Try our new research platform with insights from 80,000+ expert users

Change Tracker Gen7 R2 vs Cisco Secure Network Analytics vs Palo Alto Networks AutoFocus comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Intrusion Detection and Prevention Software (IDPS)
Network Monitoring Software
Threat Intelligence Platforms
 

Featured Reviews

SL
Reliable, good technical support, and simple installation
Change Tracker Gen7 R2 can be used in the health sector for compliance. It can secure the patient's information The solution could improve by being more secure and have better integration. I have been using Change Tracker Gen7 R2 for a couple of weeks. The solution is stable. My team is using…
Muhammad Harun-Owr-Roshid - PeerSpot reviewer
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.
RichPhillips - PeerSpot reviewer
Offers a centralized dashboard for reporting threats and anomalies
The tool along with other suite of products provides us with threat and alert information.  The solution has provided us with a centralized dashboard for reporting threats and anomalies.  I am impressed with the tool's integration of Palo Alto products which serves as a platform for security.  I…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have contacted the support once and the experience was good, I was satisfied."
"Whitelisting services are the most valuable feature of Change Tracker Gen7 R2."
"The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration."
"Great network monitoring, looking at anomaly detection and evaluation."
"The most valuable feature is integration."
"Being able to identify specific date closed across the network is invaluable."
"The fact that it can identify down to an IP address of a system that is causing problems, or potentially causing problems, is very valuable."
"The most valuable feature about this solution is that it gives me insight of my network."
"Using this solution has helped us to detect and identify viruses or malicious activity in the network early on."
"I value the feature which enables me to detect devices talking to suspect IPs."
"It integrates well with other solutions and provides good threat intelligence in terms of external threats."
"The logs play a crucial role as they contribute to blocking unwanted Internet traffic."
"The feature that I like best is the dashboard."
"I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."
"The most valuable feature is alerting."
"Palo Alto Networks AutoFocus has had a positive impact on my company as we can reduce the cost for the SOC investment, and we can also get good feedback on how to strengthen our network from the expertise people available."
"I would rate Palo Alto Networks AutoFocus a ten out of ten."
 

Cons

"The solution could improve by being more secure and have better integration."
"The solution could include more integrations."
"Some of our customers find this solution to be a little bit tough because they don't understand how to configure and use it."
"I would like Cisco to make it easier for the administrators to use it."
"I would like to see more and cleaner reporting. For example, if I pull up Steven and I want to look and maybe compare him to what you've done in the past week, and compare that to the past six months, the point would be to see what the difference in activity looks like over this time. I don't see that capability in reporting to date. You see that trend but you don't really see a straightforward comparison. That right there is key to what we want to see about the normal activity."
"One area that could be improved in SNA is the integration with Cisco ISE for user and session details, which currently requires additional setup."
"Its granularity for RBAC roles-based access control needs improvement."
"Better integration between Cisco Secure Network Analytics and Cisco Secure Workload would be beneficial."
"We haven't seen ROI."
"We are continuing down the road of ACI and ISE with Cisco, so we would like to see the continuation of Stealthwatch integrating into ISE for exchange of information, and also, more into the ACI environment too."
"It is a completely cloud-based product at present."
"It would be helpful to have better documentation for configuring and installing the solution."
"I would like to have more technical documentation that contains greater detail on the types of threats that are occurring."
"It would be better if they used the threat intelligence feeds directly from their side and changing the verdict instead of us requesting it."
"I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate."
 

Pricing and Cost Advice

"There is a license required for this solution."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"​Licensing is done by flows per second, not including outside (in traffic)."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"Pricing is much higher compared to other solutions."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"It is worth the cost."
"The licensing costs are outrageous."
"Licensing is done by flows per second, not including outside>in traffic."
"It is expensive."
"The solution is reasonably priced."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
865,576 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
24%
Government
10%
Manufacturing Company
9%
Financial Services Firm
9%
Performing Arts
12%
Insurance Company
10%
Computer Software Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Change Tracker Gen7 R2?
Whitelisting services are the most valuable feature of Change Tracker Gen7 R2.
What needs improvement with Change Tracker Gen7 R2?
The solution could include more integrations.
What is your primary use case for Change Tracker Gen7 R2?
We use Change Tracker Gen7 R2 for secure configuration management and file integrity monitoring.
What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are...
What needs improvement with Cisco Stealthwatch?
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in...
What needs improvement with Palo Alto Networks AutoFocus?
I feel that Palo Alto Networks AutoFocus can improve, especially since most of the OEMs are implementing MDR, Managed...
What is your primary use case for Palo Alto Networks AutoFocus?
I use Palo Alto Networks AutoFocus for threat monitoring, and it is provided by the OEM itself. I use the threat data...
What advice do you have for others considering Palo Alto Networks AutoFocus?
As a partner with Palo Alto Networks, my email is Sarvajit at bsrgroup.in. My job title is Technical Manager. I confi...
 

Also Known As

NNT Change Tracker Enterprise
Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
Palo Alto Threat Intelligence Management
 

Overview

 

Sample Customers

US Army, Xerox, Hewlett Packard, LiveTV, Universal Studios, Guadalupe Valley Electric Cooperative, ACAS, Chanel, Live Nation, Union Bank, Ohio Valley Electric Corporation, Bank of China, Cornell University, Jetblue, Royal Albert Hall, Chaparral Energy, RyanAir
Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Telkom Indonesia
Find out what your peers are saying about Darktrace, Check Point Software Technologies, Fortinet and others in Intrusion Detection and Prevention Software (IDPS). Updated: July 2025.
865,576 professionals have used our research since 2012.