NetWitness Platform vs Symantec Advanced Threat Protection comparison

The compared NetWitness and Broadcom solutions aren't in the same category. NetWitness is ranked #34 in Log Management , with an average rating of 8.3, and holds a 0.8% mindshare in the category. Broadcom is ranked #21 in ATP , with an average rating of 8.5, and holds a 2.2% mindshare. Additionally, 75% of NetWitness users are willing to recommend the solution, compared to 91% of Broadcom users who would recommend it.

NetWitness Platform

Read 36 NetWitness Platform reviews

2,362 Views
1,252 Comparison Views

75% willing to recommend

Symantec Advanced Threat Pr...

Read 16 Symantec Advanced Threat Protection reviews

1,063 Views
819 Comparison Views

91% willing to recommend

NetWitness Platform

Symantec Advanced Threat Pr...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between NetWitness Platform and Symantec Advanced Threat Protection based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed NetWitness Platform vs. Symantec Advanced Threat Protection Report (Updated: September 2022).

Buyer's Guide

NetWitness Platform vs. Symantec Advanced Threat Protection

September 2022

Download the complete report

Helped 885,789 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

NetWitness Platform

Average Rating

7.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Log Management (34th), Security Information and Event Management (SIEM) (33rd)

Symantec Advanced Threat Pr...

Average Rating

7.8

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Advanced Threat Protection (ATP) (21st)

Mindshare comparison

NetWitness Platform and Symantec Advanced Threat Protection aren’t in the same category and serve different purposes. NetWitness Platform is designed for Log Management and holds a mindshare of 0.8%, up 0.3% compared to last year.
Symantec Advanced Threat Protection, on the other hand, focuses on Advanced Threat Protection (ATP), holds 2.2% mindshare, up 1.5% since last year.

Log Management Mindshare Distribution
Product	Mindshare (%)
NetWitness Platform	0.8%
Wazuh	7.5%
Splunk Enterprise Security	6.8%
Other	84.9%

Log Management

Advanced Threat Protection (ATP) Mindshare Distribution
Product	Mindshare (%)
Symantec Advanced Threat Protection	2.2%
Microsoft Defender for Office 365	7.6%
Palo Alto Networks WildFire	7.5%
Other	82.7%

Advanced Threat Protection (ATP)

Featured Reviews

reviewer2256927

Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees

A solid SIEM solution that should improve technical support and online resources to be easier to use

A big problem with the product is that we don't have much professional experience in Israel installing, implementing, and integrating this product. There is not enough of a knowledge base. There is no support for this product in this country, so problems have to be resolved through global technical teams. We like to work locally because of the language, and when the product is only supported outside the country, it's a little difficult to implement and use this product. Moreover, AI is something that must be added immediately. Artificial intelligence is a part of the competitors' products, and it's not been implemented for us.

Read full review

TapabrataSamanta

Lead Architect at Zones

Reliable platform with effective integration capabilities

Our primary use case for the product is to provide advanced threat protection to our clients, primarily in the banking and financial sectors Symantec ATP has been beneficial in ensuring robust security for our clients. Its effectiveness in detecting and mitigating threats has improved customer…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"RSA NetWitness is a SIEM and real-time network traffic solution that collects logs and packets, applies a set of alerting, reporting, and analysis rules on them, and thus provides the enterprise with full visibility of the networks and activities of the systems."

"Their customer service is excellent, one of the best."

"In my opinion, the solution's most valuable feature is its capacity to monitor network traffic, logs from devices within the network, and network captures. This capability extends beyond logs to include full network capturing."

"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."

"It's quite economical compared to other solutions in the market."

"The most valuable feature is the ability to write rules and triggers for network communication and then being able to investigate based on that, where you can see the payload and deconstruct the packets."

"The most valuable features are the threat prediction and network forensics."

"This solution has a very good dashboard with a separate tab for incidents and alerts."

More NetWitness Platform pros

"The product integrates well with our systems, and we have not encountered any problems."

"The incident management on the solution is very good. You get a lot of detailed information about an incident. You also get a lot of documentation in connection with the CVI or integration."

"Symantec Endpoint Protection provides end-to-end protection. Along with antivirus protection, it has a lot of key areas, including intrusive prevention, firewall features, and application and device control."

"The Application Control code and the easy integration are valuable features."

"Currently we have 800-plus nodes connected with this solution, without any issues."

"It has certainly helped out our audit efforts because we each stay compliant in terms of various security standards."

"You don't have to buy a separate email security platform. You can enable that using their endpoint, and I like that. You don't have to have two agents running on the same box."

"All of the solution's features are quite valuable for us, and we especially like the threat protection it provides."

More Symantec Advanced Threat Protection pros

Cons

"I am not happy with the RSA support. Sometimes they can be really annoying because it takes so long to get the support that you need."

"We have encountered issues with unresolved crashes."

"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."

"The multi-tenant capabilities are lagging compared to IBM QRadar."

"RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms."

"The implementation needs assistance."

"The threat detection capability and centralizing and upgrading capability need to be improved. The threat alert capability needs to be improved as well because there is some lag time at present. They need to work on their database search too."

"The initial setup was complex because it takes a lot of time to complete the implementation."

