration of ManageEngine solutions. It enables clients to seamlessly begin work without worrying about the complexities of product installation, deployment, and use. Every client environment is unique and requires additional support beyond the basic installation and standard features. With custom onboarding, clients have the option to engage a team of product experts to manage the installation, implementation, customization, and training based on their business needs.

About Log360

Log360 is a unified SIEM solution with integrated DLP and CASB capabilities that detects, prioritizes, investigates and responds to security threats. Vigil IQ, the solution's TDIR module, combines threat intelligence, an analytical Incident Workbench, ML-based anomaly detection and rule-based attack detection techniques to detect sophisticated attacks, and it offers an incident management console for effectively remediating detected threats. Log360 provides holistic security visibility across on-premises, cloud, and hybrid networks with its intuitive and advanced security analytics and monitoring capabilities.