Azure Network Watcher vs. Colasoft Capsa

Azure Network Watcher is well suited to monitor or diagnose logs for azure virtual network, managing connection/relationship between virtual networks. Diagnose network traffic, network traffic etc. Overall, it is appropriate to use in monitoring, diagnostic and logging activities for resources in azure virtual network. It is mainly used in infrastructure as a service component.

Incentivized

Capsa is highly recommended to be used in small dense areas of a network where it makes sense to be able to run analytics off of a mirror port to gain insight into traffic trends. It is a costly product to install in branch locations, and requires a decent spec hardware to run appropriately

Incentivized

• View resources and theri relationship
• Diagnose network routing problems
• View security rules for a network interface

Incentivized

• Robust Application. Able to handle traffic that most businesses will throw at it.
• Easy to use. Easy to setup captures and filter down to specific traffic types.
• Relatively cheap for what it's able to accomplish.

Incentivized

• More granular visualization through the Azure Network. Ex. Seeing NSG Flow through each Hop.
• Allow for more capabilities to view Connectivity through On-Premise Networks.

Incentivized

• Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
• Needs API access to trigger capturesl
• Needs Agents for remote capturesl

Incentivized

Azure Network Watcher can help with resources in the Cloud if this device is able to send traffic. We are using Azure Network Watcher in cases Solarwinds can't cover easily like API to load balancers & additional testing.

Incentivized

Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.

Incentivized

• Positive impact as it helps in setting up critical alerts
• Monitoring network, hardware
• Customizable reports can be set which helps in business objective

Incentivized

• While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
• Relatively cheap compared to the feature set.

Incentivized