More NetWitness Platform cons

"Symantec appliances need improvement. The whole appliance environment is a robust system and it needs a massive amount of storage space."

"The support for new OSs and older OSs could be a little tighter. They need to be more upfront about what protection services they're going to provide on new OSs. I haven't seen the Windows 11 version out yet. It is either already released in Beta, or the Beta will be released soon. There could be a little bit more advanced updates on what they're doing to help protect Windows 11 environments. They can let us know in advance so that we know it is going to be protected. We can't roll out the new OS without putting end-point protection on it. So, they should tell us what is their support model for that, and what are they doing to protect Windows 11. They're not telling me, and that's a criticism. The same issue is applicable to all the other antivirus tools. It is not just Symantec; all of them have this problem."

"It also needs network-based threat protection for shared folders and files."

"One area for improvement could be the pricing model."

"The administration interface needs a lot of improvement. It should be UI based, and simple. They need to improve it. It's pretty much not that friendly compared to what we were using as Bitdefender before. It's okay but is improving, actually."

"I think SonicWall and McAfee are better solutions."

"The product's support services need improvement."

"The administration interface needs a lot of improvement. It should be UI-based and simple."

More Symantec Advanced Threat Protection cons

Pricing and Cost Advice

"We are on an annual license for the use of the solution."

"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."

"The licenses are good but the cost is very expensive."

"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."

"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."

"Compared to the competition, the is price is not that high."

"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."

"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."

More NetWitness Platform pricing and cost advice

"Pricing is good. It is nice to have a great product at a fair price."

"Symantec Endpoint Protection has an average price."

"Symantec Advanced Threat Protection's pricing is comparable."

"The price is quite expensive."

"The pricing of this solution is inexpensive and affordable."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

885,789 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

Performing Arts

Comms Service Provider

Marketing Services Firm

12%

University

10%

Construction Company

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	7
Large Enterprise	20

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	3
Large Enterprise	13

Questions from the Community

What do you like most about NetWitness Platform?

The product's initial setup phase was not at all difficult.

See all answers

What is your experience regarding pricing and costs for NetWitness Platform?

The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.

See all answers

What needs improvement with NetWitness Platform?

There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.

See all answers

What is your experience regarding pricing and costs for Symantec Advanced Threat Protection?

The price is quite expensive because a different entity has taken over the company.

See all answers

What needs improvement with Symantec Advanced Threat Protection?

One area for improvement could be the pricing model. Future releases could further enhance integration capabilities with other platforms and simplify the licensing model to compete more with Micros...

See all answers

What is your primary use case for Symantec Advanced Threat Protection?

Our primary use case for the product is to provide advanced threat protection to our clients, primarily in the banking and financial sectors.

See all answers

Comparisons

IBM Security QRadar vs NetWitness Platform

Compared 7% of the time

Splunk Enterprise Security vs NetWitness Platform

Compared 7% of the time

RSA enVision vs NetWitness Platform

Compared 4% of the time

Elastic Security vs NetWitness Platform

Compared 4% of the time

Sumo Logic Security vs NetWitness Platform

Compared 3% of the time

More NetWitness Platform Competitors

Cisco Secure Network Analytics vs Symantec Advanced Threat Protection

Compared 9% of the time

Arbor DDoS vs Symantec Advanced Threat Protection

Compared 9% of the time

Palo Alto Networks WildFire vs Symantec Advanced Threat Protection

Compared 9% of the time

Trellix Network Detection and Response vs Symantec Advanced Threat Protection

Compared 7% of the time

CyberArk Privileged Access Manager vs Symantec Advanced Threat Protection

Compared 7% of the time

More Symantec Advanced Threat Protection Competitors

Product Reports

Buyer's Guide

NetWitness Platform

March 2026

Download NetWitness Platform product report

Buyer's Guide

Symantec Advanced Threat Protection

March 2026

Symantec Advanced Threat Protection report

Download Symantec Advanced Threat Protection product report

Also Known As

RSA Security Analytics

No data available

Overview

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness

Symantec Advanced Threat Protection is a single unified solution that uncovers, prioritizes, and remediates advanced attacks. The product fuses intelligence from endpoint, network, and email control points, as well as Symantec’s massive global sensor network, to stop threats that evade individual security products. It leverages your existing Symantec Endpoint Protection and Symantec Email Security.cloud investments, so it does not require the deployment of any new agents. You can deploy a new installation of Symantec Advanced Threat Protection and start to discover suspicious activity in under an hour. Using the proven technology in Symantec Insight reputation based detection, Symantec SONAR behavioral analysis with the new Symantec Cynic sandbox and file analysis platform, Symantec Advanced Threat Protection provides better detection and prioritization than other vendors, allowing security analysts to “zero in” on just those specific security events of importance.

Broadcom

Sample Customers

Los Angeles World Airports, Reply

ECI

Buyer's Guide

NetWitness Platform vs. Symantec Advanced Threat Protection

September 2022

Free Report: NetWitness Platform vs. Symantec Advanced Threat Protection

Find out what your peers are saying about NetWitness Platform vs. Symantec Advanced Threat Protection and other solutions. Updated: September 2022.

DOWNLOAD NOW

885,789 professionals have used our research since 2012.

See our NetWitness Platform vs. Symantec Advanced Threat Protection report.

We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.