NetWitness NDR and SonicWall Capture Client are both popular security solutions addressing network visibility and threat detection. Users are generally happier with the pricing and support of NetWitness NDR, but SonicWall Capture Client is favored for its features, making it worth the investment.
Features: NetWitness NDR is praised for its comprehensive threat detection, deep packet inspection capabilities, and ability to identify and remediate threats quickly. SonicWall Capture Client stands out for its endpoint protection, automated rollback capabilities, and effective threat intelligence. SonicWall’s superior endpoint security features give it an edge in this area.
Room for Improvement: Users suggest that NetWitness NDR could benefit from a reduction in false positives, more intuitive configuration settings, and enhanced performance in certain environments. For SonicWall Capture Client, reviewers indicate that performance could be improved, particularly in resource usage, advanced configuration options could be more user-friendly, and there is a need for more comprehensive documentation and support resources.
Ease of Deployment and Customer Service: Users report that NetWitness NDR has a complex deployment process but appreciate robust customer service that helps mitigate initial setup challenges. SonicWall Capture Client offers a simpler deployment experience, though some users report needing additional customer support to navigate specific issues. NetWitness's strong customer service balances its complex setup, whereas SonicWall’s straightforward deployment is appreciated.
Pricing and ROI: NetWitness NDR is seen as cost-effective regarding setup, providing a strong ROI due to its advanced threat detection capabilities. SonicWall Capture Client is described as having a slightly higher setup cost, but users feel the advanced endpoint protection justifies the expense, resulting in a satisfactory ROI. NetWitness NDR is considered more budget-friendly initially, while SonicWall’s return on investment is driven by its powerful features.
Partners can purchase single endpoints at prices equivalent to 1,000-endpoint deals, providing an advantage for managed security service provider partners.
While their escalation process is understandable, it can be time-consuming as all logs need to be provided multiple times across different service levels.
There are no restrictions on the scalability of SonicWall Capture Client.
The installation process is straightforward, requiring only five pilot installations to enable customers to complete the remaining installations independently.
SonicWall Capture Client is accessed via cloud-based management console.
One of the drawbacks is that I cannot use Advanced and Premier licenses within a single tenant, which can be problematic when users need to deploy different licenses.
XDR cannot be used unless MDR services are purchased with SonicWall.
The RAM usage is higher compared to SentinelOne, utilizing approximately 150 megabytes of memory.
SonicWall Capture Client offers a cost-effective solution that's cheaper compared to other vendors like CrowdStrike.
Machine learning is particularly effective due to SonicWall sandboxing's threat intelligence database of approximately 7.1 billion entries.
One is that users can use the sandbox of SonicWall, which is called Capture ATP for free.
| Product | Market Share (%) |
|---|---|
| SonicWall Capture Client | 0.8% |
| NetWitness NDR | 0.5% |
| Other | 98.7% |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 1 |
Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.
SonicWall Capture Client is a unified client platform that delivers multiple endpoint protection capabilities, including next-generation malware protection and application vulnerability intelligence. It leverages cloud sandbox file testing, comprehensive reporting, and enforcement for endpoint protection.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
