Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs IronNet Collective Defense Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Traffic Analysis (NTA)
4th
Ranking in Network Detection and Response (NDR)
8th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (30th), Cisco Security Portfolio (7th)
IronNet Collective Defense ...
Ranking in Network Traffic Analysis (NTA)
14th
Ranking in Network Detection and Response (NDR)
25th
Average Rating
0.0
Reviews Sentiment
6.8
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Network Detection and Response (NDR) category, the mindshare of Cisco Secure Network Analytics is 7.2%, down from 10.2% compared to the previous year. The mindshare of IronNet Collective Defense Platform is 0.2%, down from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
reviewer1468230 - PeerSpot reviewer
Easy to use, stable, and easy to install
We use this solution for the Ministry of Defense and the special agencies It adds value to our existing platform, and therefore our system becomes more important for the customer. The most valuable feature is the ease of use and the full reach of services. It's pretty decent, and I don't see…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Provides easily identifiable anomalies that you can't see with signature detections."
"Being able to identify specific date closed across the network is invaluable."
"The most valuable features of this solution are the logging, keeping threats under control, and keeping our data and environment secure."
"It's easy to set up. The deployment takes one or two days. You need to collect the data from a device and then direct it to the portal."
"Using the Cognitive Analytics feature, we have complete visibility that we didn’t have before."
"Being able to graph and show data to management has improved our organization. We can show the data to the higher-ups. It shows them that it's picking up on these anomalies and doing its job."
"The solution allowed us to not only get gain insight but also start collaborating with other tools."
"The most valuable feature of this solution is the way the net flow is being merged together in a single pane. That's been extremely useful for us, because can see what's going on with traffic in one single place."
"The most valuable feature is the ease of use and the full reach of services."
 

Cons

"The visualization could be improved, the GUI is not the best."
"Better integration between Cisco Secure Network Analytics and Cisco Secure Workload would be beneficial."
"Cisco Stealthwatch needs more integration with device discovery. We have to do a lot of hard work to figure out what things are. Better service integration is required."
"It's too complicated to install, when starting out."
"I think the interface is a little lacking. The interface seems like it just needs to be modernized. It's been the same interface now, ever since I've seen it probably four years ago."
"I would like to see a hybrid solution that can work without being connected directly to the internet for those destinations."
"The overall visibility into the actual device itself would be helpful. I don't just want support-specific data, but also to be able to see information such as CPU and other internal components or usage of the devices."
"We had some trouble with the installation as we migrated from our previous solution."
"I would like to see it integrate with third-party systems."
 

Pricing and Cost Advice

"Licensing is done by flows per second, not including outside>in traffic."
"It has a subscription model. There is yearly support, and there is also three-year support. It depends on what the customers want."
"The yearly licensing cost is about $50,000."
"​Licensing is done by flows per second, not including outside (in traffic)."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"Pricing is much higher compared to other solutions."
"Licensing costs are yearly."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
27%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
Financial Services Firm
14%
Computer Software Company
14%
Comms Service Provider
8%
Energy/Utilities Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
Ask a question
Earn 20 points
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
IronDefense, Iron Dome, Cyber Operations Center
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Thomson Reuters
Find out what your peers are saying about Darktrace, Vectra AI, Trend Micro and others in Network Detection and Response (NDR). Updated: May 2025.
851,604 professionals have used our research since 2012.