We performed a comparison between Arista NDR and Auvik Network Management (ANM) based on real PeerSpot user reviews.
Find out in this report how the two Network Traffic Analysis (NTA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It gives us something that is almost like an auditing tool for all of our network controls, to see how they are performing. This is related to compliance so that we can see how we are doing with what we have already implemented. There are things that we implemented, but we really didn't know if they were working or not. We have that visibility now."
"The query language makes it easy to query the records on the network, to do searches for the various threat activities that we're looking for. The dashboard, the Security Knowledge Graph, displays information meaningfully and easily. I am able to find the information that I want to find pretty quickly."
"Arista NDR's scalability is very good, making it easy to add more hardware components. You can order additional hardware and integrate it by stacking it with the existing setup. This feature cannot be seen in other NDR tools."
"The most valuable feature is the ability to see suspicious activity for devices inside my network. It helps me to quickly identify that activity and do analysis to see if it's expected or I need to mitigate that activity quickly."
"The interface itself is clean and easy to use, yet customizable. I like that I can create my own dashboards fairly easily so that I can see what is important to me. Also, the query language is pretty easy to use. I haven't needed to use it a ton, but as I need to go in and do different queries based on their requests, it has been fairly simple to use."
"When I create a workbench query in Awake to do threat hunting, it's much easier to query. You get a dictionary popup immediately when you try to type a new query. It says, "You want to search for a device?" Then you type in "D-E," and it gives you a list of commands, like device, data set behavior, etc. That gives you the ability to build your own query."
"We appreciate the value of the AML (structured query language). We receive security intel feeds for a specific type of malware or ransomware. AML queries looking for the activity is applied in almost real-time. Ultimately, this determines if the activity was not observed on the network."
"Other solutions will say, "Hey, this device is doing something weird." But they don't aggregate that data point with other data points. With Awake you have what's called a "fact pattern." For example, if there's a smart toaster on the third floor that is beaconing out to an IP address in North Korea, sure that's bizarre. But if that toaster was made in North Korea it's not bizarre. Taking those two data points together, and automating something using machine-learning is something that no other solution is doing right now."
"The stability is rock solid."
"I love that Auvik can automatically back up the configuration of switches and firewalls."
"Auvik is easy to use. The first thing you see when you open it up is a map of the United States or wherever you are, and it shows the locations of all of your network endpoints. For discovery, you set credentials and manage the credentials and it tells you when it needs a new credential. So you just click the "Manage Credentials" button and it takes you to the right spot. You enter in a new credential and then it starts looking closer at the device. It can give you all kinds of information from inside the device's log. We use it for CIS logs and we use it for just regular logging. The CIS log was something I was looking for in the other products, just so we have a place for the CIS logs to congregate so we can look them up."
"Auvik is easy to use. It took some time to set it up, and they were pretty good to us. They offered us around six sessions with a technician to help us set up the monitors we wanted. After we were trained properly, I had no issues using it."
"I like how Auvik gives us a quick overview of the overall situation."
"The first feature that I appreciate is the topology drawing in real time. If our NOC wants to troubleshoot, they can go to the topology map and see that this access point is connected to that switch via that specific port. And when something changes in the topology, it's dynamically updated."
"The network flow piece is the most useful. We can identify the busiest parts of the network based on the reporting from the switches about what is utilizing the most bandwidth on specific switch ports. I can narrow down which segments of the network might be having issues."
"I really like the network map. It's probably the most useful feature because we have monitoring set up in other systems too, but seeing what's connected to what and where it is makes a lot of things a lot easier to troubleshoot."
"While the appliance is very good, and I think they're working on it, it would probably help if they integrated the management team cases into the appliance so that everything we are working on with them would be accessible on our platform, on the dashboard, on the portal. Right now, Awake is just an additional team that uses the appliance that we use and then we communicate with them directly. Communication isn't through the portal."
"Be prepared to update your SOPs to have your analysts work in another tool separately. There are some limitations in the integrations right now. One of the things that I want from a security standpoint is integration with multiple tools so I don't need to have my analysts logging into each individual tool."
"When I looked at the competitors, such as Darktrace, they all have prettier interfaces. If Awake could make it a little more user-friendly, that would go a long way."
