Splunk User Behavior Analytics vs Zscaler Cloud IPS comparison

Cancel
You must select at least 2 products to compare!
Splunk Logo
1,847 views|1,129 comparisons
100% willing to recommend
Zscaler Logo
702 views|498 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Splunk User Behavior Analytics and Zscaler Cloud IPS based on real PeerSpot user reviews.

Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Splunk User Behavior Analytics vs. Zscaler Cloud IPS Report (Updated: May 2024).
772,679 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It's easily scalable.""It is a solution that helps test and measure customer satisfaction.""The solution is definitely scalable.""The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.""It's straightforward in terms of configuration and troubleshooting and log management and monitoring as well. These are the edge points in addition to it being a modular solution where you can capitalize on your current licenses with extra licensing models, which can match the customer's business requirement and it can help the customer to design or to actually plan for their own roadmap.""The most valuable features are its data aggregation and the ability to automatically identify a number of threats, then suggest recommended actions upon them.""Because of some of the visualizations that we utilize, we are able to understand strange, unusual traffic on our networks.""The most valuable feature is the ability to search through a large amount of data."

More Splunk User Behavior Analytics Pros →

"The initial setup process is easy.""The best feature is that Zscaler allows for a separation between cloud applications and URL filtering. For example, under the cloud application segment, I can bypass Microsoft Office 365 without the need to add URLs manually. It's one click, so that's handy.""The initial setup is straightforward and easy in comparison with other solutions.""The product's most valuable feature is complete SSL inspection.""Cloud IPS integration is seamless, and it uses a Zero Trust model. It also simplifies overall user access management."

More Zscaler Cloud IPS Pros →

Cons
"The solution is much more expensive than relative competitors like ArcSight or LogRhythm. It makes it hard to sell to customers sometimes.""I would like improved downward integration with other tools such as McAfee and other GCP solutions.""The price of Splunk UBA is too high.""If the price was lowered and the setup process was less complex, I would consider rating it higher.""We'd like the ability to do custom searches.""It would be good if the solution had an analytics tool that allowed us to analyze the data without writing specific queries.""They should work to add more built-in correlation searches and more use cases based on worldwide customer experiences. They need more ready-made use cases.""The ability to do more complicated data investigation would be a welcome addition for pros, though the functionality now gives most people what they need."

More Splunk User Behavior Analytics Cons →

"When it comes to scalability, the IPsec could be improved.""They have given limited free access for a year. Instead, they should increase the file size and give limited free access for around two months. It will allow engineers to evaluate the product.""We encounter issues sharing IP addresses with other companies using the software.""We recently had a significant issue with Zscaler. I think they have too many customers and some of their connection edge nodes went down because there were too many requests. I think they aren't scaling enough to keep up with the demand in some areas. That's one thing they should improve.""There is always room for improvement."

More Zscaler Cloud IPS Cons →

Pricing and Cost Advice
  • "I hope we can increase the free license to be more than 5 gig a day. This would help people who want to introduce a POC or a demo license for the solution."
  • "My biggest complaint is the way they do pricing... You can never know the pricing for next year. Every single time you adjust to something new, the price goes up. It's impossible to truly budget for it. It goes up constantly."
  • "There are additional costs associated with the integrator."
  • "The licensing costs is around 10,000 dollars."
  • "Pricing varies based on the packages you choose and the volume of your usage."
  • "I am not aware of the price, but it is expensive."
  • More Splunk User Behavior Analytics Pricing and Cost Advice →

