Aviatrix vs. Cisco Multicloud Defense

Definitely use aAviatrix Cloud Network Platform if you are on multiple clouds like AWS, GCP or Azure. Or if you have multiple environments in one of them. Also if you have on-prem infrastructure that you need connected via VPN tunnel to the cloud. As far as I know, Aviatrix Cloud Network Platform is the only one using multiprocessing for those to reach high speeds.

The sell key was for my company the monitoring all outgoing data and between each cloud provider which we use from all departments which keeps their data in a cloud environment. We could apply specific rules for monitoring and DPL on all traffic, which was the key feature that we were missing in the cloud solution. Also, they provide security features like intrusion prevention, antimalware, and full-path URL filtering, which are nice to have. Applying all at the start can be really time consuming but for the time we spent and how the solution help us to prevent data leave our company it was for sure worth it.

Incentivized

• With a few very easy steps to establish routing between AWS VPC
• Easy procedures to establish site to site VPN connection with external parties.
• Provide network access control on routing traffic using its own build-in firewall inspection or directing traffic to 3rd party NGFW for full stack inspection.

Incentivized

• DLP monitoring - key item for us which helps to view if anything which should leave our environment our or even between each part of network between/inside specific clouds
• Segmentation of subnet, basic but helpful to isolate each host into their own part of single subnet and connect them, including all visibility features which are offered by Cisco defense systems
• Allow/deny rules helps us to block, monitor and logs traffic passing in each direction of our environment

Incentivized

• It lacks of ways to admin-down an established site to site VPN connections is one of the short coming.
• In network traffic inspection, it lacks options to customize the IPS function is another short coming.
• While the product allows lots of email alerting options, it lacks ways to customize the alerting email messages and ways to suppress alert flooding.

Incentivized

• Logs can be tricky to navigate
• GUI can sometimes be confusing
• Wish there was a better sizing recommendation for gateway deployments

Incentivized

If it maintains its current direction it will be very disruptive in the cloud security space

Incentivized

The core function of the product works very well. It really makes network traffic management easy in public clound, as well as crossing different public and private cloud platform.

Incentivized

Ease of Use

Incentivized

Very responsive and very strong technical skill even on the first teir support.

Incentivized

As of yet I havent logged a TAC case - It will be interesting to see how it is supported as a new product in the medium term

Incentivized

We initially tried using the native routing funcitons in AWS (transit gateway) and in Azure (virtual network). While those native options worked, it became difficult to opeate when we tried to impose security inspection on the routing traffic. This leads us to the Aviatrix solution.

Incentivized

The ease of use, analytics, and just overall security feature set of Cisco Multicloud Defense is hard to beat. Their product is very intriguing and quite a bit similar. However, I have learned from past experiences that you get what you pay for. Cisco may be a little more pricy but it is worth it.

Incentivized

• Reduce labor hours for network admin to manage public clound network routing policy.
• Build-in security features may be good enough for small/medium size companies, and thus saving money from full funciton NGFW solution.
• The Cost-IQ feature enable one to capture traffic volume of each VPC. This provides one way for the enterprise to perform cost charge back to various business funcitons at the VPC level.

Incentivized

• Saved a lot of money on Operational Overhead. I would say we were able to save more than 10 hours every week.

Incentivized