Nozomi Networks Reviews

I have been involved in projects that used Nozomi Networks for Italian companies. At Advance, for example, we used it extensively, but in Italy, it is a brand that is quite expensive for many companies because the majority of the market is composed of small and medium companies, so a budget for Nozomi Networks is not very often available.

When I have used it, I implemented it for OT and IoT environments in public administration in Rome. We conducted a trial and were followed by a Nozomi Networks technician directly here in Italy. Guardian takes all the information that it receives from the appliance that you have deployed, and after you have all the data, you can put it into your SIEM and or SOAR, even if SOAR is not a good idea to have in use in OT and IoT.

In this particular customer, we had more or less 2,000 devices spread all over the city because they follow the traffic and also the parking and the IPTV cameras that are spread around the city in Rome. We deployed one Guardian and two remote devices that catch all the information that arrived from the devices spread all around the city. We conducted this kind of proof of concept in order to acquire and purchase Nozomi Networks instead of some other competitors.

Another case that I have seen was a really interesting demo with my previous company. We created it using Nozomi Networks and also Rapid7 as a SIEM. We managed a really small beer production facility. We simulated a threat actor that was introduced into the farm. After we deployed Nozomi Networks, we showed the people how it works and what the main features of the product are, how it can overview all the nodes using the probes. The probes can send data to one unique central console that is named Guardian. After that, Guardian can send data, raw data to your SIEM in order to process it and have SOC services that can guarantee the complete overview of your infrastructure.

Nozomi Networks is the easiest to use, with the capability to build really quickly an overview of your infrastructure. You can have an inventory of all your OT and IoT devices. It is based on a really solid code instead of many other competitors that were born recently. Today, it is recognized as the milestone to follow, the GOAT in this kind of environment.

Really often people do not know what they have put in place in their infrastructure. Especially in OT and IoT, you have to look into the complete environment in order to have a complete inventory. So, Shadow OT, which I have spoken about many times in terms of devices instead of Shadow IT in terms of applications, is a valuable feature.

Starting from scratch, they did not have any kind of tool that takes care of OT and IoT. Starting from scratch implementing Nozomi Networks, people were really happy because they have seen for the first time all their infrastructure. They have seen for the first time the complete inventory of all devices that were spread into their network. Today they are really happy to feel safe and to be sure to have it all under the control of our SOC services.

Nozomi Networks can be improved in many points. First of all, reduce the cost. That is really important because many companies are not so huge and many companies cannot acquire this kind of licensing. The second improvement would be to have a much more solid and robust IT solution, something that works like a network detection and response, even if Nozomi Networks was not born for this.

Nozomi Networks is absolutely scalable because you can introduce some other probes into your environment. You can also put some Guardians on-premise or have the SaaS solution that manages everything.

I have always tried to sell Nozomi Networks instead of other competitors from Israel, for example, because I trust in this kind of technology. Although Nozomi Networks is not so up-to-date for IT infrastructure, it is used in OT and IoT environments. It is a really good brand.

This kind of appliance is not so difficult to manage and not so specific. The customer is happy because today they have all things under control.

I am actually looking at another solution that is named LEX. It is another completely Italian solution and it is much cheaper than Nozomi Networks, but at this moment, it was born as a network detection and response. Now they are also working on OT/IoT protocols, CANbus, and all the other industrial protocols. For the moment, I think that if you have a really solid infrastructure and you are managing a more or less big customer, you have to choose Nozomi Networks.

Another customer was also evaluating another Iranian solution. At this moment, I cannot remember the name, but it is really famous.

Nozomi Networks works like a charm and works as expected. It is interesting to receive data from CTI and organize it in your infrastructure using the AI algorithms that can really save a lot of time for a SOC operator or SOC analyst. The capability is really good.

Nozomi Networks is not as expensive as some other players like Darktrace, even if they do another job, but it is not so cheap either. I think that Nozomi Networks needs to have some discounts, additional discounts for some environments.

SOC analysts are much happier because they already have good and clean data. In this way, they can reduce the mean time to acknowledge and the mean time to detect.

Be sure that the probes are installed in the right network points. That is the most important thing I can advise.

I would rate this product an eight out of ten.

There are different use cases, and it depends on the product and the customer. Usually, it is used for asset management and other features. Sometimes it serves as an IDS solution instead.

It has impacted security operations in a better way.

The network visualization feature of Nozomi impacts security operations positively. It is valuable for asset management, although there are probably better solutions for that.

I would like more customizable options for configurations. Creating custom queries is time-consuming. It would be beneficial if more options were added for easier configurations.

Personally, I have been familiar with Nozomi Networks for a couple of years.

I am not involved in daily operations. As far as I know, Nozomi Networks is considered to be of good quality. The product is stable and doesn’t usually require frequent technical support interaction.

I don't deal with technical support on a daily basis. However, the product itself is stable, so there is usually no need to contact support.

