NetWitness XDR vs SolarWinds NetFlow Traffic Analyzer comparison

Cancel
You must select at least 2 products to compare!
Microsoft Logo
5,744 views|4,276 comparisons
98% willing to recommend
NetWitness Logo
517 views|360 comparisons
87% willing to recommend
SolarWinds Logo
1,804 views|1,155 comparisons
82% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between NetWitness XDR and SolarWinds NetFlow Traffic Analyzer based on real PeerSpot user reviews.

Find out what your peers are saying about SentinelOne, CrowdStrike, Palo Alto Networks and others in Extended Detection and Response (XDR).
To learn more, read our detailed Extended Detection and Response (XDR) Report (Updated: April 2024).
767,995 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The incident threat response and its ability to facilitate effective remediation against threats are the standout features.""The most valuable features of Microsoft 365 Defender are the combination of all the capabilities and centralized management.""I like how Microsoft XDR and the other Microsoft products are integrated into a single unified security stack covering identity access management, endpoint protection, email, cloud applications, etc.""We are connected to Microsoft and have every laptop enrolled. This acts as an endpoint. The tool helps me check security and compliance. I can also check what a device is doing.""The product is very easy to use.""Microsoft 365 Defender is a stable solution.""Among the most valuable features are the alert timeline, the alert story, which is pretty detailed. It gives us complete insight into what exactly happened on the endpoint. It doesn't just say, "Malware detected." It tells us what caused that malware to be detected and how it was detected. It gives us a complete timeline from beginning to end.""Microsoft Defender's most critical component is its CASB solution. It has many built-in policies that can improve your organization's cloud security posture. It's effective regardless of where your users are, which is critical because most users are working from home. It's cloud-based, so nothing is on-premise."

More Microsoft Defender XDR Pros →

"It helps our security team respond more accurately when there are threats, then we get less false positives or negatives.""We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues.""The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good.""This solution allows us to locate the malware in real-time.""The most valuable feature is the way it captures the traffic, and it contains every detail of the communication.""The interface of this solution is very flexible and easy to use.""It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great.""They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."

More NetWitness XDR Pros →

"The integration with other SolarWinds products is good.""For managing the traffic, it provides you a response about whether the traffic is down, up, or heavy, which is a very powerful feature. It has a good response time. We have been using this solution for many years, and we don't have any problem with this solution.""With SolarWinds, we are now able to accurately gauge bandwidth consumption.""The most valuable feature is the alarm that is set up to trigger based on bandwidth utilization.""What I like about SolarWinds NetFlow Traffic Analyzer is that it's useful for analyzing traffic. It also has an application visibility feature that lets you control applications.""For stability, I would give SolarWinds NetFlow Traffic Analyzer a rating of ten out of ten.""The bandwidth monitoring functionality is one of the most important features for our customers. When the customer notices that their bandwidth usage is too high for some reason, they will use the traffic analysis within SolarWinds NTA to identify which protocols (e.g. HTTPS) or applications are using up the bandwidth.""The most valuable feature is the ability to look for any increases in bandwidth over time so that we can plan before it becomes critical."

More SolarWinds NetFlow Traffic Analyzer Pros →

Cons
"I would like more of the features in Defender for 365 to be included in the smaller licenses. Even if I buy a small license and don't need everything, security shouldn't be a question. Security is one of the main aspects of all projects from our side, so it would be nice to have more features in the smaller licenses.""It would be beneficial to have a more seamless experience with everything consolidated in one place, particularly when dealing with aspects related to the Exchange console.""In the beginning, it's difficult to navigate the system because it is quite large. Just trying to find your way and understand how the system works can be hard. After spending quite a lot of time searching it's a lot easier, but I wish it were a bit more user-friendly when you're trying to find things.""There should be better information for experts on features in the solution. What I see when reading about features in Microsoft 365 Defender is that it is always general information. If Microsoft could go deeper into details for the experts about how to use the tools, usage of it would be more familiar and it would be easier to use.""Since all of our databases are updated and located in the cloud, I would like additional support for this.""A simple dashboard without having to use MS Sentinel would be a welcome improvement.""Support is hit or miss. Microsoft wants you to buy premium support contracts. Though they call themselves professional support, it's almost like throwing questions into a black hole. You get an answer, but it's never helpful.""Correctly updated records are the most significant area for improvement. There have been times when we were notified of a required fix; we would carry out the fix and confirm it but still get the same notification a week later. This seems to be a delay in records being updated and leads to false reporting, which is something that needs to be fixed."

