We performed a comparison between Arista NDR and Auvik Network Management (ANM) based on real PeerSpot user reviews.
Find out in this report how the two Network Traffic Analysis (NTA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We appreciate the value of the AML (structured query language). We receive security intel feeds for a specific type of malware or ransomware. AML queries looking for the activity is applied in almost real-time. Ultimately, this determines if the activity was not observed on the network."
"The interface itself is clean and easy to use, yet customizable. I like that I can create my own dashboards fairly easily so that I can see what is important to me. Also, the query language is pretty easy to use. I haven't needed to use it a ton, but as I need to go in and do different queries based on their requests, it has been fairly simple to use."
"The security knowledge graph has been very helpful in the sense that whenever you try a new security solution, especially one that's in the detection and response market, you're always worried about getting a lot of false positives or getting too many alerts and not being able to pick out the good from the bad or things that are actual security incidents versus normal day to day operations. We've been pleasantly surprised that Awake does a really good job of only alerting about things that we actually want to look into and understand. They do a good job of understanding normal operations out-of-the-box."
"The most valuable feature is the ability to see suspicious activity for devices inside my network. It helps me to quickly identify that activity and do analysis to see if it's expected or I need to mitigate that activity quickly."
"The query language that they have is quite valuable, especially because the sensor itself is storing some network activity and we're able to query that. That has been useful in a pinch because we don't necessarily use it just for threat hunting, but we also use it for debugging network issues. We can use it to ask questions and get answers about our network. For example: Which users and devices are using the VPN for RDP access? We can write a query pretty quickly and get an answer for that."
"Other solutions will say, "Hey, this device is doing something weird." But they don't aggregate that data point with other data points. With Awake you have what's called a "fact pattern." For example, if there's a smart toaster on the third floor that is beaconing out to an IP address in North Korea, sure that's bizarre. But if that toaster was made in North Korea it's not bizarre. Taking those two data points together, and automating something using machine-learning is something that no other solution is doing right now."
"Arista NDR's scalability is very good, making it easy to add more hardware components. You can order additional hardware and integrate it by stacking it with the existing setup. This feature cannot be seen in other NDR tools."
"The query language makes it easy to query the records on the network, to do searches for the various threat activities that we're looking for. The dashboard, the Security Knowledge Graph, displays information meaningfully and easily. I am able to find the information that I want to find pretty quickly."
"Credential management is the most valuable feature. It's helpful to have everything in one essential place."
"The cloud monitoring portion of Auvik that provides visibility into each piece of my infrastructure is the most valuable feature."
"The primary reason I wanted Auvik was SNMP. It discovers all the MIBs and pulls them. That's how it can monitor the things that other platforms don't."
"Topography mapping is incredibly useful, especially when it's functioning properly."
"The network map is fantastic. The backup of configs is also valuable. It does SSH into each network device and retains a copy of the configs on the machines as well as the change logs. So, when something suddenly stops, you can compare the configs to see what happened. You can do a side-by-side comparison of the configs to see exactly what changed. That's fantastic."
"Being able to see things like the hardware lifecycle, if our equipment is up to date, if connections are broken, or whether there are physical line breaks, is helpful. We're able to determine connectivity issues. We can monitor pretty much anything that is network-related."
"I like Auvik's alerts. We can configure the alerts for a specific timeframe, i.e., we can set it to alert us when devices have been offline for a specific amount of minutes. If a device or port is flapping, we can ignore it or allow only the first alert to come in and mute the subsequent alerts."
"The first feature that I appreciate is the topology drawing in real time. If our NOC wants to troubleshoot, they can go to the topology map and see that this access point is connected to that switch via that specific port. And when something changes in the topology, it's dynamically updated."
"Awake Security needs to move to a 24/7 support model in the MNDR space. Once they do that, it will make them even better."
"Arista NDR needs to open legal offices to be closer to customers and partners. It needs more visibility in the NDR market in the Middle East. While they are doing well, they lack sufficient engineers. They need to hire more engineers to meet the demand and expand their presence. The current team is good but not enough to fully capture the market."
"There's room for improvement with some of the definitions, because I don't have time and I'm not a Tier 4 analyst. I believe that is something they're working towards."
