Cisco Secure Network Analytics vs. NETSCOUT nGeniusONE

Cisco
Secure Network Analytics is a compulsion to any organization looking to secure their network in silence with a complete record and analysis of the threats. All the critical information of the client is also preserved for instance and assistance for future needs. Cyber-attacks can’t even think to roam about your
network in any case.

Incentivized

It’s best for troubleshooting issues that require a packet level analysis. By having source/destination you can have a view into how the packets are traversing the network. If alerts/baselines are set up it can help identify something out of the norm. Very useful for VoIP applications as well. Would not recommend for small scale environments.

Incentivized

• It's really good at mapping out like what applications are, like who's talking to what. To see if someone thinks that a particular application is only being used a certain way and we can validate what's talking to that system with the tool.

Incentivized

• The graphical interface has to be the key benefit of NetScout. I am more of a packet analyzer but the interface gives the upper levels easier view into the network.
• The breakdown of sites is useful.
• The ability of the break the traffic down and go into the packet analyzer straight from the graphical interface. Saves a lot of time writing filters with just simple clicks.

Incentivized

• Tool is little hard to configure so need to be light to save resource consumption.
• Features are so in-depth that integrated guidance should be available to help the users on how to use.
• Graphical view can be improved to make it more convenient to understand the data representation.

Incentivized

• Better access to resources
• Pricing in this niche market is very high, hard for the little guy to take advantage of these solutions

Incentivized

Cisco Secure Network Analytics is a fantastic tool, but does require some setup and upkeep which may turn off smaller IT Security teams. However, once all the flows are set up and the product is functioning with the proper rules, the insight into your network is fantastic. For us, the product has a significant ROI and will be a product we keep up on.

Incentivized

Strong and complete tool which gives comprehensive methods to discover cyber security incidents and prevent data leakage. In case of common use of Cisco StealthWatch and Cisco ISE, you will receive [the] ability [to] not just discover cyber security incidents but also dynamically respond to them. This makes StealthWatch one of most valuable products through[out] [the] whole Cisco Security product portfolio.

Incentivized

It provides a lot of useful information, but it's not always easy/intuitive to find it. It really needs to get a fully functional API integrated to support automation and integration with other monitoring and analytics tools to enable faster decision making. On the other hand, it gathers a lot of useful information from complex networks that are useful for capacity management and faster incident isolation and resolution.

Incentivized

We haven't had too many issues with the uptime and availability of CSNA, but the application does have a lot of dependancies and we have seen issues after an upgrade that caused an outage for several hours.

Incentivized

Overall winner because it exceeds our expectations by answering all our requirements and at the same time empowers our operations thru other built-in capabilities it has. Visibility is a key to security operations and Cisco StealthWatch really gives us a magnifying glass to check all logs in the network for threat intelligence and threat hunting.

We have a dedicated OSE who has been very helpful. Besides that, we have little experience beyond this specific model

Incentivized

Implementation of the product can be tedious, especially fine tuning its rules to customize it to your environment. However, after that is done, CSNA is a very useful and flexible product that would enhance the security posture of any corporate network.

Incentivized

While other platforms such as Nagios and Solarwinds NTA provide visibility of the traffic, it either (*) does not provide API/programmatic way to pull the data to other platforms or (*) does not interface with secondary security systems to report on malicious traffic activity. Ultimately, these platforms accomplish the visibility, but do little else in the overall IT/security ecosystem of product, making them "dead end" data flow products where data goes in but does not share elsewhere.

Incentivized

NETSCOUT nGeniusONE is the best solution which we have encountered so far. The best part about this is that it can be integrated with various third party tool for more visibility and behavior analysis. The dashboard is loaded with a lot of useful features which gives the complete trend analysis of connectivity loss and network flaps and helps to identify the critical sites which is not present in other technology solution. This is an incredible network performance monitoring tool

Incentivized

• Once tuned and baselines established, it is far easier to identify issues on a network
• Management is able to look at the dashboard and fairly quickly get an update on the status of how the network is performing and what threats may be out there
• Reports can be scheduled to send on a regular basis to all involved with management of the infrastructure and the security team

Incentivized

• NetScout nGeniusONE helps to reduce the time and effort (people to involve) to react on network outages, speed up the investigation progress, and much more quickly to identify the root cause.
• Proactive helps the operation team to identify the underline problems and help the business to take actions before the issue starts to impact the customer's business. Help to reduce the incidents and outages.
• Help the operation teams to better understand the performance and health of the network from a higher level and end to end perspective, improve the efficiency of work.

Incentivized