Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Hillstone Cloud Sandbox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (7th)
Hillstone Cloud Sandbox
Average Rating
0.0
Reviews Sentiment
7.9
Number of Reviews
1
Ranking in other categories
Advanced Threat Protection (ATP) (36th)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Cisco Secure Network Analytics is designed for Network Monitoring Software and holds a mindshare of 1.2%, down 1.6% compared to last year.
Hillstone Cloud Sandbox, on the other hand, focuses on Advanced Threat Protection (ATP), holds 0.3% mindshare, down 0.5% since last year.
Network Monitoring Software
Advanced Threat Protection (ATP)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Albert-Wang - PeerSpot reviewer
Dynamic file analysis enhances threat detection capabilities
Cloud sandbox allows customers to analyze email and text documents without purchasing any hardware. The system analyzes files dynamically and provides feedback on the impact of the file. Cloud sandbox manages the analysis using Hillstone on the cloud, offering a service to detect unknown threats. It's easy to integrate and offers dynamic analysis supporting many types of files.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."
"If you are using Darktrace or NAC solutions you can integrate Stealthwatch."
"It has been pretty stable since we deployed it, and everything seems to be working fine."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"Stealthwatch has greatly improved our network visibility, in terms of bandwidth, malware, and PCI violations."
"Being able to identify specific date closed across the network is invaluable."
"From a security standpoint, it is just seeing pockets as well. Visibility is very key for us."
"It works efficiently for encrypted traffic analysis."
"Cloud sandbox allows customers to analyze email and text documents without purchasing any hardware."
 

Cons

"We've had problems with element licensing costs so scalability is a concern."
"It hasn't really improved our direct detection rate but it has definitely reduced our incident response time as we wouldn't have been able to detect threats or immediate risks without this solution."
"It's a good solid solution but integration with Network Access Control products with Cisco ISE would be good."
"The overall visibility into the actual device itself would be helpful. I don't just want support-specific data, but also to be able to see information such as CPU and other internal components or usage of the devices."
"I would like the search page available with Cisco Stealthwatch to be more intuitive. The previous release was better than the current one for the UI."
"We need to be able to filter out internal IPs as non-threats."
"There's a lot of traffic on our network that we don't see sometimes."
"I would like to see a hybrid solution that can work without being connected directly to the internet for those destinations."
"For implementation, if the system can improve or provide more training, it would be better."
 

Pricing and Cost Advice

"​Licensing is done by flows per second, not including outside (in traffic)."
"We pay for support costs on a yearly basis."
"Licensing is done by flows per second, not including outside>in traffic."
"NetFlow is very expensive."
"Our fees are approximately $3,000 USD."
"The yearly licensing cost is about $50,000."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"On a yearly basis, licensing is somewhere around $30,000."
Information not available
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
28%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
What needs improvement with Hillstone Cloud Sandbox?
For implementation, if the system can improve or provide more training, it would be better. Additionally, for scalability, the performance does not have challenges, as users generally don't upload ...
What is your primary use case for Hillstone Cloud Sandbox?
Cloud them both is a very feature and it is used to detect unknown threats by analyzing files. Customers typically use Hillstone on the cloud to do the analysis.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Information Not Available
Find out what your peers are saying about Zabbix, Auvik, Datadog and others in Network Monitoring Software. Updated: April 2025.
850,028 professionals have used our research since 2012.