We performed a comparison between Cisco Secure Network Analytics and LogRhythm NetMon based on real PeerSpot user reviews.
Find out in this report how the two Network Monitoring Software solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We can manage the entire system across the network and troubleshoot the pain points."
"It's a dependable product that is able to pinpoint where we have vulnerabilities if they occur."
"We find that Stealthwatch can detect the unseen."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"The most valuable features provided by this solution are visibility and information."
"Cisco Stealthwatch has predefined alerts for different types of security issues that might happen in the network. Whether it's PCs or servers that are used for botnets or Bitcoin mining we receive the alerts automatically. This functionality is what we receive from the solution out of the box."
"Cisco Secure Network Analytics has increased the visibility of what is happening in our network, and I think that's the most important reason to use it. We can see what is really happening instead of just looking at numbers from routers or switches."
"The most valuable features of this solution are the logging, keeping threats under control, and keeping our data and environment secure."
"StealthWatch lets me see the ports running in and out and the country. It has excellent reporting, telemetry, and artificial intelligence features. With the telemetry, I can set thresholds to detect sudden changes and the alarms go through the PLC parts. I can see all the ports running on that trunk."
"It is a stable solution...It is a scalable solution."
"The protocols with which you see the traffic for a particular website that a client has in their environment, for example, are valuable. We can monitor whether the traffic is up to the mark or whether they need to add more bandwidth. Also, we can see if we're able to get real-time environment data as well. The customization dashboard is really good. LogRhythm NetMon has its own in-built dashboards which are helpful in guiding customization."
"It has a very strong artificial intelligence engine."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"The analytics feature is the most valuable feature."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"NetMon's best feature is traffic analysis."
"The Wi-Fi side needs improvement."
"We've run into some issues with the configuration."
"The overall visibility into the actual device itself would be helpful. I don't just want support-specific data, but also to be able to see information such as CPU and other internal components or usage of the devices."
"There could be better integration on the programming side, which uses Python. StealthWatch could provide a template for Python to manage the switches. For example, it would be nice if StealthWatch bounced a port automatically it detected something anomalous."
"We need to be able to filter out internal IPs as non-threats."
"They should include Citrix VDIs in the next release."
"Its granularity for RBAC roles-based access control needs improvement."
"Some of our customers find this solution to be a little bit tough because they don't understand how to configure and use it."
"One update I would like to see is an agent-based client. Currently StealthWatch is network based."
"Some of the automated tasks we can perform on QRadar cannot be performed on LogRhythm because the solution has limitations."
"Could use a topology diagram which would help get an exact visual."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"The training for this product is not very good and needs to be improved."
"Sometimes it's hard to find the network devices' self-audit logs."
"LogRhythm NetMon's pricing model is an area of concern that should be made a little bit cheaper in comparison to the other players in the market currently."
More Cisco Secure Network Analytics Pricing and Cost Advice →
Cisco Secure Network Analytics is ranked 24th in Network Monitoring Software with 57 reviews while LogRhythm NetMon is ranked 57th in Network Monitoring Software with 9 reviews. Cisco Secure Network Analytics is rated 8.2, while LogRhythm NetMon is rated 7.6. The top reviewer of Cisco Secure Network Analytics writes "Increased the visibility of what is happening in our network". On the other hand, the top reviewer of LogRhythm NetMon writes "A stable and scalable tool useful for network behavior analysis, DPA, and network forensic services". Cisco Secure Network Analytics is most compared with Darktrace, Cisco Secure Cloud Analytics, ThousandEyes, Vectra AI and Arista NDR, whereas LogRhythm NetMon is most compared with PRTG Network Monitor, ObserverLIVE, SCOM and Zabbix. See our Cisco Secure Network Analytics vs. LogRhythm NetMon report.
See our list of best Network Monitoring Software vendors.
We monitor all Network Monitoring Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.