We performed a comparison between Cisco Secure Network Analytics and Corelight based on real PeerSpot user reviews.
Find out in this report how the two Network Traffic Analysis (NTA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The beginning of any security investigation starts with net flow data."
"There are already many functionalities, so I don't think there is anything to improve."
"Stability is the most valuable feature we have seen in this solution."
"Most of the engineers I've worked with have been really good. Very knowledgeable and easy to work with."
"The feature most valuable for us is to gain visibility of what is actually floating through, so we can stop it based on whether it's good or bad traffic."
"The solution allowed us to not only get gain insight but also start collaborating with other tools."
"The search options on Cisco Stealthwatch are the most valuable. You can get very granular with it, down to the kilobits or the seconds if you want. The product supports any time frame that you need, so that is nice."
"The most valuable feature is anomaly detection, where it finds things that are not allowed internally."
"The most valuable feature is the embedded IDS from Suricata."
"It is easy to deploy and easy to handle."
"It's an easy way for us to get visibility in a client's environment."
"Corelight is easy to use."
"It's easy to create additional dashboards specific to supporting specific tasks."
"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"The initial setup was complex."
"Initially, I felt Cisco Secure Network Analytics lacked integration with Splunk."
"Reliance on Java. Get away from that."
"I would like the search page available with Cisco Stealthwatch to be more intuitive. The previous release was better than the current one for the UI."
"They should include Citrix VDIs in the next release."
"Cisco could improve the administration for the customers."
"Stealthwatch is still maturing in AI. It uses artificial intelligence for predictions, but AI still needs to mature. It is in a phase where you get 95% correct detection. As its AI engine learns more, it will become more accurate. This is applicable to all the devices that are using AI because they support both supervised and unsupervised machine learning. The accuracy in the case of supervised machine learning is dependent on the data you feed into the box. The accuracy in the case of unsupervised machine learning is dependent on the algorithm. The algorithm matures depending on retrospective learning, and this is how it is able to detect zero-day attacks."
"The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs."
"In the next release, building a graphical user interface would be helpful."
"Corelight hasn’t added features in a long time."
"They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."
"Machine learning could be a good improvement, but it's very costly."
More Cisco Secure Network Analytics Pricing and Cost Advice →
Cisco Secure Network Analytics is ranked 4th in Network Traffic Analysis (NTA) with 57 reviews while Corelight is ranked 7th in Network Traffic Analysis (NTA) with 5 reviews. Cisco Secure Network Analytics is rated 8.2, while Corelight is rated 9.0. The top reviewer of Cisco Secure Network Analytics writes "Increased the visibility of what is happening in our network". On the other hand, the top reviewer of Corelight writes "An open-source solution that gave us insight into our clients' network traffic flow ". Cisco Secure Network Analytics is most compared with Darktrace, Cisco Secure Cloud Analytics, ThousandEyes, Vectra AI and Splunk User Behavior Analytics, whereas Corelight is most compared with ExtraHop Reveal(x), Darktrace, Vectra AI, Arista NDR and SolarWinds NetFlow Traffic Analyzer. See our Cisco Secure Network Analytics vs. Corelight report.
See our list of best Network Traffic Analysis (NTA) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.