Cisco Secure Network Analytics Reviews

• ID managers
• Flow replicators
• Flow sensors
• Thick client

Provides easily identifiable anomalies that you can't see with signature detections. 

NetFlow: The beginning of any security investigation starts with NetFlow data. 

One update that I would like to see is an agent-based client. Currently, Stealthwatch is network-based. A local agent could help manage endpoints. 

No issues.

No issues.

I have known these guys for a long time. They are completely familiar with their product.

We did not have a previous solution.

The initial setup is very straightforward. 

The vendor helped in every step of the installation. 

Licensing is done by flows per second, not including outside (in traffic). 

I have tried the Sourcefire solution, but Stealthwatch won out through its ease of use. 

There is nothing like it. It is a dream to operate. It is very intuitive. Go for it.

Also, it is great for a network segmentation project.

SMC and FC, though they are components, not features.

Most valuable features are the network maps and server and network response time. Maps is a unique feature which provides logical grouping of different segments of the network with complete visibility and alerting based on a total or protocol base as per defined threshold. So, one can check how many connections to the server and/or on the protocol, and who is consuming the most bandwidth. This is done, while the server and network response time provide quick identification of root cause of slow response from the server.

Provided complete network visibility and made troubleshooting easy.

I have used Cisco Stealthwatch for four to five years: versions 5.0 to 6.22.

Yes. The version with the Dell server had iDRAC problems. Often, it reported iDRAC failure.

No.

Very good.

No, we did not use a different solution.

Straightforward.

Pricing is much higher compared to other solutions.

Yes, SolarWinds.

It is a good product. I don't see any matching product with level of detailed information.

There's nothing like it and a dream to operate, very intuitive. The most valuable feature is NetFlow. The beginning of any security investigation starts with NetFlow data.

Easily identifiable anomalies that you can't see with signature detections.

I am so familiar with the product I would say none. Lancope has always listened to customer input for product enhancements. One update I would like to see is an agent-based client. Currently StealthWatch is network based. A local agent could help manage endpoints.

12 years.

No.

No.

I've known those guys for a long time. They are completely familiar with their product.

No.

Very straightforward. They helped in every step of the installation.

Licensing is done by flows per second, not including outside>in traffic.

I have tried the Sourcefire solution but StealthWatch wins because of ease of use.

Go for it. Also great for your network segmentation project.

I value the feature which enables me to detect devices talking to suspect IPs.

We can now see what is going on in our network.

We need to be able to filter out internal IPs as non-threats.

We have been using the product since 2008.

We did not encounter any issues with stability.

We did not encounter any issues with scalability.

The technical support is good.

We did not use any other solution previously.

The initial setup was relatively easy, though different devices need different configurations for the flow exports.

It is worth the cost.

We evaluated Arbor.

Get it in and see what you can see!

We primarily handle the design, implementation, and support for the solution and we also manage collaboration, routing and switching, security products, et cetera.

Overall, the implementation is very good.

The solution offers good security. 

We find the solution is very good at collaborating with other solutions.

We don't really see any limitations on the product. Overall, it's been good.

We would like the solution to make more advances in the way that Extreme Networks has been doing.

We've been using the solution for about two months. It hasn't been too long just yet.

We can handle technical support if our clients run into any issues. It's part of the services we offer.

We also use Extreme Networks. We find it is a bit better than Cisco. We're also partners with Fortinet.

The implementation is very easy and straightforward. 

We implement the solution for our clients. We're Cisco partners, and therefore can manage all kinds of deployments.

We are a Cisco premier partner.

In general, I would rate the solution ten out of ten. We've had very good experiences so far.