No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Technical support for NetWitness NDR is very good, helping resolve issues effectively.
NetWitness NDR captures traffic comprehensively, detailing every aspect of the communication.
It allows for real-time malware detection.
Recent updates include instant threat response and enhanced integration features.
NetWitness NDR offers strong log correlation and stability.

CONS

The price and training costs of NetWitness NDR are high and could be improved.
There are issues with the deployment process, causing unexpected stops and log passing challenges.
RSA NetWitness Endpoint's blocking feature does not work properly for malicious processes.
Threat detection and threat intelligence in NetWitness NDR need enhancements.
There is a need for better integration with non-native applications and improved overall integration.
 

NetWitness NDR Pros review quotes

reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Sep 23, 2022
Technical support is knowledgeable.
reviewer1259418 - PeerSpot reviewer
Senior Cyber Security Analyst (SAFe Agile) at a transportation company with 1,001-5,000 employees
Aug 11, 2022
NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console.
SupravatMaji - PeerSpot reviewer
Associate Vice President - IT Security at Inspira Enterprise
Jun 23, 2022
The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good.
Learn what your peers think about NetWitness NDR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,438 professionals have used our research since 2012.
Jakaria Udoy - PeerSpot reviewer
Information Security Engineer at Nhq Distribution Ltd
Aug 25, 2022
It's a scalable solution. We have around five to eight customers using RSA NetWitness Endpoint, and we hope to increase the number of users.
Amr Abdelaziz - PeerSpot reviewer
Information Security Specialist at Masria Digital payments
Aug 17, 2022
The interface of this solution is very flexible and easy to use.
reviewer1110027 - PeerSpot reviewer
Security Information & Incident Analyst at a financial services firm with 1,001-5,000 employees
May 21, 2022
Ability to isolate the machine when there are malicious files.
HananSyed - PeerSpot reviewer
Cyber Security Consultant at Mideast Data Systems
Apr 25, 2022
The stability of the RSA NetWitness Endpoint is very good.
it_user1724928 - PeerSpot reviewer
Manager, Soc
Nov 23, 2021
The log correlation is good.
MM
Security Consultant at Global Solutions
Mar 5, 2021
It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great.
TM
Senior Cybersecurity Consultant at CIA Botswana
Nov 9, 2020
This solution allows us to locate the malware in real-time.
 

NetWitness NDR Cons review quotes

reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Sep 23, 2022
Threat detection could be better.
reviewer1259418 - PeerSpot reviewer
Senior Cyber Security Analyst (SAFe Agile) at a transportation company with 1,001-5,000 employees
Aug 11, 2022
NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious.
SupravatMaji - PeerSpot reviewer
Associate Vice President - IT Security at Inspira Enterprise
Jun 23, 2022
RSA NetWitness Network could improve on integration with non-native application integration.
Learn what your peers think about NetWitness NDR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,438 professionals have used our research since 2012.
Jakaria Udoy - PeerSpot reviewer
Information Security Engineer at Nhq Distribution Ltd
Aug 25, 2022
The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features.
Amr Abdelaziz - PeerSpot reviewer
Information Security Specialist at Masria Digital payments
Aug 17, 2022
We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues.
reviewer1110027 - PeerSpot reviewer
Security Information & Incident Analyst at a financial services firm with 1,001-5,000 employees
May 21, 2022
The solution lacks a reporting engine.
HananSyed - PeerSpot reviewer
Cyber Security Consultant at Mideast Data Systems
Apr 25, 2022
The threat intelligence could improve in RSA NetWitness Endpoint.
it_user1724928 - PeerSpot reviewer
Manager, Soc
Nov 23, 2021
The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge.
MM
Security Consultant at Global Solutions
Mar 5, 2021
Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training.
TM
Senior Cybersecurity Consultant at CIA Botswana
Nov 9, 2020
I would like to see Security Orchestration and Response Automation (SOAR) integration.