"The one thing that the Awake platform lacks is the ability to automate the ingestion of IOCs rather than having to import CSV files or JSON files manually."
"I would like to see the capability to import what's known as STIX/TAXII in an IOC format. It currently doesn't offer this."
"One concern I do have with Awake is that, ideally, it should be able identify high-risk users and devices and entities. However, we don't have confidence in their entity resolution, and we've provided this feedback to Awake. My understanding is that this is where some of the AI/ML is, and it hasn't been reliable in correctly identifying which device an activity is associated with. We have also encountered issues where it has merged two devices into one entity profile when they shouldn't be merged. The entity resolution is the weakest point of Awake so far."
"While the appliance is very good, and I think they're working on it, it would probably help if they integrated the management team cases into the appliance so that everything we are working on with them would be accessible on our platform, on the dashboard, on the portal. Right now, Awake is just an additional team that uses the appliance that we use and then we communicate with them directly. Communication isn't through the portal."
"When I looked at the competitors, such as Darktrace, they all have prettier interfaces. If Awake could make it a little more user-friendly, that would go a long way."
"The deployment could be better. It's something that we've done recently. Auvik uses something called a collector, and I added a collector to our main site. I only added it to the main site, but when it came to adding additional sites because this was in the testing phase, I had to reconfigure that collector. It wasn't overly clear about how to do that and how to share. They call it sharing a collector. I had to mess around a bit to reconfigure that collector and add some new sites."
"For pulling up the devices, the dashboard is a little bit sluggish. I know there is a lot of data, and I am starting to get nitpicky here, but this is the only thing. The dashboard is a little sluggish, and you have to keep the filter on sometimes."
"I would like to see some recommendations in terms of steps that could be taken to assess the alerts. A platform that I have used is Darktrace, which does security testing, and it let us know what was going on, what may have caused it, and what could be done... if Auvik could recommend common ways to go about doing what needs to be done to resolve an alert, that would be helpful."
"When I change IP addresses on a device or on a server, I have to wait for Auvik to figure out that change. It will tell me the device is offline until Auvik scans the whole subnet again and finds it. If I change 25 devices, I'll get 50 emails in a short time because they've gone offline."
"Although the network topology is excellent, it has a hard time picking up some devices on the network. A device might not be fully supported, or Auvik is unable to pull all the information from it."
"I would like to see Auvik have some more documentation with a typical CM solution like Splunk. I want to see more examples of things like configuring port forwarding for firewalls. In addition to collecting data from different types of appliances, I would like to customize more of the metrics for each appliance."
"The pricing model could also be improved, as the unlimited selection isn't unlimited. The billing work on the build devices and components, and I've tried to set up the solution in a few different configurations, resulting in multiple build devices each time. Therefore, I question the cost-effectiveness for a business of our size."
"The deployment of the probe onto a particular device could be improved. That usually requires one of our level-two people to step in from the help desk team. It would be much better if it were a click-and-go deployment. What I would like to see in particular is the ability to download an MSI builder for a probe for a particular building. We would simply double-click and install it onto the machine and have it work. Having to roll through with the entire API key is a little time-consuming."
More Auvik Network Management (ANM) Pricing and Cost Advice →
Arista NDR is ranked 8th in Network Traffic Analysis (NTA) with 14 reviews while Auvik Network Management (ANM) is ranked 3rd in Network Traffic Analysis (NTA) with 133 reviews. Arista NDR is rated 9.0, while Auvik Network Management (ANM) is rated 8.8. The top reviewer of Arista NDR writes "Gives us network layer visibility into things that may not be covered by other monitoring tools, such as shadow IT". On the other hand, the top reviewer of Auvik Network Management (ANM) writes "Enables us to get on top of issues before they become an outage". Arista NDR is most compared with Palo Alto Networks Advanced Threat Prevention, Vectra AI, Trend Micro Deep Discovery, Cisco Secure Network Analytics and Darktrace, whereas Auvik Network Management (ANM) is most compared with PRTG Network Monitor, LogicMonitor, SolarWinds NPM, Meraki Dashboard and Zabbix. See our Arista NDR vs. Auvik Network Management (ANM) report.
See our list of best Network Traffic Analysis (NTA) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
