There are different market players when it comes to Threat Management / Log Management /Compliance Management;
It ranges from netForensics, Cisco’s CS-MARS, LogLogic, netIQ, ArcSight and so on…
STRM is Juniper’s entry to the log management market offering solutions which along with log management provides some Network Behavior Analysis as well with the event correlation. Its been beaten to death as to which solutions is better but I still feel every log management solution has a relation to the type of network we’re looking at (I’m sure I won’t be alone in this one)! Simple – How would be HIPAA looked at in a R&D center – What use is there for CPU cycles invested?
Put aside the vendor competition, STRM basically would support any device which can send Syslog events to it and correlate it – ranging from Juniper’s SSL VPN / Firewalls to Windows Machines. It has also got the flow going (Netflow / JFlow etc…)
