No more typing reviews! Try our Samantha, our new voice AI agent.

Corelight Open NDR vs VMware NSX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Corelight Open NDR
Ranking in Network Traffic Analysis (NTA)
7th
Ranking in Network Detection and Response (NDR)
11th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
VMware NSX
Ranking in Network Traffic Analysis (NTA)
5th
Ranking in Network Detection and Response (NDR)
6th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
107
Ranking in other categories
Network Virtualization (2nd), Cloud and Data Center Security (2nd), Network Automation (3rd), Microsegmentation Software (1st)
 

Mindshare comparison

As of April 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Corelight Open NDR is 7.4%, down from 10.3% compared to the previous year. The mindshare of VMware NSX is 3.0%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA) Mindshare Distribution
ProductMindshare (%)
VMware NSX3.0%
Corelight7.4%
Other89.6%
Network Traffic Analysis (NTA)
 

Featured Reviews

Dan Jeske - PeerSpot reviewer
Account Executive at Fishtech Group
An open-source solution that gave us insight into our clients' network traffic flow
We use the solution for packet capture sampling. We offer it as part of our managed service. It's so we can identify east-west traffic on a customer's network Corelight is low-cost and made on open-source, and the code is Zeek. It's an easy way for us to get visibility in a client's environment.…
TAIYAB HASAN - PeerSpot reviewer
Windows Redhat Linux Vmware & Azure & Cloud & Nutanix Ahv-Vmware & Backup Senior System Administrator at AlDawaa Medical Services
Has improved network visibility and security through micro-segmentation and SDN capabilities
This feature gives us flexibility and allows us to manage everything under one pane. We can see everything on one console, including network operations and behavior. Monitoring and security are among the best features for VMware NSX. For micro-segmentation, it's integrated with our endpoint security. If there are any issues with servers or VMs, it notifies us so we can isolate the servers and investigate. It provides distributed security features such as firewall and intrusion, IDS, IPS. The security level with IPS and IDS in VMware NSX is excellent. It also provides logical switching and routing which gives an extra layer for Layer 2 and Layer 3 switching requirements. The solution provides flexibility, automation, and self-service capabilities, resulting in cost savings as extensive expertise isn't required. Once automation and self-service are implemented, many tasks can be completed automatically. Load balancing is another excellent feature. Multiple servers can run on load balancing features, which is particularly useful since we have many application servers running. Sharing loads between servers provides the best performance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Corelight makes much easier the remediation of cyber attacks; instead of facing a chaotic amount of logs, Corelight provides correlated metrics that allow pivoting to find, in seconds, all the data related to an alert, detection, or asset."
"Technical support seems to be good."
"The most valuable feature is the embedded IDS from Suricata."
"It is easy to deploy and easy to handle."
"Corelight is easy to use."
"It's an easy way for us to get visibility in a client's environment."
"It's easy to create additional dashboards specific to supporting specific tasks."
"It is easy to deploy and easy to handle."
"When you have a solid secure solution between your on-prem and cloud solution, then you're in a safe place."
"The most valuable features are stability and low cost."
"We are using VMware NSX for all our network needs."
"What makes them unique is their range of discovery, the way they can effectively mimic actual PC or smartphone endpoints to examine malware behavior."
"It's very effective in how easy it is to manage and orchestrate all the different devices with the different types of requirements we have."
"NSX has excellent security features like virtual firewalls. I also like the micro-segmentation features, which are useful for the virtual machines inside the servers."
"This is a good firewall and overall it is rich in features."
"From a security standpoint, the customer was able to better secure critical workloads while routing L2/L3 worked normally, giving them more confidence that they would be ready for any potential security incident mitigation or outage (DR)."
 

Cons

"Machine learning could be a good improvement, but it's very costly."
"In the next release, building a graphical user interface would be helpful."
"They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."
"Corelight hasn’t added features in a long time."
"The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs."
"They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."
"It's an expensive solution and the price could be reduced."
"Machine learning could be a good improvement, but it's very costly."
"I would rate NSX's stability eight out of ten - there's room for improvement."
"There are always issues integrating with Cisco."
"It was stable for one year, there was no impact. In the last two months, we had two big incidents."
"The next release of NSX should try to make Kubernetes and container integration a little easier than it is now. It's quite a complicated process."
"In the future, the solution should be compliant with internet NIC."
"The setup is complex and should be made easier."
"In the next release, they should enhance the visual interface."
"The licensing model is expensive and could be more flexible, especially after Broadcom bought VMware."
 

Pricing and Cost Advice

"It's a yearly fee and depends on what you are looking for."
"The tool's pricing is reasonable."
"The pricing is higher than other options from Palo Alto, Fortinet, and Cisco because it is sold in a bundle."
"We can't go without NSX, so it's invaluable from this perspective."
"The price could be better. We pay for the license every three years. The last time I checked, it cost around three million pesos in the Philipines. Most of the expense will go towards implementation and renovation."
"We are using a perpetual license to use the solution and we have support."
"You can scale NSX if you have the resources, but it's usually expensive and complex to scale up."
"The cost of the solution is a bit high."
"We have saved man-hours and decreased our security exposure."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
889,955 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Government
12%
Financial Services Firm
12%
Computer Software Company
9%
Real Estate/Law Firm
9%
Financial Services Firm
11%
Manufacturing Company
10%
Computer Software Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business34
Midsize Enterprise23
Large Enterprise69
 

Questions from the Community

Ask a question
Earn 20 points
What are the biggest differences between Cisco ACI and VMware NSX?
There are some very major differences between both the Products and to name a few. -Cisco ACI have physical network gear (9K Switches) where the Code runs in ACI Policy Mode & the UCS server wh...
What are the biggest differences between Cisco ACI and VMware NSX?
Once you know your way around the Cisco ecosystem, using Cisco ACI is not so difficult. It is a global product, so when you change one interface, changes are automatically reflected on every switch...
What is your experience regarding pricing and costs for VMware NSX?
When measuring complexity and costs for our organization, we consider some parameters for effectiveness. In terms of effectiveness in reducing operational complexity, I measure it to be high on the...
 

Also Known As

Corelight Open NDR
VMware Nicira, Lastline Defender
 

Overview

 

Sample Customers

CarrefourEdnonGrand Canyon EducationSektorCERTTietoevryVolkswagen Financial Services
City of Avondale, Lumeta, Kroll Ontrack, Heartland Payment Systems, Baystate Heallth, Exostar, Tribune Media, iGATE, NTT Communications, Synergent, California Natural Resources Agency, Bloomington Public Schools, Columbia Sportswear, Join Experience S.A, Schuberg Philis
Find out what your peers are saying about Corelight Open NDR vs. VMware NSX and other solutions. Updated: April 2026.
889,955 professionals have used our research since 2012.