BigPanda vs. ExtraHop Performance Platform

If the organization has a proper CMDB asset record then BigPanda features can be utilized to their true potential as it has alert correlation capability. The alert can be redirected to the proper support team using the auto-share feature. This wouldn't be the case where asset records are not updated and the Operations have to manually assign the alerts to support groups.

Incentivized

One very big use is the ability to resolve performance issues. One example used was with the performance of sql issues. ExtraHop [Performance Platform] gave us the packet tracing ability to see the database was being queried incorrectly. A programmer has written a query that would bring the database information local and one the queries instead of allowing the sql server itself to do the work and push out the information.

Incentivized

• Alert correlation feature helps in grouping similar alerts together
• Alert Enrichment to enhance the data after it arrives on the tool
• Integration with multiple tools
• The console is very user friendly and provides ease of administration

Incentivized

• It is very good at making it easy to find root cause for app issues.
• It provides very good stats, graphs, and diagrams of IT utilization.

Incentivized

• Tool should have a feature to query the data
• The dashboard feature needs improvement
• It should have a dark mode

Incentivized

• Some person like me who want to see Extrahop can integrate better with other network analysis tools like Wireshark or TCPdump. The desired functionality I've been looking for is to program a kind of specific criteria to trigger the probe starts to run Wireshark or TCPdump to save the trace of a specific problematic session. Sometimes I want to see the evidence in a packet trace layer rather than just have the warning or error only presented in the dashboard.

Incentivized

ExtraHop fits perfectly into the nist security framework to ensure the network is monitored and protected from anomalous behaviors.

Incentivized

Documentation could be a lot better. Tech support is outstanding.

Incentivized

TrueSight didn't provide many customization options. The features provided were primitive as compared to BigPanda. TrueSight was being used just for alert visibility and assignment to a proper support group from a single console. Although Moogsoft had similar features as compared to BigPanda, the user administration and ease of use were a bit complicated. BigPanda provides a much simpler user interface.

Incentivized

We use ExtraHop specifically to monitor network traffic. It does many other things very well also, but it is the best network traffic analysis tool that we currently have in house. The fact that it is agentless also makes it more reliable and not dependent on agents running on devices throughout our enterprise.

Incentivized

• BIgPanda is very easy to implement and use
• Better than the previous tool, provides more functionality
• BIgPanda's alert enrichment feature very helpful

Incentivized

• Accelerated root cause analysis
• Cut out time passing the hot potato, focused time on resolution
• It's a good tool for change management, helping to transform a reactive culture to one that is more proactive
• Enables early warning and visibility, prompts action before a system goes down

Incentivized