No more typing reviews! Try our Samantha, our new voice AI agent.

Aruba IntroSpect vs Cisco Secure Network Analytics comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Aruba IntroSpect
Ranking in Network Traffic Analysis (NTA)
14th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
3
Ranking in other categories
User Entity Behavior Analytics (UEBA) (23rd)
Cisco Secure Network Analytics
Ranking in Network Traffic Analysis (NTA)
5th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
62
Ranking in other categories
Network Monitoring Software (32nd), Network Detection and Response (NDR) (7th), Cisco Security Portfolio (7th)
 

Mindshare comparison

As of November 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Aruba IntroSpect is 3.5%, up from 2.5% compared to the previous year. The mindshare of Cisco Secure Network Analytics is 8.6%, down from 13.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA) Mindshare Distribution
ProductMindshare (%)
Cisco Secure Network Analytics8.6%
Aruba IntroSpect3.5%
Other87.9%
Network Traffic Analysis (NTA)
 

Featured Reviews

Marko Pirc - PeerSpot reviewer
IP Network Engineer at a computer software company with 1,001-5,000 employees
Key features are roaming, application control and the firewall
We are partners of Aruba as well as sellers and customers. My job in the company is IP network engineer.  The roaming is a feature that works very well. In addition, the application control and firewall features are very good. These are all important features and make the product a valuable one.…
Muhammad Harun-Owr-Roshid - PeerSpot reviewer
CEO at BRIGHT-i SYSTEMS LIMITED
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I haven't heard of any issues with stability."
"The most valuable feature is the end-user monitoring, and if there is any abnormal behavior on the machine, the administrator will be alerted."
"Roaming feature, application control and firewall features."
"The roaming is a feature that works very well, and the application control and firewall features are very good, making the product a valuable one."
"Being able to see the actual data flows transiting the network versus what we had planned is a great sanity check for our overall design planning."
"Most of the engineers I've worked with have been really good. Very knowledgeable and easy to work with."
"This product alleviates the day-to-day headaches for us, in regards to metrics."
"Stealthwatch increased our threat detection rate a little bit, as well as our incident response time."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"We use it to monitor for any anomaly behavior and analyze results."
"Stealthwatch has definitely reduced the incident response time, making troubleshooting now only minutes instead of a couple of hours and increasing our threat detection rate by around 25-30%."
"The network visibility has vastly improved for the organizations that I assist with their services."
 

Cons

"The dashboard could be simplified. You don't have a clear cut view and you have to dive deep into the options to gain some understanding."
"Technical support is unfortunately a little slow."
"I would like to see improvements made to the dashboard, where you can get the information with a simple click."
"The packet analyzer needs improvement."
"The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers."
"One area that could be improved in SNA is the integration with Cisco ISE for user and session details, which currently requires additional setup."
"There's a lot of traffic on our network that we don't see sometimes."
"I would like to see it better organized when I'm looking at it, so I would prefer it to be more clean and structured, making it easier to use."
"The configuration of the solution was quite complex."
"Cisco Stealthwatch has increased the administrative time required just to get everything up and running smoothly."
"It's not great as a standalone solution."
"There could be better integration on the programming side, which uses Python. StealthWatch could provide a template for Python to manage the switches. For example, it would be nice if StealthWatch bounced a port automatically it detected something anomalous."
 

Pricing and Cost Advice

"The license is based on the number of users. The evaluation license is free, you can download it from the website and try it out first."
"​Licensing is done by flows per second, not including outside (in traffic)."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"The tool is not cheaply priced."
"The licensing costs are outrageous."
"NetFlow is very expensive."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"Our fees are approximately $3,000 USD."
"The pricing for this solution is good."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
10%
Financial Services Firm
10%
Construction Company
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise7
Large Enterprise52
 

Questions from the Community

What is your experience regarding pricing and costs for Aruba IntroSpect?
Aruba Introspect has two licenses - advanced and standard. While we found the price of the advanced license to be a bit high, the standard license is reasonably priced and costs less than half the ...
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...
What needs improvement with Cisco Stealthwatch?
Several features often look very promising during evaluation or implementation but end up being used only lightly in day-to-day operations. Advanced reporting and scheduled compliance reports look ...
What is your primary use case for Cisco Stealthwatch?
My main use case for Cisco Secure Network Analytics has been network visibility and anomaly-based threat detection within the enterprise environment. In security operations and VAPT-related activit...
 

Also Known As

IntroSpect
Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
 

Overview

 

Sample Customers

Sage Hotel, Centara Hotels and Resorts, Asda, The Dolder Grand,
Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Find out what your peers are saying about Aruba IntroSpect vs. Cisco Secure Network Analytics and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.