We performed a comparison between Arista NDR and SolarWinds NetFlow Traffic Analyzer based on real PeerSpot user reviews.
Find out in this report how the two Network Traffic Analysis (NTA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."This solution’s encrypted traffic analysis helps us stay in compliance with government regulations. It is all about understanding data exfiltration, what is ingressing and egressing in our network. One common attack vector is exfiltrating data using encryption. My capabilities to see potential data exfiltration over encrypted traffic is second to none now."
"The interface itself is clean and easy to use, yet customizable. I like that I can create my own dashboards fairly easily so that I can see what is important to me. Also, the query language is pretty easy to use. I haven't needed to use it a ton, but as I need to go in and do different queries based on their requests, it has been fairly simple to use."
"When I create a workbench query in Awake to do threat hunting, it's much easier to query. You get a dictionary popup immediately when you try to type a new query. It says, "You want to search for a device?" Then you type in "D-E," and it gives you a list of commands, like device, data set behavior, etc. That gives you the ability to build your own query."
"The security knowledge graph has been very helpful in the sense that whenever you try a new security solution, especially one that's in the detection and response market, you're always worried about getting a lot of false positives or getting too many alerts and not being able to pick out the good from the bad or things that are actual security incidents versus normal day to day operations. We've been pleasantly surprised that Awake does a really good job of only alerting about things that we actually want to look into and understand. They do a good job of understanding normal operations out-of-the-box."
"Other solutions will say, "Hey, this device is doing something weird." But they don't aggregate that data point with other data points. With Awake you have what's called a "fact pattern." For example, if there's a smart toaster on the third floor that is beaconing out to an IP address in North Korea, sure that's bizarre. But if that toaster was made in North Korea it's not bizarre. Taking those two data points together, and automating something using machine-learning is something that no other solution is doing right now."
"This solution help us monitor devices used on our network by insiders, contractors, partners, or suppliers. Its correlation and identification of specific endpoints is very good, especially since we have a large, virtualized environment. It discerns this fairly well. Some of the issues that we have had with other tools is we sometimes are not able to tell the difference between users on some of those virtualized instances."
"The query language makes it easy to query the records on the network, to do searches for the various threat activities that we're looking for. The dashboard, the Security Knowledge Graph, displays information meaningfully and easily. I am able to find the information that I want to find pretty quickly."
"We appreciate the value of the AML (structured query language). We receive security intel feeds for a specific type of malware or ransomware. AML queries looking for the activity is applied in almost real-time. Ultimately, this determines if the activity was not observed on the network."
"As it offers enterprise solutions, it has all the essential features for business."
"It doesn't cost too much."
"What my organization likes best about SolarWinds NetFlow Traffic Analyzer is its easy deployment. It's also well-integrated in terms of monitoring because my organization also uses a SolarWinds solution for monitoring. You can connect SolarWinds NetFlow Traffic Analyzer directly to that monitoring tool to get information. My organization also finds the default graphs that appear before the configuration in SolarWinds NetFlow Traffic Analyzer very useful."
"With SolarWinds, we are now able to accurately gauge bandwidth consumption."
"What the network team found most valuable in SolarWinds NetFlow Traffic Analyzer is that it helps them to troubleshoot or analyze the issue. For example, traffic that comes from our location: India, goes to the US, so for the network team to analyze where the traffic comes from and where it is directed, and whether the packets are being dropped, they use SolarWinds NetFlow Traffic Analyzer. The network team also likes that through the solution, they can analyze the complete traffic utilization and how they're going to use it. SolarWinds NetFlow Traffic Analyzer is user-friendly. The team finds it comfortable to use."
"NTA's most valuable feature is traffic analysis and visibility."
"The monitoring is perfect, showing you the details for the utilization of resources and network bandwidth."
"It is great at telling you if your devices are working and it keeps an eye on your network's overall performance."
"Be prepared to update your SOPs to have your analysts work in another tool separately. There are some limitations in the integrations right now. One of the things that I want from a security standpoint is integration with multiple tools so I don't need to have my analysts logging into each individual tool."
"They've been focused on really developing their data science, their ability to detect, but over time, they need to be able to tie into other systems because other systems might detect something that they don't."
"There's room for improvement with some of the definitions, because I don't have time and I'm not a Tier 4 analyst. I believe that is something they're working towards."