  • "Zscaler has so far been solely responsible for all the sales we have done with it, so it would be more suited than us to address any issues concerning the pricing."
  • "The software has become more expensive at present."
  • "The product is not affordable for small and medium enterprises."
  • More Zscaler Cloud IPS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    772,679 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The solution's most valuable feature is Splunk queries, which allow us to query the logs and analyze the attack vectors.
    Top Answer:I am not aware of the price, but it is expensive. A rough estimate would be around 150 gigabytes, given the huge amount of data. At the moment there are no additional costs for maintenance.
    Top Answer:Sometimes, we need to write explicit queries. It would be good if the solution had an analytics tool that allowed us to analyze the data without writing specific queries. The solution's user interface… more »
    Top Answer:The product's most valuable feature is complete SSL inspection.
    Top Answer:The product is not affordable for small and medium enterprises.
    Top Answer:They have given limited free access for a year. Instead, they should increase the file size and give limited free access for around two months. It will allow engineers to evaluate the product.
    Ranking
    Views
    1,847
    Comparisons
    1,129
    Reviews
    6
    Average Words per Review
    360
    Rating
    8.3
    Views
    702
    Comparisons
    498
    Reviews
    3
    Average Words per Review
    363
    Rating
    9.3
    Comparisons
    Also Known As
    Caspida, Splunk UBA
    Learn More
    Splunk
    Video Not Available
    Overview

    Splunk User Behavior Analytics is a behavior-based threat detection is based on machine learning methodologies that require no signatures or human analysis, enabling multi-entity behavior profiling and peer group analytics for users, devices, service accounts and applications. It detects insider threats and external attacks using out-of-the-box purpose-built that helps organizations find known, unknown and hidden threats, but extensible unsupervised machine learning (ML) algorithms, provides context around the threat via ML driven anomaly correlation and visual mapping of stitched anomalies over various phases of the attack lifecycle (Kill-Chain View). It uses a data science driven approach that produces actionable results with risk ratings and supporting evidence that increases SOC efficiency and supports bi-directional integration with Splunk Enterprise for data ingestion and correlation and with Splunk Enterprise Security for incident scoping, workflow management and automated response. The result is automated, accurate threat and anomaly detection.

    Zscaler Cloud IPS enables you to have all threat and alert data in one place. Full user, file and app context is available. Streaming to a SIEM allows further integration into the SOC ecosystem.

    The Zscaler Threat Library allows administrators and SOC personnel to drill down on IPS alerts to perform in-depth analysis of threat data within their installation. Search by vulnerability, category or keyword

    For more details: https://www.zscaler.com/produc...

    Sample Customers
    8 Securities, AAA Western, AdvancedMD, Amaya, Cerner Corporation, CJ O Shopping, CloudShare, Crossroads Foundation, 7-Eleven Indonesia
    Zenith Live, Azure, Carlsberg Group
    Top Industries
    REVIEWERS
    Financial Services Firm40%
    Insurance Company10%
    Government10%
    Security Firm10%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Financial Services Firm14%
    Government10%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Manufacturing Company14%
    Computer Software Company13%
    Financial Services Firm13%
    Healthcare Company6%
    Company Size
    REVIEWERS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise41%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise12%
    Large Enterprise68%
    VISITORS READING REVIEWS
    Small Business23%
    Midsize Enterprise15%
    Large Enterprise62%
    Buyer's Guide
    Splunk User Behavior Analytics vs. Zscaler Cloud IPS
    May 2024
    Find out what your peers are saying about Splunk User Behavior Analytics vs. Zscaler Cloud IPS and other solutions. Updated: May 2024.
    772,679 professionals have used our research since 2012.

    Splunk User Behavior Analytics is ranked 12th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Zscaler Cloud IPS is ranked 20th in Intrusion Detection and Prevention Software (IDPS) with 5 reviews. Splunk User Behavior Analytics is rated 8.2, while Zscaler Cloud IPS is rated 9.0. The top reviewer of Splunk User Behavior Analytics writes "Easy to configure and easy to use solution that integrates with many applications and scripts ". On the other hand, the top reviewer of Zscaler Cloud IPS writes "Stable product with valuable SSL inspection features ". Splunk User Behavior Analytics is most compared with Darktrace, Microsoft Defender for Identity, IBM Security QRadar, Cynet and Exabeam Fusion SIEM, whereas Zscaler Cloud IPS is most compared with Palo Alto Networks URL Filtering with PAN-DB, Claroty Platform, Darktrace and ExtraHop Reveal(x). See our Splunk User Behavior Analytics vs. Zscaler Cloud IPS report.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.