Try our new research platform with insights from 80,000+ expert users

Checkmk vs Cisco Secure Network Analytics comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 10, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmk
Ranking in Network Monitoring Software
7th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
9
Ranking in other categories
Server Monitoring (6th), IT Infrastructure Monitoring (13th), Cloud Monitoring Software (12th)
Cisco Secure Network Analytics
Ranking in Network Monitoring Software
31st
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
61
Ranking in other categories
Network Traffic Analysis (NTA) (4th), Network Detection and Response (NDR) (8th), Cisco Security Portfolio (8th)
 

Mindshare comparison

As of June 2025, in the Network Monitoring Software category, the mindshare of Checkmk is 3.9%, up from 2.2% compared to the previous year. The mindshare of Cisco Secure Network Analytics is 1.2%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Monitoring Software
 

Featured Reviews

Paolo Sala - PeerSpot reviewer
A reasonably priced tool for system and application monitoring
The main room for improvement is in the solution's presentation and the integration area. In our company, we use the integration capabilities from ServiceNow. We also have another big monitoring solution in place in our company, which is Dynatrace. At the moment, there doesn't exist an out-of-the-box integration for Dynatrace. I think that the integration and the exporting of the data collected are areas where Checkmk lacks but should try to improve the most. The only implementation of Checkmk that allows high availability is the virtual appliance that has the option for the availability of a different box. Otherwise, you have to find a way to implement it manually with some custom solution, which could be an improvement.
Muhammad Harun-Owr-Roshid - PeerSpot reviewer
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I really like the auto-discovery feature."
"Checkmk helps me compare data and foresee issues."
"Overall, from one to ten, I rate Checkmk a nine."
"The most valuable features of Checkmk are its resource monitoring, infra monitoring, and log factor configuration."
"It's versatile, scalable, and easier to use compared to other solutions like Nagios and OMD."
"The most valuable feature of the solution is that it has a lot of different pieces, and they all work together...It is a very scalable solution. Scalability-wise, I rate the solution a ten out of ten."
"Checkmk was built on a platform that was user-friendly, and I could build my charts easily."
"The initial setup of Checkmk was easy...It is a very stable solution."
"The most valuable feature is integration."
"I believe this solution has reduced our incident response time."
"The solution's analytics and thrust detection capabilities are good. We're still adjusting it. It's a little hypersensitive, but it is working right now."
"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."
"StealthWatch lets me see the ports running in and out and the country. It has excellent reporting, telemetry, and artificial intelligence features. With the telemetry, I can set thresholds to detect sudden changes and the alarms go through the PLC parts. I can see all the ports running on that trunk."
"From what I understand, you can encrypt and unencrypt traffic moving in transit. This is one of the features that we liked about it."
"The most valuable part is that Stealthwatch is part of a portfolio of security devices from Cisco. Cisco literally can touch every single end point, every single ingress and egress point in the network. Nobody else has that."
"The solution allowed us to not only get gain insight but also start collaborating with other tools."
 

Cons

"It is easy for tech-savvy people, but newcomers might find it intimidating."
"If an alert is generated for a specific pattern in the log, and if Checkmk catches that log, it will stay there even after the alert is resolved."
"The main challenge for us is that we're moving from Nagios to Checkmk, and we're still getting used to the new way of working."
"The initial setup is a bit complex."
"I think that the integration and the exporting of the data collected are areas where Checkmk lacks but should try to improve the most."
"Checkmk does not allow running scripts at varying intervals."
"Checkmk does not work too easily with the PowerStore. I use a PowerShell script as Checkmk runs on Linux and a Windows system, connecting with the Checkmk agent."
"In Checkmk, the documentation can probably be improved a bit more."
"We are continuing down the road of ACI and ISE with Cisco, so we would like to see the continuation of Stealthwatch integrating into ISE for exchange of information, and also, more into the ACI environment too."
"The reporting of day-to-day metrics still has room for improvement."
"Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network."
"Stealthwatch needs improvement when it comes to speed."
"Some of our customers find this solution to be a little bit tough because they don't understand how to configure and use it."
"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"We need to be able to filter out internal IPs as non-threats."
"The customizability of the UI should improve."
 

Pricing and Cost Advice

"The product is affordable."
"The price of Checkmk is cheaper compared to other enterprise products."
"Checkmk is a fairly reasonably priced solution."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"​Licensing is done by flows per second, not including outside (in traffic)."
"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"Our fees are approximately $3,000 USD."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"The yearly licensing cost is about $50,000."
"NetFlow is very expensive."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
856,807 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Government
9%
Financial Services Firm
8%
Manufacturing Company
8%
Computer Software Company
26%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Checkmk?
The most valuable feature of the solution is that it has a lot of different pieces, and they all work together...It is a very scalable solution. Scalability-wise, I rate the solution a ten out of ten.
What needs improvement with Checkmk?
I will get more information about Checkmk when the proof of concept is done. It's going to be before the summer. There will be a report about the tool and a recommendation to use it. So far, it loo...
What is your primary use case for Checkmk?
Checkmk ( /products/checkmk-reviews ) is a monitoring tool, so that's what I will use it for. Right now, it's not in production, but it's in a proof of concept phase. It looks good, so probably, du...
What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...
What needs improvement with Cisco Stealthwatch?
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper m...
 

Also Known As

No data available
Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
 

Overview

 

Sample Customers

Information Not Available
Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Find out what your peers are saying about Checkmk vs. Cisco Secure Network Analytics and other solutions. Updated: June 2025.
856,807 professionals have used our research since 2012.