"Vectra produces actionable data using automation. That has helped us. It's less manpower now to look at incidents, which has definitely increased efficiency. Right now, in a lot of cases, our mean time to detection is within zero days. This tells me by the time something happened, and we were able to detect it, it was within the same day."
"The key feature for me for Detect for Office 365 is that it can also concentrate all the information and detection at one point, the same as the network solution does. This is the key feature for me because, while accessing data from Office 365 is possible using Microsoft interfaces, they are not really user-friendly and are quite confusing to use. But Detect for Office 365 is aggregating all the info, and it's only the interesting stuff."
"The administrative privilege detection feature is the most valuable feature. The admin accounts are often highly accessible to the high-risk component of the environment. If those accounts are compromised or are being used in a suspicious manner, that's high-fidelity events for us to look into."
"It has reduced the time it takes to respond to attacks. That comes back to the proactive point. It makes us able to lower down in the kill chain, we can react now, rather than reacting to incidents that happened, we can see an instant, in some cases, as it's being implemented, or as it's being launched."
"One of the most valuable features is all the correlation that it does using AI and machine learning. An example would be alerting on a host and then alerting on other things, like abnormal behavior, that it has noticed coming from the same host. It's valuable because we're a very lean team."
"The solution provide visibility into behaviors across the full lifecycle of an attack in our network, beyond just the Internet gateway. It makes our security operations much more effective because we are now looking not just at traffic on the border, but we're looking at east-west internal traffic. Now, not only will we see if an exploit kit is being downloaded, but we would be able to see then if that exploit kit was then laterally distributed into our environment."
"The solution's ability to reduce alerts, by rolling up numerous alerts to create a single incident or campaign, helps in that it collapses all the events to a particular host, or a particular detection to a set of hosts. So it doesn't generate too many alerts. By and large, whatever alerts it generates are actionable, and actionable within the day."
"One of the core features is that Vectra AI triages threats and correlates them with compromised host devices. From a visibility perspective, we can better track the threat across the network. Instead of us potentially finding one device that has been impacted without Vectra AI, it will give us the visibility of everywhere that threat went. Therefore, visibility has increased for us."
"It is highly customizable and can be integrated well with third-party software."
"The initial setup is easy."
"The software management tools are very useful for our customers."
"The most valuable feature is the ability to look for any increases in bandwidth over time so that we can plan before it becomes critical."
"The integration with other SolarWinds products is good."
"What I like the most is the bandwidth assessment."
"The most valuable feature is the alarm that is set up to trigger based on bandwidth utilization."
"The monitoring is perfect, showing you the details for the utilization of resources and network bandwidth."
"The most valuable features are the bandwidth analyzer, the monitoring, the network analyzer, it has overall good performance, and an easy deployment."
"They have instructional videos and other information available on the site to assist you with learning it."
"I'd like to be able to get granular reports and to be able to output them into formats that are customizable and more useful. The reporting GUI is lacking."
"The false positives and the tuning side of it is something that could use improvement. But that could be from our side."
"It does a little bit of packet capture on alert so you can look at the packet capture activity going on, but it doesn't collect a whole lot of data. Sometimes it's only one or two frames, sometimes it does collect more. That's why they have the addition of their Recall platform, because that really does help expand the capability."
"Some of the customization could be improved. Everything is provided for you as an easy solution to use, but working with it and doing specific development could be worked on a bit more in the scope of an incident response team."
"I would like to see a bit more strategic metrics instead of technical data. Information that I could show to my executive management team or board would be valuable."
"Integration with other security components needs improvement. It should have true integration as opposed to just being a separate pane of glass."
"One thing which I have found where there could be improvement is with regard to the architecture, a little bit: how the brains and sensors function. It needs more flexibility with regard to the brain. If there were some flexibility in that regard, that would be helpful, because changing the mode of the brain is complex. In some cases, the change is permanent. You cannot revert it."
"I would like to see data processed onshore. Right now, the cloud components, like Office 365, must be processed on servers outside of Australia. I would like to see a future adoption of onshore processing."
"The graphics and reports can be a little bit better."
"There are some loopholes you need to be aware of from a security perspective."
"It's not a cheap product, so the pricing could be improved."
"Technical support could be improved with quicker response times."
"I would like to see more artificial intelligence capabilities."
"If your network is on SolarWinds, and you notice that the traffic is bad because it says "user downloading a heavy file," it doesn't indicate which endpoint is downloading those heavy files. SolarWinds doesn't have the tools to be able to handle this kind of situation. You can just notice through your network device that the traffic is becoming overwhelming or heavy, but you cannot go inside and get more details related to the endpoint where it is happening. We would like SolarWinds to be able to handle this kind of situation and even manage the traffic inside a network from the endpoint to the network device. These would be good enhancements. It is mostly stable. The problem comes only when we want to add another SolarWinds model. SolarWinds has so many models, and sometimes when we want to add other models on the platforms that are reserved for our firm, it freezes. When this happens, we have to create a new VM for that model."
"This solution does not do a very good job when I am trying to look deeper into my internal network, in particular with respect to individual ports."
"The pricing is expensive."
"The Atlas module that is used for building the network map is very bad."
"It's scalable, but it could be simplified because it's not completely easy."
More SolarWinds NetFlow Traffic Analyzer Pricing and Cost Advice →
Nagios Network Analyzer is ranked 12th in Network Traffic Analysis (NTA) with 2 reviews while SolarWinds NetFlow Traffic Analyzer is ranked 6th in Network Traffic Analysis (NTA) with 9 reviews. Nagios Network Analyzer is rated 8.0, while SolarWinds NetFlow Traffic Analyzer is rated 7.8. The top reviewer of Nagios Network Analyzer writes "Easy to set up, integrates well with other solutions, and is largely quite stable". On the other hand, the top reviewer of SolarWinds NetFlow Traffic Analyzer writes "Good reporting allows us to proactively deal with bandwidth-related issues". Nagios Network Analyzer is most compared with Darktrace, whereas SolarWinds NetFlow Traffic Analyzer is most compared with Cisco Stealthwatch, Zabbix, Auvik and Centreon. See our Nagios Network Analyzer vs. SolarWinds NetFlow Traffic Analyzer report.
See our list of best Network Traffic Analysis (NTA) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
