Download the Network Monitoring Software Buyer's Guide including reviews and more. Updated: January 2023
Identify Emerging Threats on Your Network in Real Time
Transform your physical or virtual system into a network forensics sensor in a matter of minutes for free with LogRhythm's NetMon Freemium. Your investigations will come together effortlessly with extensive corresponding metadata, full packet capture, and customizable advanced correlation.. Detect network-based threats with real-time network monitoring and big data analytics
Get the visibility you need with NetMon.
LogRhythm NetMon was previously known as LogRhythm Network Monitor .
Sera-Brynn
"NetMon's licensing costs about $85k per year, with some extra costs for support."
Our client has given us IP addresses that must be assigned to a few devices at their end, such as networks, network devices, and firewalls, that we monitor using NetMon. We see whether those packets have been captured properly and what kind of traffic has been enabled like HTTPS, HTTP, and DNS servers. We also monitor how the traffic is flowing and how much data has been downloaded through one IP.
LogRhythm NetMon has helped us create a more robust environment. We have more effective monitoring.
The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well.
The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization.
There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there.
The console can be improved in terms of access. It takes time to load the whole tool, though it might not all be related to NetMon. It could be related to the server. If there are a lot of VPN hops in between, then there will be the possibility of lag time.
I've been using this solution for about a year.
It's a stable solution.
It's a scalable solution. We have nine companies who use the solution, and we have one more client who is getting ready to use it as well.
NetMon's technical support is good, and I would give them a rating of ten out of ten.
Positive
The initial setup is straightforward. I was able to install the whole OS on the hardware and integrate it with my SIEM environment.
If you have had exposure to infrastructure and know how to establish or set up a server, you will be able to deploy NetMon yourself. If not, you may need one more person.
I deployed it myself with some initial help from the infrastructure team.
Check your requirements and the infrastructure so that you know the type of license you need to obtain. It's a good, user-friendly tool. If you have a bit of background in security, you'll be able to understand NetMon easily. On a scale from one to ten, I would rate NetMon at eight.