"While the appliance is very good, and I think they're working on it, it would probably help if they integrated the management team cases into the appliance so that everything we are working on with them would be accessible on our platform, on the dashboard, on the portal. Right now, Awake is just an additional team that uses the appliance that we use and then we communicate with them directly. Communication isn't through the portal."
"One thing I would like to see is a little bit more education or experience on AWS cloud for their managed services team. We've explained how we have the information set up, that the traffic coming in goes to the AWS load balancer and then gets sent on to our internal servers... but when I get notices they always tell me this traffic is coming from the IPs belonging to the load balancers, not the source IPs. So a little bit more education for their team about how AWS manages the traffic might help out."
"I would like to see the capability to import what's known as STIX/TAXII in an IOC format. It currently doesn't offer this."
"Awake Security needs to move to a 24/7 support model in the MNDR space. Once they do that, it will make them even better."
"Arista NDR needs to open legal offices to be closer to customers and partners. It needs more visibility in the NDR market in the Middle East. While they are doing well, they lack sufficient engineers. They need to hire more engineers to meet the demand and expand their presence. The current team is good but not enough to fully capture the market."
"This solution does not do a very good job when I am trying to look deeper into my internal network, in particular with respect to individual ports."
"The solution needs better log management and log coordination with tools."
"What needs improvement in SolarWinds NetFlow Traffic Analyzer is performance because sometimes, my team struggles too much for the solution to perform correctly for a specific deployment in my organization. Having a more detailed view in SolarWinds NetFlow Traffic Analyzer is another area for improvement, but that's more part of the protocol than the actual solution."
"If your network is on SolarWinds, and you notice that the traffic is bad because it says "user downloading a heavy file," it doesn't indicate which endpoint is downloading those heavy files. SolarWinds doesn't have the tools to be able to handle this kind of situation. You can just notice through your network device that the traffic is becoming overwhelming or heavy, but you cannot go inside and get more details related to the endpoint where it is happening. We would like SolarWinds to be able to handle this kind of situation and even manage the traffic inside a network from the endpoint to the network device. These would be good enhancements. It is mostly stable. The problem comes only when we want to add another SolarWinds model. SolarWinds has so many models, and sometimes when we want to add other models on the platforms that are reserved for our firm, it freezes. When this happens, we have to create a new VM for that model."
"The problem is that SolarWinds is trying to bolt in too much and that can leave bugs, which you have to then sort out, leaving the product unstable. SolarWinds needs to try and slow down and improve the stability of the product, as opposed to bringing out more and more features."
"It's scalable, but it could be simplified because it's not completely easy."
"An area for improvement in SolarWinds NetFlow Traffic Analyzer is application visibility because some applications aren't being recognized correctly. You can see applications such as Facebook and YouTube, but SolarWinds NetFlow Traffic Analyzer needs to have more visibility into more applications. Currently, SolarWinds fails to detect more powerful applications, such as Zoom and Teams. If SolarWinds NetFlow Traffic Analyzer can recognize every application and be able to report on each in terms of bandwidth, then that would be good. This is what I'd like to see in the next release of the solution."
"There is room for improvement when it comes to the traffic generated by the analyzer and the analysis of that traffic."
More SolarWinds NetFlow Traffic Analyzer Pricing and Cost Advice →
Arista NDR is ranked 8th in Network Traffic Analysis (NTA) with 14 reviews while SolarWinds NetFlow Traffic Analyzer is ranked 6th in Network Traffic Analysis (NTA) with 34 reviews. Arista NDR is rated 9.0, while SolarWinds NetFlow Traffic Analyzer is rated 7.6. The top reviewer of Arista NDR writes "Gives us network layer visibility into things that may not be covered by other monitoring tools, such as shadow IT". On the other hand, the top reviewer of SolarWinds NetFlow Traffic Analyzer writes "Displays traffic visibility and efficient traffic flows". Arista NDR is most compared with Palo Alto Networks Advanced Threat Prevention, Vectra AI, Trend Micro Deep Discovery, Cisco Secure Network Analytics and Corelight, whereas SolarWinds NetFlow Traffic Analyzer is most compared with Zabbix, Cisco Secure Network Analytics, ManageEngine NetFlow Analyzer, SolarWinds NPM and Nmap. See our Arista NDR vs. SolarWinds NetFlow Traffic Analyzer report.
See our list of best Network Traffic Analysis (NTA) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.