Azure Network Watcher vs. Colasoft Capsa

Azure Network Watcher is well-suited for cloud environment, it's necessary for the network troubleshooting. It is especially useful in where you have done integration with azure virtual wan and custom routes (udr) to control traffic in a hub & spoke network with Azure firewall. When the traffic is manipulated with udr, the troubleshooting at the routing level becomes important in some cases.

Incentivized

Capsa is highly recommended to be used in small dense areas of a network where it makes sense to be able to run analytics off of a mirror port to gain insight into traffic trends. It is a costly product to install in branch locations, and requires a decent spec hardware to run appropriately

Incentivized

• Monitor endpoints Health for Azure Traffic Manager
• Monitor VM Machine resources
• Deliver reports for IT department

Incentivized

• Robust Application. Able to handle traffic that most businesses will throw at it.
• Easy to use. Easy to setup captures and filter down to specific traffic types.
• Relatively cheap for what it's able to accomplish.

Incentivized

• Security measures can be improved
• Initial Setup process is complex and should be simplified
• User interface can be improved

Incentivized

• Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
• Needs API access to trigger capturesl
• Needs Agents for remote capturesl

Incentivized

Azure Network watcher provides various feature that stacks up against other products such as monitoring which include network monitoring and connection monitoring etc. Diagnostic feature which includes connection troubleshoot, VPN troubleshoot etc. Logging feature which includes network traffic analysis and helps in understanding network traffic more efficiently. All these features in azure network watcher make it worth.

Incentivized

Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.

Incentivized

• Helped us diagnose IP and Port flow from a DNS integration project resulting in success of the project
• Has helped numerous times analyzing IP Port flow from Resources

Incentivized

• While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
• Relatively cheap compared to the feature set.

Incentivized