Cisco Security Services vs. NetWitness Incident Response and Cyber Defense Services

We have deployed Cisco ASA with Fire Power with Fire Sight. A sight-to-sight VPN with IP-SecCisco AnyConnect VPN Client, SourceFire, Proxy Server, Cisco Umbrella. I use the Cisco AnyConnect Secure Mobile Client that lets me access my secure work files both in the office and remotely from my home office.

Incentivized

If an organization has all the best breed cyber security tools are in place & want to know the holistic security posture of the organization, they need to best security program or SOC than RSA NetWitness Incident Response and Cyber defense Services is the best solution. The bottom line is not only buying the best solution but it is also about establishing an effective security program that brings together security expertise, process, and technology to improve an organization's ability to prevent detect and respond to attacks.

Incentivized

• Active Threat Analytics
• End-to-end security with support to existing infrastructure
• Highly professional team with robust backing during and after the migration cycle.

Incentivized

• Able to investigate threats faster.
• Faster and more advanced treat detection.
• Analytics.

Incentivized

• Switches, hub and routers are following old setup
• Can require certification to setup devices compared to competitors more intuitive offerings.
• Need more support for customizable

Incentivized

• NetWitness Incident Response and Cyber Defense Services SIEM managed services which we call managed SOC requires multiple resources with expertise in different domains like Threat forensics & Logs Analytics ..etc. Sometimes it gets tough to get the right resources.
• Difficulty in navigating & configuring, which is necessary for any solution to get the best result & reporting part.
• Commercial of solution in comparison to competitors is at the higher end.

Incentivized

The equipment is robust and reliable. It has great flexibility in configurations and is fully scalable in terms of power and functionalities in relation to the needs of each company. It has the ability to integrate with other critical security technologies to provide comprehensive solutions that meet security needs. It has numerous license models, this limits the number of pairs regardless of type; clientless vs client SSL VPN, IPsec, l2tp-IPsec.

Incentivized

ES offers the single pane of glass for investigation and monitoring needs, however, to get everything onboarded can be daunting. The identiy and assets enrichment was not as straightforward and required a lot of manual work to make them work. For it to be optimized for full benefit, there is a layer of complexity that needs to be managed along the journey post deployment as well

Incentivized