Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Fortinet FortiNDR comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Detection and Response (NDR)
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Traffic Analysis (NTA) (3rd), Cisco Security Portfolio (7th)
Fortinet FortiNDR
Ranking in Network Detection and Response (NDR)
13th
Average Rating
9.6
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Anton Anton - PeerSpot reviewer
Network detection enhances security while seamless integration boosts utility
I use Fortinet FortiNDR for its Network Detection features, primarily with FortiGate on-premises. However, I do not handle day-to-day operations myself; my team manages the tools. In general, there is no issue with FortiGate in our company Some of the valuable features include FortiGate's Network…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."
"The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration."
"The solution has increased our threat detection rate. Cisco Stealthwatch has not reduced our incident response times. It has not reduced the amount of time it takes us to detect immediate threats. It has reduced false positives."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"It works efficiently for encrypted traffic analysis."
"Another notable feature of Cisco Secure Network Analytics is its Layer 7 visibility, which allows us to monitor and analyze network communications at the application layer."
"The most valuable feature is having visibility into the data segments throughout our network."
"The fact that it can identify down to an IP address of a system that is causing problems, or potentially causing problems, is very valuable."
"Using Fortinet FortiNDR as a bundle is cost-effective, providing a complete package of tools."
"The dashboards are very informative compared to other solutions like Cisco, providing valuable insights into network threats."
 

Cons

"If there was one improvement I’d suggest it would be that it detect traffic through an intranet. The product requires that traffic flow through a managed network device. The product is designed mostly for enterprise environments and not smaller environments or businesses."
"I would like to see more expansion in artificial intelligence and machine learning features."
"Many of these tools require extensive on-premises hardware to run."
"The expensive nature of the tool is an area of concern where improvements are required."
"We haven't seen ROI."
"It's too complicated to install, when starting out."
"Cisco Stealthwatch can improve by having bundled packages for popular add-ons. It would be a lot easier for people implementing it, have let's say a better way to use the product."
"I would like to see a hybrid solution that can work without being connected directly to the internet for those destinations."
"There is room for improvement in third-party integrations, particularly with other vendors like Check Point and Palo Alto."
"I would like to see the inclusion of sandboxing in the bundling. Currently, sandbox is not included in our package."
 

Pricing and Cost Advice

"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"Licensing is done by flows per second, not including outside>in traffic."
"Our fees are approximately $3,000 USD."
"The licensing costs are outrageous."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"It has a subscription model. There is yearly support, and there is also three-year support. It depends on what the customers want."
"Licensing is on a yearly basis."
Information not available
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
29%
Financial Services Firm
12%
Government
9%
Manufacturing Company
7%
Computer Software Company
21%
Manufacturing Company
10%
University
9%
Marketing Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
What is your experience regarding pricing and costs for Fortinet FortiNDR?
Fortinet FortiNDR is considered very affordable compared to Cisco solutions, making it an attractive option for our customers.
What needs improvement with Fortinet FortiNDR?
There is room for improvement in third-party integrations, particularly with other vendors like Check Point and Palo Alto. The integration with third-party firewalls is limited, and expanding this ...
What is your primary use case for Fortinet FortiNDR?
We deploy Fortinet FortiNDR to monitor customer networks and proactively identify any bottlenecks or issues that may arise. This involves analyzing network traffic to detect anomalies and threats, ...
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Information Not Available
Find out what your peers are saying about Darktrace, Vectra AI, Trend Micro and others in Network Detection and Response (NDR). Updated: March 2025.
845,406 professionals have used our research since 2012.