Compare McAfee Advanced Threat Defense vs. RSA NetWitness Logs and Packets (RSA SIEM)

McAfee Advanced Threat Defense is ranked 13th in Advanced Threat Protection with 4 reviews while RSA NetWitness Logs and Packets (RSA SIEM) is ranked 5th in Advanced Threat Protection with 10 reviews. McAfee Advanced Threat Defense is rated 7.0, while RSA NetWitness Logs and Packets (RSA SIEM) is rated 7.0. The top reviewer of McAfee Advanced Threat Defense writes "Protects the endpoints of our organization but it is not cloud ready". On the other hand, the top reviewer of RSA NetWitness Logs and Packets (RSA SIEM) writes "Good support, powerful decoders and concentrator, but the dashboard is not reflecting events in real-time ". McAfee Advanced Threat Defense is most compared with Fortinet FortiSandbox and SonicWall Capture Advanced Threat Protection, whereas RSA NetWitness Logs and Packets (RSA SIEM) is most compared with IBM QRadar, Splunk and ArcSight. See our McAfee Advanced Threat Defense vs. RSA NetWitness Logs and Packets (RSA SIEM) report.
Cancel
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about McAfee Advanced Threat Defense vs. RSA NetWitness Logs and Packets (RSA SIEM) and other solutions. Updated: March 2020.
408,459 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
The most valuable features are the administration console and its detection and response module.It stops in excess of twenty-five malware events per month, all of which could be critical to the business.It is very scalable.

Read more »

Performance and reporting are very good.The most valuable features are the integration and ease of use.The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it.The most valuable features are the packet decoder, log decoder, and concentrator.It's fully scalable. There is no limit. Of course, the license limits per day the number of terabytes. In my opinion, it's very flexible.The most valuable feature is the ability to write rules and triggers for network communication, and then being able to investigate based on that.The most valuable features are its ingestion of logs and raising of alerts based on those logs.Their technical support responds quickly and are knowledgable.

Read more »

Cons
I would like to see future versions of the solution incorporate artificial intelligence technology.This solution needs to be made "cloud ready".The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign.

Read more »

The user interface is a little bit difficult for new users and it needs to be improved.The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly.The initial setup is very complex and should be simplified.Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance.They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams.The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together.I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex.The initial setup was complex because it takes a lot of time to complete the implementation.

Read more »

Pricing and Cost Advice
Our licensing fees for this solution are approximately one million dollars per year.The product is expensive, but it is better than the rest of them in the industry.

Read more »

Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day.We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment.This is a pricey solution; it's not cheap.The licenses are good but the cost is very expensive.It is cheap.

Read more »

report
Use our free recommendation engine to learn which Advanced Threat Protection solutions are best for your needs.
408,459 professionals have used our research since 2012.
Ranking
Views
310
Comparisons
101
Reviews
4
Average Words per Review
241
Avg. Rating
7.0
Views
6,869
Comparisons
4,516
Reviews
10
Average Words per Review
474
Avg. Rating
6.9
Top Comparisons
Also Known As
RSA Security Analytics
Learn
McAfee
RSA
Overview

McAfee Advanced Threat Defense enables organizations to detect advanced, evasive malware and convert threat information into immediate action and protection. Unlike traditional sandboxes, it includes additional inspection capabilities that broaden detection and expose evasive threats. Tight integration between security solutions - from network and endpoint to investigation - enables instant sharing of threat information across the environment, enhancing protection and investigation. Flexible deployment options support every network.

If you’re relying on log data to detect and prevent cyber threats, you’re in trouble. Attackers increasingly evade detection of log-centric security and network monitoring tools. But logs combined with full packet, endpoint NetFlow data are proven to provide the essential details for early threat detection. Here’s a closer look at our solution.

Offer
Learn more about McAfee Advanced Threat Defense
Learn more about RSA NetWitness Logs and Packets (RSA SIEM)
Sample Customers
The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation TrustLos Angeles World Airports, Reply
Top Industries
No Data Available
VISITORS READING REVIEWS
Software R&D Company37%
Comms Service Provider18%
Financial Services Firm7%
Government6%
Find out what your peers are saying about McAfee Advanced Threat Defense vs. RSA NetWitness Logs and Packets (RSA SIEM) and other solutions. Updated: March 2020.
408,459 professionals have used our research since 2012.
We monitor all Advanced Threat Protection reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.