"One thing I would like to see is a little bit more education or experience on AWS cloud for their managed services team. We've explained how we have the information set up, that the traffic coming in goes to the AWS load balancer and then gets sent on to our internal servers... but when I get notices they always tell me this traffic is coming from the IPs belonging to the load balancers, not the source IPs. So a little bit more education for their team about how AWS manages the traffic might help out."
"Arista NDR needs to open legal offices to be closer to customers and partners. It needs more visibility in the NDR market in the Middle East. While they are doing well, they lack sufficient engineers. They need to hire more engineers to meet the demand and expand their presence. The current team is good but not enough to fully capture the market."
"They've been focused on really developing their data science, their ability to detect, but over time, they need to be able to tie into other systems because other systems might detect something that they don't."
"The one thing that the Awake platform lacks is the ability to automate the ingestion of IOCs rather than having to import CSV files or JSON files manually."
"One concern I do have with Awake is that, ideally, it should be able identify high-risk users and devices and entities. However, we don't have confidence in their entity resolution, and we've provided this feedback to Awake. My understanding is that this is where some of the AI/ML is, and it hasn't been reliable in correctly identifying which device an activity is associated with. We have also encountered issues where it has merged two devices into one entity profile when they shouldn't be merged. The entity resolution is the weakest point of Awake so far."
"I'd like to see some enhancements to Auvik's network map, including the ability to focus on specific areas without viewing the entire map."
"Auvik could be better integrated with our ticketing system ConnectWise Manage. We tried integrating Auvik to create tickets, but working to implement a more granular classification system based on priority. The important thing is that we get the alerts, regardless of priority, but that's something that can be improved."
"Onboarding devices could be easier. When you first add a device to the Auvik platform, you need to add each one by hand. It would be nice if they could automate the process where we only need to run a script."
"Some of the automation pieces for discovery still need a little bit more improvement. I wouldn't mind seeing some more security features as that's the world we're driving into. I know Auvik probably wants to try to keep itself separate because that's its brand, but even if they brought on board another brand that was able to plug into them, it would benefit us. It would lower some more network security costs if as a company, they are a one-stop shop. They have already got the network piece going. If they improved in that area and focused a lot on that, they would gain me as a customer, and they would probably gain a lot of others."
"Network setups take time regardless of the tool you use. It will always take time to build. I wish you could order Auvik to rescan the network on demand when I make changes. Sometimes, I want the network to scan immediately instead of waiting for it to detect the changes."
"When I change IP addresses on a device or on a server, I have to wait for Auvik to figure out that change. It will tell me the device is offline until Auvik scans the whole subnet again and finds it. If I change 25 devices, I'll get 50 emails in a short time because they've gone offline."
"When we configured our network, there were some mismatches between the automatically-detected network topology and the actual topology. Some of the devices were not detected or were not supported by Auvik. We were able to manually modify things and everything has worked well since then."
"Getting remotely connected to managed devices could be a little bit smoother. Sometimes, it's a little bit cumbersome trying to do that. If they could streamline the facilitating of remote connections to network devices, that would be an improvement."
More Auvik Network Management (ANM) Pricing and Cost Advice →
Your network may have security risks that you don't know about. Schedule a live demo to see how you can use Awake Security to identify and mitigate these threats.
Arista NDR is ranked 8th in Network Traffic Analysis (NTA) with 14 reviews while Auvik Network Management (ANM) is ranked 3rd in Network Traffic Analysis (NTA) with 131 reviews. Arista NDR is rated 9.0, while Auvik Network Management (ANM) is rated 8.8. The top reviewer of Arista NDR writes "Gives us network layer visibility into things that may not be covered by other monitoring tools, such as shadow IT". On the other hand, the top reviewer of Auvik Network Management (ANM) writes "Enables us to get on top of issues before they become an outage". Arista NDR is most compared with Palo Alto Networks Advanced Threat Prevention, Vectra AI, Trend Micro Deep Discovery, Cisco Secure Network Analytics and Darktrace, whereas Auvik Network Management (ANM) is most compared with PRTG Network Monitor, LogicMonitor, Meraki Dashboard, SolarWinds NPM and Zabbix. See our Arista NDR vs. Auvik Network Management (ANM) report.
See our list of best Network Traffic Analysis (NTA) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.