NetMon Reviews

Name: NetMon
Brand: Exabeam
Rating: 3.8 (11 reviews)

3.8 out of 5

11 reviews
100% willing to recommend

What is NetMon?

NetMon offers significant capabilities in log aggregation, traffic analysis, and real-time network insights. Its ease of use accommodates both entry-level and advanced functionalities, enhancing network visibility and threat detection.

Get the NetMon Buyer's Guide and find out what your peers are saying about NetMon, Zabbix, SolarWinds NPM and more!

NetMon is the #14 ranked solution in top Identity Threat Detection and Response (ITDR) solutions and #58 ranked solution in best Network Monitoring Tools. PeerSpot users give NetMon an average rating of 7.6 out of 10. NetMon is most commonly compared to Zabbix: NetMon vs Zabbix.

Helped 865,164 peers since 2012

Featured NetMon reviews

AshishDubey

Product manager at Tata Communications Ltd

I have not worked much on LogRhythm NetMon to be able to comment on what needs improvement in the product since there is another team in our company that is working on the solution presently. LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently. With players like IBM QRadar that propose QNI or Darktrace in the market, LogRhythm NetMon needs to consider a reduction in its pricing model.

Read full review

KeithGalleros

Information Security Analyst at Detecon Al Saudia Company Limited

The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management. I'd also like to see LogRhythm NetMon improve in terms of cost efficiency, especially regarding adding new products that may overlap in functionality. Specifically, I would appreciate enhanced detection and response capabilities directly integrated into NetMon to avoid needing additional rules or tools from LogRhythm. Regarding integration capabilities, I think NetMon's current agent-based approach is limiting. Integrating with protocols like Gflow and Netflow would be better, allowing seamless integration with our existing network equipment. This would solve the problem of agent-based restrictions and improve overall integration.

Read full review

KuldeepBurra

Co-Founder & Managing Director at Halainfosec

The selling point for LogRhythm is the SIEM solution, SOAR, and competitive pricing against QRadar, Sentinal, Splunk, or any other tool in the market. We started using LogRhythm started back in 2013. When I joined, we only had six or seven clients, but then, in a span of two and a half years, we increased our client base from seven to 33. We're always happy with the services and the product. There were no issues. We've integrated LogRhythm with EDR, email security solutions, and DLP. We've not found any specific issues with that. Overall, I rate the solution an 8 out of 10.

Read full review

NetMon mindshare

Product category:

As of August 2025, the mindshare of NetMon in the Network Monitoring Software category stands at 0.3%, down from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Network Monitoring Software

PeerResearch reports based on NetMon reviews

Type	Title	Date
Category	Network Monitoring Software	Aug 18, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 18, 2025	Download
Comparison	NetMon vs Zabbix	Aug 18, 2025	Download
Comparison	NetMon vs Auvik Network Management (ANM)	Aug 18, 2025	Download
Comparison	NetMon vs SolarWinds NPM	Aug 18, 2025	Download

Title	Rating	Mindshare	Recommending
Zabbix	4.2	12.3%	95%	107 interviews Add to research
SolarWinds NPM	4.1	4.4%	92%	159 interviews Add to research

Valuable Features

NetMon's key features include log aggregation, ease of use, comprehensive analytics, and network visibility offering insight into lateral traffic. Traffic analysis supports bandwidth monitoring and real-time data assessment. Customizable dashboards and a strong correlation engine are appreciated for threat detection. AI-based analytics assist in predicting attacks. Integration simplicity is valuable for holistic security management. Users value the bundled package for extended data visibility and deep packet analysis aiding in attack resolution.

"The initial setup is straightforward because we can deploy an open server."
"LogRhythm NetMon's most impressive feature is that it's a bundled package, so you're not just relying on monthly data; you get a six-month view for more comprehensive indicators of compromise. This dual approach is precious. We implement LogRhythm NetMon in our cybersecurity strategy mainly for compliance and correlation of network, user, and decision activities, particularly for network firewalls and access control."
"It has a very strong artificial intelligence engine."

Room for Improvement

NetMon needs better integration with multiple products and improved customization for analytics. Users experience difficulties with training and documentation. They face console lag and connectivity issues which can affect performance. The pricing model is a concern compared to competitors. Customers desire more integrated features within a single platform instead of separate products. The agent-based approach limits integration capabilities and there is a need for seamless integration with existing network equipment through protocols like Gflow and Netflow.