More Microsoft Defender XDR Cons →

"The solution lacks a reporting engine.""The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features.""The initial setup requires a high level of skill.""RSA NetWitness Network could improve on integration with non-native application integration.""Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training.""The contamination feature could be improved.""We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues.""This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."

More NetWitness XDR Cons →

"There are some areas for improvement in SolarWinds NetFlow Traffic Analyzer. There are some challenges with the solution when compared to other monitoring tools such as difficulty in operations and difficulty with backup installation. My team is currently trying out different solutions but would need to see how it goes.""This solution would benefit from having more security-based communications between the actual devices and the software itself.""As people always complain about the pricing for SolarWinds NetFlow Traffic Analyzer, it's an area for improvement in the solution. People find it expensive. Another area for improvement in SolarWinds NetFlow Traffic Analyzer is support, as it could be better.""It is a scalable solution, but it is costly to scale. Therefore, I would rate scalability at eight out of ten.""Technical support could be improved with quicker response times.""It does not flow. It cannot do our metric performance monitoring. So it is very limited. They can do it but in a very limited fashion. It is only good for SNMP-based alerts.""They should work on the configuration of the Log Analyzer feature.""It is very slow to pick the dynamics of the network."

More SolarWinds NetFlow Traffic Analyzer Cons →

Pricing and Cost Advice
  • "The solutions price is fair for what they offer."
  • "The price could be better. Normally, the costs depend on the country you're located in for the license. When we were in the initial stage, we went with the E5 license they call premium standard. It cost us around $5.20 per month for four users."
  • "The price of the solution is high compared to others and we have lost some customers because of it."
  • "Microsoft is not competitive with the pricing of the solution. The competitors are able to offer lower discounts. The price of the solution is higher."
  • "We have a lot of problems in Latin America regarding the price of Microsoft 365 Defender, because the relationship between dollars and the money of the different countries, it's is a lot. Many customers that have small businesses say that they would like the solution but it is too expensive. However, large companies do not find the cost an issue."
  • "The most valuable licensing option is expensive, so pricing could be improved. Licensing options for this solution also need to be consolidated, because they frequently change."
  • "Microsoft should provide lower-level licensing options. They should do it in such a way that even an individual could purchase a license, and it should be entirely flexible."
  • "They have moved from a licensing model to pay-per-use... The question is: What happens if, for any reason, there's not enough budget to accept this model? That could be a great problem."
  • More Microsoft Defender XDR Pricing and Cost Advice →

  • "With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
  • "They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
  • "It is highly scalable. It can be bought based on your requirements."
  • "I do not have any opinion on the pricing or licensing of the product."
  • "The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
  • "It is an expensive product."
  • "The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
  • "The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
  • More NetWitness XDR Pricing and Cost Advice →

  • "For our environment, we pay approximately $25,000 USD yearly."
  • "The licensing for this solution is based on the number of nodes."
  • "The price of this solution is exceptional."
  • "While the pricing is fair, it could be better."
  • "The pricing is reasonable."
  • "We pay yearly, and we are happy with its price."
  • "We have licenses for SolarWinds NetFlow Traffic Analyzer. In terms of pricing, its license is not that expensive versus other tools such as HP."
  • "Pricing for SolarWinds NetFlow Traffic Analyzer is very high. I have a customer that needs the solution but doesn't have the budget for SolarWinds NetFlow Traffic Analyzer because the problem is that you can't use the solution only. You have to buy requirements such as the SolarWinds NPM first, and some companies don't have the budget for all the required components and modules. SolarWinds NetFlow Traffic Analyzer can cost up to $10,000, and some customers don't have that budget. Another product has all the modules that SolarWinds NetFlow Traffic Analyzer has, with a very low price, that can be a replacement, which is ManageEngine NetFlow Analyzer. PRTG is another solution that can replace SolarWinds NetFlow Traffic Analyzer."
  • More SolarWinds NetFlow Traffic Analyzer Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
    767,995 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I like Defender XDR's automation capabilities. XDR isn't automated by default, but you can automate it to respond. If an… more »
    Top Answer:While Microsoft Defender XDR carries a higher cost, its ease of use compared to Defender may justify the investment.
    Top Answer:Defender XDR has good threat visibility, but it could be better in some areas, like when we are hunting for a specific… more »
    Top Answer:Technical support is knowledgeable.
    Top Answer:The solution is expensive. I'd rate it at a one or two out of five. They need to adjust it to keep up with the… more »
    Top Answer:I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat… more »
    Top Answer:I have worked from 1973 with all kind of systems in large enterprises across the world. And have experience with all… more »
    Top Answer:The product is not too expensive. The license is renewed yearly. When it comes to support for NetFlow Traffic Analyzer… more »
    Top Answer:In terms of improvement, it can be complex to set up and configure, and the user guides provided can also be complex… more »
    Comparisons
    Also Known As
    Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender
    RSA ECAT, NetWitness Network
    Netflow Traffic Analyzer
    Learn More
    Overview

