We performed a comparison between NetWitness Platform and Skybox Security Suite based on real PeerSpot user reviews.
Find out what your peers are saying about Splunk, Datadog, Wazuh and others in Log Management."Alerting Module: It provides real-time event processing language on all the logs/packets stream for advanced alerting, i.e., using SQL LIKE statements."
"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."
"Their technical support responds quickly and are knowledgable."
"The product's initial setup phase was not at all difficult."
"Offers a good wireless feature."
"It's quite economical compared to other solutions in the market."
"NetWitness can be highly beneficial for incident detection and response."
"The most valuable feature is the security that it provides."
"The most impressive feature is optimization and clean-up."
"The performance could be good because we chose it at the time, but it is too complex for us to appreciate its performance because we lack the necessary skills."
"It's given us more visibility in terms of what are the kinds of configurations that are on these devices, and how many of these are stale rules. So it's helped greatly in terms of cleaning up of rules, for sure. And it has definitely given us a more secure way of backing up the configuration on these devices."
"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."
"Correlates logs and threats and prioritizes; provides network maps;p provides change result context and resulting vulnerability."
"Key features for us include the firewall change audit every week. Also, being able to track firewall ACL usage, so that we can produce semiannual reports on ACL usage and shadowed and redundant rules on the firewall."
"I am impressed with the tool's change management, firewall and network assurance."
"The port division management was the solution's most valuable aspect for our organization."
"The initial setup is very complex and should be simplified."
"Technical support could be improved."
"The product's licensing models are complex to understand. This particular area needs improvement."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"There is no support for this product in this country, so problems have to be resolved through global technical teams."
"Nowadays, their support is a little subpar compared to other solutions. I rate RSA support six out of 10."
"More customizability is required, which is something that they need to improve on."
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"Skybox Security Suite's attack surface management feature needs improvement."
"The solution needs to add more automation and orchestration capabilities. Those features would make the solution much stronger."
"Skybox should improve their UX features by making them easier to use."
"Change Manager can be improved. If they can improve Change Manager so that whatever we want to do on a firewall, we are able to do it through Change Manager, it will be helpful for us. Whenever we are doing a change, it only does them at an L3 and L4 level, but all the firewalls are at the application layer. So, whatever needs to be done on the firewall, we aren't able to get it done through Change Manager. Currently, this functionality is not there because of which we are sometimes losing customers. I can create a role on Layer 3, Layer 4, but when it comes to the application layer, such as configuring and defining URLs or other things at the application level, it can't be done through Change Manager. Customers demand that they should be able to do everything through Change Manager. They don't want to do it through some other mechanism to accomplish their complete change management policy. They don't want to use a firewall manager because sometimes, they don't have any manager. They ask if they can use our solution so that a manager is not required. If Change Manager can do all the management automatically without involving any other manager, it will be great. They can also provide better integration with other managers so that everything can be done through a central point."
"The initial setup with Skybox Security is hard. You need one or two strong security engineers on your team."
"I've had issues with licensing where, when they were expiring and I asked for the updated licenses, I would the wrong ones. I think their process needs to be straightened out a little bit - I don't know if they fixed it already, it has been awhile. It wasn't as straightforward as it could have been."
"The most recent update was not tested with all of the vendors before it was released, so some of the features are misbehaving."
"If anything could be improved it would be staying on top of the collector scripts, but I understand that's a very tough challenge."
NetWitness Platform is ranked 20th in Log Management with 36 reviews while Skybox Security Suite is ranked 18th in Vulnerability Management with 33 reviews. NetWitness Platform is rated 7.4, while Skybox Security Suite is rated 7.8. The top reviewer of NetWitness Platform writes "Can find out if there is lateral movement, but integration and workflow need improvement". On the other hand, the top reviewer of Skybox Security Suite writes "Efficient in vulnerability management, stable and easy to use ". NetWitness Platform is most compared with Splunk Enterprise Security, RSA enVision, IBM Security QRadar, Microsoft Sentinel and Cisco Secure Network Analytics, whereas Skybox Security Suite is most compared with AlgoSec, Tufin Orchestration Suite, FireMon Security Manager, Palo Alto Networks Panorama and RedSeal.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
