No more typing reviews! Try our Samantha, our new voice AI agent.

Gigamon Deep Observability Pipeline vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Gigamon Deep Observability ...
Ranking in Security Information and Event Management (SIEM)
44th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
9
Ranking in other categories
Application Performance Monitoring (APM) and Observability (43rd), Event Monitoring (14th), Data Loss Prevention (DLP) (32nd), Web Application Firewall (WAF) (33rd), Advanced Threat Protection (ATP) (26th), Network Packet Broker (NPB) (1st), Network Detection and Response (NDR) (16th)
NetWitness Platform
Ranking in Security Information and Event Management (SIEM)
39th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Log Management (38th)
 

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Gigamon Deep Observability Pipeline is 0.5%, up from 0.1% compared to the previous year. The mindshare of NetWitness Platform is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
NetWitness Platform0.9%
Gigamon Deep Observability Pipeline0.5%
Other98.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

TN
Senior Relationship Banker at Joint stock Commercial Bank for Foreign Trade of V
Experience boosts operational efficiency while performance sees room for improvement
I don't have specific information on whether it was purchased on the AWS marketplace or somewhere else. I am working with Dynatrace Operator. I am also working with Algosec, Alluvio, CrowdStrike, Firemon, Gigamon Deep Observability Pipeline, and other solutions. I think it's a good tool, and I am satisfied with it. We have not stored cloud workloads with Gigamon Deep Observability Pipeline yet; we are still on-premises. The technical support takes about one to two hours to respond, which is acceptable. I am satisfied with the scalability of the product. The interface is good.
reviewer2256927 - PeerSpot reviewer
Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees
A solid SIEM solution that should improve technical support and online resources to be easier to use
A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use Gigamon for network visibility."
"The tool's most valuable feature is the encryption feature. From a security perspective, the solution hasn't significantly strengthened our security posture. However, it has greatly improved performance by streamlining encryption processes and avoiding encryption at multiple layers. This has also simplified troubleshooting, as we can whitelist certain processes."
"It has high stability."
"It is a good product, it provides network visibility, which is important, Gigamon can bring some optimizations to my network, it is helpful for security inspection, and it makes my firewall work fast because my firewall doesn't have to do the inspection of the SSL connections, for example."
"The most valuable feature is NetFlow."
"The Pipeline's Comprehensive Insights into data flows have helped improve operational efficiency and security."
"The most valuable feature for improving network visibility with Gigamon is the packet filtering capability."
"The solution is straightforward to set up."
"The solution is reliable."
"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."
"It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible."
"Thanks to this tool, we have a small SOC running in our company."
"The most valuable features are the threat prediction and network forensics."
"The product's initial setup phase was not at all difficult."
"The most valuable feature is the correlation, as it can report in real-time and monitor the management."
"Overall, it is easy to implement."
 

Cons

"The Gigamon Deep Observability Pipeline should have a feature showing the traffic flow within its platform. Currently, customers have to use separate tools for monitoring, which is inconvenient. If it had its visibility feature, it would make monitoring easier and more complete without needing extra tools."
"Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good."
"The graphical user interface could be improved."
"It only inspects a specific kind of traffic. There should be different kinds of use cases."
"Its filtering feature needs improvement."
"They should increase the solution's cluster capacity."
"The security should be improved."
"In terms of improvement, while the initial setup is not overly complicated, we did encounter a few issues."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"Its technical support could be better."
"It is overly complicated. It has taken years to implement and the return on investment just isn't there."
"One thing to be improved in NetWitness is the capability to correlate event logs in a general sense."
"More customizability is required, which is something that they need to improve on."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."
"There is no support for this product in this country, so problems have to be resolved through global technical teams."
 

Pricing and Cost Advice

"The solution's price is reasonable."
"The solution is highly-priced."
"I would rate the solution as expensive, around an eight or nine out of ten. There are other competitive solutions available."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"The product is expensive."
"We are on an annual license for the use of the solution."
"The NetWitness Platform may be affordable only for enterprise-level customers, as it may not be within the budget of small and medium-sized businesses."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"Our license is for one year."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
896,510 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Comms Service Provider
8%
Healthcare Company
8%
Financial Services Firm
11%
Comms Service Provider
10%
Construction Company
8%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise5
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What needs improvement with Gigamon Deep Observability Pipeline?
Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good. They need to improve their performance.
What is your primary use case for Gigamon Deep Observability Pipeline?
I am working with Gigamon Deep Observability Pipeline and Firemon, and I have been working with it for a year.
What advice do you have for others considering Gigamon Deep Observability Pipeline?
I don't have specific information on whether it was purchased on the AWS marketplace or somewhere else. I am working with Dynatrace Operator. I am also working with Algosec, Alluvio, CrowdStrike, F...
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
 

Also Known As

Gigamon, GigaSecure
RSA Security Analytics
 

Overview

 

Sample Customers

Amica Insurance, College of William & Mary, Gamma, IntercontinentalExchange, OppenheimerFunds
Los Angeles World Airports, Reply
Find out what your peers are saying about Gigamon Deep Observability Pipeline vs. NetWitness Platform and other solutions. Updated: April 2026.
896,510 professionals have used our research since 2012.