Neutral

The initial setup is straightforward for a basic configuration. However, custom configurations can be quite complex and time-consuming.

It is probably mid-range in pricing. It's not cheap, yet it is also not super expensive either.

I'd rate the solution seven out of ten.

I use this solution for vulnerability scanning in energy firms.

The time capsule feature is valuable.

I believe there is room for improvement regarding on-premises AI.

I have been using the solution for half a year.

The implementation was carried out by just two engineers.

I do not have ROI at the moment. It is too early to talk about it.

I considered alternative solutions such as Elastic and Curator.

I chose Nozomi because it is far ahead of other competitors, like Curator and Elastic. I would rate the overall solution nine out of ten.

The tool's visibility is good. We can see the traffic flow. 

Nozomi Networks should improve its pricing. 

I have been working with the product for five years. 

I think it's a stable solution and don't foresee any problems in the future. It's a leading security platform and is widely used in Italy. This gives them full visibility of all devices, which is often difficult to achieve. IT managers usually lack visibility into all products and security solutions. However, this platform lets customers gain visibility of their entire device environment. I rate its stability an eight out of ten. 

My company has three customers for the product. 

My company has enough knowledge of security and hence hasn't contacted support yet. 

Positive

The solution's deployment is easy and requires only two days. 

The platform's impact is significant because it provides a clear vision of all devices, including non-standard ones. Usually, customers have no idea about their environment, machines, or operations, making it very difficult to achieve visibility across all devices in the network. This is the main scope of the platform.

There are noticeable cost savings for a company after implementing Nozomi Networks. With this solution, fewer technical resources are needed, and the people managing the data center or environment have fewer daily activities to handle. A robust security solution means fewer tickets to manage and more precise security. This leads to less configuration needed on network devices or firewalls. These are the main benefits of implementing this solution.

The operational and technical architects, NOC, and SOC teams usually use nodes to detect and remediate firewall issues. They prefer not to analyze the environment more deeply. Instead, they rely on alerts about threats or suspicious, malicious traffic flow in their network devices.

I would recommend it because it is easy to install and develop. It provides a deep analysis of devices, which helps manage security reviews and ensure compliance. Overall, it is a good solution for these main purposes.

I rate the overall product a nine out of ten. 

Nozomi Networks is an easy-to-use and powerful tool. The solution's network visualization feature helps you monitor and manage all your OT assets. It also helps review vulnerabilities and any critical issues.

I used the solution for about one year in my last job.

The solution provides good stability.

It is easy to scale the solution.

The solution's technical support is very good. We worked a lot with the local support team here in Mexico, and it was awesome. They visited us every month and were always ready to help us with everything we needed.

Positive

The solution’s initial setup is easy. Nozomi staff helped us run a couple of demos. The first time, we just observed everything. Later, we could install everything and run it, which was not very difficult.

The solution's pricing is good and cheaper than that of Claroty. Nozomi Networks is worth the money.

I would recommend the solution to other users.

Overall, I rate the solution ten out of ten.

We use Nozomi Networks for OT visibility.

The most valuable feature of Nozomi Networks is its security features.

The solution should include an integration library.

I have been using Nozomi Networks for four years.

Nozomi Networks is a scalable solution. Our clients for Nozomi Networks are big enterprise businesses.

The solution's technical support is quite good. If we need something, the support team complies and replies back to us.

Neutral

The solution’s initial setup is very straightforward.

We did a POC for Nozomi Networks, and its installation does not take too long.

Overall, I rate Nozomi Networks a nine out of ten.

The solution is deployed on cloud, on-premises, and hybrid.

It brings visibility into the OT environment because most of the enterprises only have methods to check their IT environment. So, it's a barrier between two of these. And somehow they don't know what happens in the industrial environment.

Provides security for our operational technology environment for OT and IoT.

Proof of concept could be improved. It could be more tangible to the customer and the end users to have a video presentation or something like that.

I have been using this solution for half a year.

For the cloud environment, it's very stable and scalable.

For on-prem, if there are physical appliances that should be changed, as the number of assets to be monitored, it increases the numbers.

It is straightforward. I would rate it 4 out of 5.

We have a monthly license.

I would rate this solution 9 out of 10.

This is a security product for industrial automation.

The feature I like best is its stability. 

It integrates comfortably with other platforms.

It should support more programmable logic controllers (PLCs).

We have been using SCADAguardian for about a year and a half.

This solution is stable and we plan to continue using it.

This is not the type of product that scales, the way a storage solution does. We have approximately 200 endpoints.

The technical support is good, although it could be better. In the service industry, you can always do better, although we are satisfied with it.

It is easy to install this product. It only took us two or three hours to put it onto the network.

We have an in-house team and one person is sufficient to maintain it.

I have not seen any competition in terms of pricing, and it is quite reasonable.

This is a good product and I definitely recommend it.

I would rate this solution a ten out of ten.