Cisco Secure Network Analytics Reviews

SMC and FC, though they are components, not features.

Most valuable features are the network maps and server and network response time. Maps is a unique feature which provides logical grouping of different segments of the network with complete visibility and alerting based on a total or protocol base as per defined threshold. So, one can check how many connections to the server and/or on the protocol, and who is consuming the most bandwidth. This is done, while the server and network response time provide quick identification of root cause of slow response from the server.

Provided complete network visibility and made troubleshooting easy.

I have used Cisco Stealthwatch for four to five years: versions 5.0 to 6.22.

Yes. The version with the Dell server had iDRAC problems. Often, it reported iDRAC failure.

No.

Very good.

No, we did not use a different solution.

Straightforward.

Pricing is much higher compared to other solutions.

Yes, SolarWinds.

It is a good product. I don't see any matching product with level of detailed information.

There's nothing like it and a dream to operate, very intuitive. The most valuable feature is NetFlow. The beginning of any security investigation starts with NetFlow data.

Easily identifiable anomalies that you can't see with signature detections.

I am so familiar with the product I would say none. Lancope has always listened to customer input for product enhancements. One update I would like to see is an agent-based client. Currently StealthWatch is network based. A local agent could help manage endpoints.

12 years.

No.

No.

I've known those guys for a long time. They are completely familiar with their product.

No.

Very straightforward. They helped in every step of the installation.

Licensing is done by flows per second, not including outside>in traffic.

I have tried the Sourcefire solution but StealthWatch wins because of ease of use.

Go for it. Also great for your network segmentation project.

I value the feature which enables me to detect devices talking to suspect IPs.

We can now see what is going on in our network.

We need to be able to filter out internal IPs as non-threats.

We have been using the product since 2008.

We did not encounter any issues with stability.

We did not encounter any issues with scalability.

The technical support is good.

We did not use any other solution previously.

The initial setup was relatively easy, though different devices need different configurations for the flow exports.

It is worth the cost.

We evaluated Arbor.

Get it in and see what you can see!