    Microsoft Defender XDR is a comprehensive security solution designed to protect against threats in the Microsoft 365 environment. 

    It offers robust security measures, comprehensive threat detection capabilities, and an efficient incident response system. With seamless integration with other Microsoft products and a user-friendly interface, it simplifies security management tasks. 

    Users have found it effective in detecting and preventing various types of attacks, such as phishing attempts, malware infections, and data breaches.

    Watch the Microsoft demo video here: Microsoft Defender XDR demo video.

    Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness XDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

    SolarWinds Netflow Traffic Analyzer enables you to capture data from continuous streams of network traffic and convert those raw numbers into easy-to-interpret charts and tables that quantify exactly how the corporate network is being used, by whom, and for what purpose.
    Sample Customers
    Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.
    ADP, Ameritas, Partners Healthcare
    Oceaneering International, Asia Pacific Network Information Centre, 335th Signal Command, Immofori
    Top Industries
    REVIEWERS
    Manufacturing Company19%
    Computer Software Company14%
    Government11%
    Financial Services Firm11%
    VISITORS READING REVIEWS
    Computer Software Company18%
    Financial Services Firm10%
    Government8%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company15%
    Government8%
    Manufacturing Company7%
    REVIEWERS
    Manufacturing Company29%
    Financial Services Firm18%
    Real Estate/Law Firm6%
    Non Tech Company6%
    VISITORS READING REVIEWS
    Educational Organization62%
    Computer Software Company6%
    Financial Services Firm5%
    Government3%
    Company Size
    REVIEWERS
    Small Business44%
    Midsize Enterprise23%
    Large Enterprise33%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise17%
    Large Enterprise57%
    REVIEWERS
    Small Business59%
    Midsize Enterprise24%
    Large Enterprise18%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise16%
    Large Enterprise67%
    REVIEWERS
    Small Business32%
    Midsize Enterprise12%
    Large Enterprise56%
    VISITORS READING REVIEWS
    Small Business8%
    Midsize Enterprise67%
    Large Enterprise25%
    Buyer's Guide
    Extended Detection and Response (XDR)
    April 2024
    Find out what your peers are saying about SentinelOne, CrowdStrike, Palo Alto Networks and others in Extended Detection and Response (XDR). Updated: April 2024.
    767,995 professionals have used our research since 2012.

    NetWitness XDR is ranked 17th in Extended Detection and Response (XDR) with 15 reviews while SolarWinds NetFlow Traffic Analyzer is ranked 6th in Network Traffic Analysis (NTA) with 34 reviews. NetWitness XDR is rated 8.0, while SolarWinds NetFlow Traffic Analyzer is rated 7.6. The top reviewer of NetWitness XDR writes "Beneficial single unified dashboard, good native application integration, and high availability". On the other hand, the top reviewer of SolarWinds NetFlow Traffic Analyzer writes "Displays traffic visibility and efficient traffic flows". NetWitness XDR is most compared with Darktrace, ExtraHop Reveal(x), CrowdStrike Falcon, SentinelOne Singularity Complete and Microsoft Defender for Endpoint, whereas SolarWinds NetFlow Traffic Analyzer is most compared with ManageEngine NetFlow Analyzer, Cisco Secure Network Analytics, Zabbix, SolarWinds NPM and Darktrace.

    We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.