Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs DX Performance Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 10, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Monitoring Software
33rd
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
61
Ranking in other categories
Network Traffic Analysis (NTA) (5th), Network Detection and Response (NDR) (8th), Cisco Security Portfolio (7th)
DX Performance Management
Ranking in Network Monitoring Software
55th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Infrastructure Capacity Planning (2nd), DX NetOps (2nd)
 

Mindshare comparison

As of October 2025, in the Network Monitoring Software category, the mindshare of Cisco Secure Network Analytics is 1.2%, down from 1.4% compared to the previous year. The mindshare of DX Performance Management is 0.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Monitoring Software Market Share Distribution
ProductMarket Share (%)
Cisco Secure Network Analytics1.2%
DX Performance Management0.3%
Other98.5%
Network Monitoring Software
 

Featured Reviews

Muhammad Harun-Owr-Roshid - PeerSpot reviewer
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.
Sandip Kheni - PeerSpot reviewer
The vertical database loads faster than any other product available
We experience disconnections between the solutions own components. In the last five years, there have been many intermittent connection issues with the four components and we still don't know the reasons. The solution has issues when loading groups that have been created in the application interfaces. It would be nice to have a mobile application. In the current industry and technical word, the mobile phone is the only thing that is always in your hands. Other Broadcom products have mobile applications but the solution doesn't offer one. It would be great to view device parameters and view or download graphs from a mobile device.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is its alerts and dashboard."
"Cisco Stealthwatch provides the solutions analytics and threat detection capabilities that I am looking for. It has also improved the network visibility of our organization."
"The most valuable features of this solution are its reporting and mitigation capabilities."
"It has definitely helped us improve our mean time to resolution on network issues."
"From a security standpoint, it is just seeing pockets as well. Visibility is very key for us."
"The fact that it can identify down to an IP address of a system that is causing problems, or potentially causing problems, is very valuable."
"From what I understand, you can encrypt and unencrypt traffic moving in transit. This is one of the features that we liked about it."
"The most valuable feature of this solution is data hoarding because it catches threats on a frequent basis that we had no idea of."
"What is most useful is visibility."
"Scalability is the reason we bought the product to begin with. It was designed from the ground up for carrier-grade services, and we are in effect a MSP ourselves. So we were really interested in looking at something to be able to handle the multi-tenancy and scale as large as possible. This was the only solution that we really considered at that level."
"You can have thousands of devices inside and hundreds of thousands of interphases without a problem."
"When we deployed it, right out of the box we were able to stand up Performance Management within two weeks, in our production environment, with full discovery and relevant information, actual information, that we could use in our command center, our 24/7 operations center."
"The out-of-the-box dashboards are valuable, in terms of being able to visualize performance data in ways that we haven't in the past."
"I can get it to run a report showing, for instance, what root drives are in the critical range in terms of being full, like 90 percent full, and disseminate that information to the other areas of the organization."
"There is a good amount of vendor certification which comes with the product. That's all factory-loaded, no need to load any custom-made files. Most of the metrics are calibrated and captured from the devices based on the defaults available from vendor certification."
"The capability where not only the traditional SNMP information is captured but also the netflow data; who is consuming the data on the WAN, and voice-related information, is helpful. The voice quality makes it very easy for first- and second-line operators to see where the issue is, and who is impacted."
 

Cons

"Some of our customers find this solution to be a little bit tough because they don't understand how to configure and use it."
"One thing I would like to see improved is if it could automatically be tied through ISE, instead of you having to manually get notifications and disable it yourself."
"It is time-consuming to set it up and understand how the tool works."
"It hasn't really improved our direct detection rate but it has definitely reduced our incident response time as we wouldn't have been able to detect threats or immediate risks without this solution."
"Stealthwatch is still maturing in AI. It uses artificial intelligence for predictions, but AI still needs to mature. It is in a phase where you get 95% correct detection. As its AI engine learns more, it will become more accurate. This is applicable to all the devices that are using AI because they support both supervised and unsupervised machine learning. The accuracy in the case of supervised machine learning is dependent on the data you feed into the box. The accuracy in the case of unsupervised machine learning is dependent on the algorithm. The algorithm matures depending on retrospective learning, and this is how it is able to detect zero-day attacks."
"Many of these tools require extensive on-premises hardware to run."
"If there was one improvement I’d suggest it would be that it detect traffic through an intranet. The product requires that traffic flow through a managed network device. The product is designed mostly for enterprise environments and not smaller environments or businesses."
"The initial setup is complex, as there is a lot to configure."
"Since we are out of registered IP space, we are moving to ipv6 and we expect our vendors to move with us, and they have not delivered yet."
"For CA PM, there should be a way of easily migrating the reports coming from eHealth going to CA Performance Center, since CA PC is replacing eHealth."
"​Global synchronization errors. Sometimes it just doesn't finish in time due to the load."
"CA PM Business Hours Filtering: I understand that all monitoring systems have defects. The Business Hours Filtering does not always function properly. Sometimes, when applying business hours to CA PM reports that are 30 or more days in duration, the report generation times out and does not display results. We have other CA PM reports that, when we apply Business Hours Filtering, the report results displayed are the same as without the filter. We are not sure if this is a defect in CA PM or if it is a result of our complex configuration (folder structure) and application of business hours."
"It would be helpful if CA provided online training for its customers."
"CA PM can be complex to build and configure. Creating the folders / groups / sites required establishing many rule sets."
"Install is done as root, which is a security no-no, and the database IO requirements were not stated correctly, which lead to a year of instability."
"It could be a little easier to integrate new metrics."
 

Pricing and Cost Advice

"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"On a yearly basis, licensing is somewhere around $30,000."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"Licensing is on a yearly basis."
"It is worth the cost."
"The tool is not cheaply priced."
"The tool's pricing is based on the number of network devices."
"Do your homework and know how many devices you will be managing out of the gate. Be sure to project what your growth will be each year."
"We purchase a license to use the solution every three years and we have multiple contracts. They have been increasing the price annually. We have a baseline for three years and then we need to pay the difference from the baseline, and we are in the process of negotiating a new price for all the licenses we need. The price overall is affordable."
"I like the licensing model because it's device-based."
"We were looking at other vendors in the marketplace for NetFlow, and CA just beat everybody else in price, cost, and the size to implement. ​"
"They should provide more scalable licensing for the product."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Government
11%
Manufacturing Company
9%
Financial Services Firm
9%
Financial Services Firm
16%
Manufacturing Company
12%
Educational Organization
10%
University
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise7
Large Enterprise52
By reviewers
Company SizeCount
Small Business5
Large Enterprise25
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...
What needs improvement with Cisco Stealthwatch?
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper m...
What do you like most about DX Performance Management?
The tool helps us understand network performance.
What needs improvement with DX Performance Management?
Spectrum's topology view sometimes does not rebuild automatically when a device is shut down and reconnected. It requires manual discovery and rebuilding of the topology, which I hope can be improved.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
CA Performance Management
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Jack Henry & Assoc, Target, CenturyLink, Bell Canada, BrightHouse Networks, Telus, Unisys, Verizon, Southern California Edison, GEICO, Fidelity Investments, Wells Fargo, American Family Insurance Group, Deutsche Telekom AG 
Find out what your peers are saying about Cisco Secure Network Analytics vs. DX Performance Management and other solutions. Updated: September 2025.
868,759 professionals have used our research since 2012.