"The platform's integration features often need to be improved."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."

Pricing

NetMon's pricing is considered mid-range compared to its competitors, offering a strong cost-to-performance ratio with excellent visibility and threat detection capabilities through its advanced analytics and SOAR features. The annual licensing fee is approximately $85k, with additional costs for support. Licensing options include perpetual and subscription models. Deployment may require extra professional services, adding to costs. Some users find pricing high, particularly for smaller companies.

"The product is expensive for smaller companies."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."

Popular Use Cases

Organizations primarily use NetMon for monitoring irregular network traffic, identifying traffic types, origins, and destinations. It assists with network security, performance, traffic analysis, flow, and password checks. NetMon captures network packets, enables users to monitor traffic flow, and measure data downloads. It supports network behavior analysis, forensics, and real-time analytics. Extensions include DPA, forensic services, and integration with LogRhythm SIEM for a comprehensive security overview. Deployments span private clouds and data centers, supporting multiple users and clients.

Service and Support

NetMon's customer service and support receive mixed feedback. Some users highlight quick and effective responses, like same-day or next-day resolutions. They appreciate the availability, community resources, and readiness to handle queries, even praising it as ten out of ten. However, others report delays, describing support as sometimes unresponsive, with some waiting a day or more for assistance. Despite varying experiences with response times, many agree the technical expertise and issue resolution are commendable.

Deployment

Setting up NetMon varies from complex to straightforward depending on prior experience and team involvement. Some describe it as overwhelming without SIEM knowledge, requiring guidance and several staff. For others, the process is simple, taking as little as half a day or up to a month, especially with experienced engineers. Deployment typically involves setting up servers and integrating systems, with complexities arising mainly from user familiarity and available support.

Scalability

Users find NetMon's scalability impressive with easy addition of collectors and minimal re-architecture. While some indicate scalability depends on initial sizing, others note its capability to support multiple companies and users efficiently. However, advanced monitoring or larger network expansions may lack flexibility. Users appreciate the appliance's simplified scaling across various data sources and log sources, but smaller teams may require more time to explore and leverage its extensive functionalities.

Stability

After upgrading, NetMon's stability improved significantly. Users note fewer issues and rate stability highly. It operates smoothly with ELK-based architecture. Reports mention quick searches and no performance degradation. Although some encountered platform-related challenges, many experienced no collector outages or console inaccessibility. Stability is significantly better post-upgrade to version 7.25, with features like data processing and indexing enhancing the experience. PCAP data collection runs efficiently across various environments. NetMon consistently delivers reliable performance.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our NetMon Buyer's Guide for additional reliable information.

Compare NetMon with alternative products

Learn more about NetMon

NetMon provides seamless analytics with its real-time dashboards and advanced AI integration. The platform is designed for comprehensive monitoring and detailed analysis, making it indispensable for identifying network traffic, origins, destinations, and facilitating threat detection through lateral traffic visibility. Despite its powerful analytics and customization features, improvements in product integration, customer support, and pricing could increase its competitive edge. Connectivity, topology visualization, and server performance are areas noted for enhancement. Integration with protocols like Gflow and Netflow might alleviate agent-based restriction challenges. NetMon sends correlated data to LogRhythm SIEM for enhanced threat analysis and is used for tasks like traffic analysis and DPA.

What are NetMon's key features?

Log Aggregation: Seamless collection of diverse network logs for analysis.
Traffic Analysis: Detailed inspection of network traffic for identifying irregular patterns.
AI Integration: Advanced analytics powered by robust AI capabilities.
Customizable Dashboards: Real-time insights tailored to user requirements.
Correlation Engine: In-depth correlation of network activity for comprehensive reports.
Deep Packet Analytics: Thorough examination of data packets for granular insights.

What benefits and ROI can users expect?

Enhanced Threat Detection: Significant improvements in identifying lateral threats.
Comprehensive Insights: Complete visibility into network and user activities.
Efficient Monitoring: Real-time analytics streamline network monitoring processes.
Compliance Support: Strong integration supports adherence to compliance standards.

NetMon is widely adopted in industries requiring detailed traffic monitoring and security, such as finance and healthcare. Its capabilities in traffic type identification and correlated analysis make it essential for environments where detecting irregular patterns is critical. It's utilized for network security through comprehensive analysis and integration with SIEM systems.

NetMon was previously known as LogRhythm Network Monitor .