Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Sophos EPP Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Sentiment score
6.8
Sophos EPP Suite boosts ROI in 12-16 months, enhancing productivity, protection, and compliance while ensuring customer satisfaction.
 

Customer Service

Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Sentiment score
7.9
User reviews of Sophos EPP Suite support highlight responsiveness and expertise, though some experience delays and ineffective resolutions.
I rate Sophos support as excellent, giving it a ten out of ten.
Assistant Manager, Information Technology at Swades Foundation
They have introduced a dedicated role called Technical Account Manager (TAM) for every partner.
Director at Infosonik Systems Ltd
The Sophos people here in South Africa are very helpful.
IT Consultant at Inception
 

Scalability Issues

Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
Sentiment score
9.0
Sophos EPP Suite offers scalable solutions for diverse organizations, accommodating growth and simplifying cloud deployments, despite third-party integration limits.
 

Stability Issues

Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Sentiment score
8.4
Sophos EPP Suite is generally stable but has minor glitches; some users seek other solutions for better stability.
 

Room For Improvement

NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Sophos EPP Suite needs improvements in migration, resource usage, integration, support, and user interface for better performance and compatibility.
I think there should be templates in place so I do not have to make everything from scratch; having templates for NATing, de-NATing, and LAN to WAN rules would save us time.
Assistant Manager, Information Technology at Swades Foundation
The enterprise integration is very poor, requiring a lot of manual work.
IT Consultant at Inception
Users have noted that daily upload limits per device, overall data lake storage capacity tied to licenses, and daily API query limits can be restrictive.
Director at Infosonik Systems Ltd
 

Setup Cost

Sophos EPP Suite offers competitive, often affordable pricing, with discounts for longer licenses, despite varying costs by features and users.
The cost is reasonable and cheaper than other alternatives.
Director at Infosonik Systems Ltd
 

Valuable Features

NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
Sophos EPP Suite offers seamless integration, advanced threat detection, centralized management, and user-friendly features for comprehensive security solutions.
Web filtering helps provide protection by allowing me to block unwanted and unauthorized websites from Sophos EPP Suite, which helps prevent unauthorized intrusion, thus keeping our organization servers secure.
Assistant Manager, Information Technology at Swades Foundation
Sophos Central serves as one central management portal for managing firewalls, endpoint, Sophos encryption, and mobile device management solutions.
Director at Infosonik Systems Ltd
With the reseller management, I can manage multiple clients without having to log in to each client.
IT Consultant at Inception
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
58th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (TIP) (39th), Endpoint Detection and Response (EDR) (59th), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (36th)
Sophos EPP Suite
Ranking in Endpoint Protection Platform (EPP)
30th
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
61
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of December 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of NetWitness NDR is 0.5%, up from 0.2% compared to the previous year. The mindshare of Sophos EPP Suite is 1.1%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
Sophos EPP Suite1.1%
NetWitness NDR0.5%
Other98.4%
Endpoint Protection Platform (EPP)
 

Featured Reviews

reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Reliable and good support but can be expensive
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to not only rely on the intelligence of the engineer in charge but to have some threat intelligence and some seeds of IOCs and to have the host have some artificial intelligence to reduce the number of false positives. I don't see this solution being very scalable. The solution is pricey.
Sabbir Ahmed - PeerSpot reviewer
Director at Infosonik Systems Ltd
Experience significant threat prevention advancements with user-friendly deployment
The feature is called relay server, and some people refer to it as a cache server. The Sophos EPP Suite is scalable. Some customers in banks typically have 5,000 to 7,000 users. One customer started with 1,000 users and has now extended to 4,000 users. Some customers are using up to 8,000 users without any issues. Regarding AI elements in the Sophos EPP Suite, firewalls have already introduced AI features. They have integrated AI models similar to ChatGPT in firewalls. These AI features should be introduced in endpoint XDR as well. Key features for comprehensive detection and prevention include advanced threat prevention, ransomware protections, exploit prevention, and AI-powered detections. Extended visibility and data analysis include cross-product data correlations. They have a data lake, live discover, and threat graphs. They also offer AI case summary and AI common analysis, accessible from Sophos Central, which is the management portal for Sophos XDR. Sophos Central serves as one central management portal for managing firewalls, endpoint, Sophos encryption, and mobile device management solutions. This centralized management is particularly appealing to customers.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Computer Software Company
10%
Manufacturing Company
9%
Performing Arts
7%
Computer Software Company
12%
Manufacturing Company
12%
Educational Organization
10%
Performing Arts
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise7
Large Enterprise14
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Sophos EPP Suite?
Sophos EPP Suite is a powerful antivirus.
What needs improvement with Sophos EPP Suite?
To make Sophos EPP Suite better, some features could be added, but currently, whatever I require is available, and the interface is good. I think there should be templates in place so I do not have...
 

Also Known As

RSA ECAT, NetWitness Network
EPP Suite
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
EK Services
Find out what your peers are saying about NetWitness NDR vs. Sophos EPP Suite and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.