Enterprises are increasingly facing multiple network monitoring challenges, like tracking, monitoring, and improving network performance. Addressing these challenges with a Network Traffic Analysis (NTA) solution helps an organization avoid various network monitoring challenges with proactive strategies. PeerSpot real users of Network Traffic Analysis note the advantages of this type of solution for their organizations and clients.
If your company is evaluating various Network Traffic Analysis solutions, then you may need to figure out if the value proposition is profitable. ROI is most often measured by a ratio between net income and investment. It can also be quantifiably measured by the value a solution provides.
With NTA solutions, there are other ways to measure the benefits that an NTA solution can provide besides using the ratio between net income and investment, including mean time to repair (MTTR), reducing internal resources, and eliminating external services for automation.
PeerSpot offers a report on Network Traffic Analysis containing feedback from our user community. If you are interested in learning more, check out the free report here.
1) MTTR
Saving time when isolating issues is a quick and easy way to see ROI. An NTA solution can keep a data center running smoothly, avoiding downtime or outages. Finding and isolating issues quickly can keep a business running without interruption, maintaining customer confidence in the solution. John Boake, a Senior Monitoring Engineer at a large financial services firm, explains the connection that MTTR from ExtraHop Reveal(x) had on his organization’s ROI, “The mean time to repair is reduced dramatically because you can quickly isolate where the problem is. I can quickly say the problem is not a network-related problem. It’s a server-related problem or an application-related problem. The return on investment on this one is probably seen in the first year of purchase.”
2) Eliminating External Services
If you are outsourcing your monitoring services, purchasing a Network Traffic Analysis solution can have a measurable impact. The annual cost of eliminating those external services minus the annual cost of licensing an NTA solution is quantifiable and can help justify the purchase of an NTA solution. Bobby Wittenberg, a Network Engineer at medium-sized financial services firm, describes how switching to Auvik from an external monitoring service saved annual costs for his firm, “GNCU had kind of outsourced the network part to two different organizations. One of those organizations just did the monitoring and management piece. They were charging us about 100K a year for that managed service. By implementing Auvik, we basically duplicated what they were doing, which has a very measurable impact. I didn't have access to their platform, so I needed something that I could use to monitor and manage the network. So, by getting rid of that managed service provider, we saved approximately 100K a year.”
3) Reduced Internal Resources
Organizational spend on internal resources for technology can be a huge budgetary drain. Reducing staff dedicated to applications or devices can provide a company with significant operational savings. A Founder and Director at a small tech services company, reviewing Darktrace, discusses how the addition of machine learning in Network Traffic Analysis provides value-add to the company’s operations, “Its unsupervised machine learning has reduced our team's effort. Both Darktrace and Vectra work on unsupervised machine learning that learns the behavior or develops a profile on its own, which allows our security team to do some other tasks rather than spending time on Darktrace or Vectra.”
Implementing an NTA solution can have cost benefits in addition to a traditional return on investment. Real users on PeerSpot offer a look into different organizations, providing perspectives on what generates value for them. Learn more by downloading our free report.
Hi @Allan Gillies,
CyGlass is an alternative to DarkTrace that primarily addresses the SMB market only. Typically we cover 80% of what DT can offer but for circa 35% of the cost.
Why? We are a SAAS-based cloud platform so we don't require any hardware, just your existing firewalls that we pull netflow data into the Cloud and utilise our AI to map out and offer you full visibility for on-prem ...
Hi @Allan Gillies,
CyGlass is an alternative to DarkTrace that primarily addresses the SMB market only. Typically we cover 80% of what DT can offer but for circa 35% of the cost.
Why? We are a SAAS-based cloud platform so we don't require any hardware, just your existing firewalls that we pull netflow data into the Cloud and utilise our AI to map out and offer you full visibility for on-prem and Cloud networks.
We generate a set of free reports that offer you a scorecard (RAG analysis) that cover the 0365 summary report, the ransomware prevention report as well as an executive summary that offers instant visibility of your architecture.
Let me know if you want further information.
I am based in the UK
Regards,
Stuart Draper
IT Telehealth Specialist at Clinical & Support Options
Aug 16, 2022
I'm not sure what specifically you're trying to defend against, but we're just wrapping up a Crowdstrike deployment, and it's been surprisingly smooth.
We opted to move away from Kaspersky (for ethical reasons), even though it's technically the best AV product out there, but it was always a bit heavy on the clients.
Crowdstrike is more of a behavior monitor, and it's much lighter. Crowdstrike pricing isn't anything to write home about, but you have lots of "a la carte" choices, so you can make it fit your needs, and your budget.
Cheers!
Hi @reviewer1799568,
Most of these comparisons are opinions and some tests are done in specific conditions that might not suit or reflect your organization's needs and roadmap. Ultimately, the cost of a mistake is a data breach and not just an audit finding or operational discomfort.
I mention this because there are no viable shortcuts. I suggest you test the solutions thoroughly in your own en...
Consultant at a computer software company with 51-200 employees
Mar 31, 2022
Hi @reviewer1799568,
Most of these comparisons are opinions and some tests are done in specific conditions that might not suit or reflect your organization's needs and roadmap. Ultimately, the cost of a mistake is a data breach and not just an audit finding or operational discomfort.
I mention this because there are no viable shortcuts. I suggest you test the solutions thoroughly in your own environment to see what works for you.
The gaming floor is hopefully "air-gapped" and the solution should respect that segregation and still provide great security and visibility. One of the challenges is security updates.
For such an environment you would need comprehensive AI and machine learning. I suggest you look at the difference between IOC and IOA.
IOA vs IOC: Defining & Understanding The Differences | CrowdStrike. (Please also check other sources).
Good luck and stay safe!
Download our free Network Traffic Analysis (NTA) Report and find out what your peers are saying about Darktrace, Cisco, ExtraHop Networks, and more! Updated: March 2026.