OpenText is announcing the rebranding of ArcSight IdentityView to ArcSight User Behavior Monitoring (UBM). This name change better conveys the value of the solution, whose features and functionality will remain the same. All ArcSight IdentityView customers with active support contracts are eligible to get the latest version of ArcSight User Behavior Monitoring v24.2 (v2.7) which is projected to release on April 30, 2024. New product documentation will be published at that time confirming the name change. To our current IdentityView customers, OpenText appreciates your business and looks forward to assisting you with your future software requirements.

What is ArcSight User Behavior Monitoring (formerly known as ArcSight IdentityView)?

In the past, IT security professionals were predominantly concerned with protecting their assets by keeping unauthorized individuals out of their networks. Today, they must continue to protect their assets while granting access to a wide range of different individuals. Full-time and part-time employees, contractors, partners, and customers all require varying levels of access to resources. Managing the proper level of access for all individuals is challenging even in the simplest network environments. The ArcSight User Behavior Monitoring (UBM) solution, an on-premises add-on for ArcSight Enterprise Security Manager (ESM), provides the ability to correlate identity information maintained in your Identity Management System with the events generated in your network. Identity Management Systems provide role-based access controls (RBAC) to protect assets. In Identity Management Systems, access to an asset by an individual user can be provisioned based on the following factors:

• The business or IT role of the user (for example: the DBA role)
• The user's organizational unit (for example: Engineering department)
• The user's employee type (for example: full time)
• Specific access requirements of the user

The ArcSight UBM solution provides the ability to correlate identity information maintained in your Identity Management System with the events generated in your network. This ability means that those network events can be enriched with contextual user information, such as:

• Who is the person that caused the event to be generated?
• What is their business or IT role, or other attributes such as Department and Employee Type?
• Should they have had the right to perform that activity?

The solution works seamlessly with ArcSight ESM to enable greater protection from insider threats with UEBA-like capabilities. It ingests and monitors user behavior, leveraging ArcSight ESM's analytics engine to detect potentially risky activity.

What is coming to ArcSight User Behavior Monitoring in the upcoming release?

The upcoming release of ArcSight User Behavior Monitoring planned for April 30, 2024, will bring newer dashboards and MITRE ATT&CK compatibilities to support a faster, enhanced understanding of security events and their implications.

Is this solution different from ArcSight Intelligence?

Yes. ArcSight Intelligence is a SaaS-based standalone behavior analytics solution that leverages unsupervised machine learning to monitor user behavior, detect anomalies, and uncover insider threats, zero-day attacks, and APTs. ArcSight User Behavior Monitoring is an on-premises add-on to ArcSight ESM that leverages ESM's analytics engine to deliver monitoring capabilities similar to those of a User Behavior Analytics solution (specifics noted above).