TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco ThousandEyes

    Score9.1 out of 10
    N/ACisco ThousandEyes empowers organizations to assure every digital experience across every network, everywhere, every time.N/A

    Microsoft Sentinel

    Score8.6 out of 10
    N/AMicrosoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.

    $2.46

    per GB ingested

    Pricing
    Cisco ThousandEyesMicrosoft Sentinel
    Editions & Modules
    No answers on this topic
    Azure Sentinel
    $2.46
    per GB ingested
    100 GB per day
    $123.00
    per day
    200 GB per day
    $221.40
    per day
    300 GB per day
    $319.80
    per day
    400 GB per day
    $410.00
    per day
    500 GB per day
    $492.00
    per day
    More than 500 GB per day
    $492.00 + $98.40
    per day/plus each additional 100 GB increment
    Offerings
    Pricing Offerings
    Cisco ThousandEyesMicrosoft Sentinel
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco ThousandEyesMicrosoft Sentinel
    Considered Both Products
    Cisco
    No answer on this topic
    Microsoft
    No answer on this topic
    Key User Insights
    Would buy again
    96%
    Would buy again
    118 Answers
    99%
    Would buy again
    73 Answers
    Delivers good value for the price
    95%
    Delivers good value for the price
    96 Answers
    94%
    Delivers good value for the price
    59 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    119 Answers
    96%
    Happy with the feature set
    71 Answers
    Lived up to sales and marketing promises
    94%
    Lived up to sales and marketing promises
    89 Answers
    93%
    Lived up to sales and marketing promises
    52 Answers
    Implementation went as expected
    88%
    Implementation went as expected
    92 Answers
    97%
    Implementation went as expected
    66 Answers
    Features
    Cisco ThousandEyesMicrosoft Sentinel
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Cisco ThousandEyes and Microsoft Sentinel
    Feature
    Cisco ThousandEyes
    -
    Ratings
    Microsoft Sentinel
    8.5
    34 Ratings
    6% above category average
    Centralized event and log data collection00 Ratings9.134 Ratings
    Correlation00 Ratings8.835 Ratings
    Event and log normalization/management00 Ratings8.435 Ratings
    Deployment flexibility00 Ratings8.333 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.933 Ratings
    Custom dashboards and workspaces00 Ratings8.435 Ratings
    Host and network-based intrusion detection00 Ratings8.030 Ratings
    Data integration/API management00 Ratings8.433 Ratings
    Behavioral analytics and baselining00 Ratings9.031 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.733 Ratings
    Response orchestration and automation00 Ratings8.232 Ratings
    Reporting and compliance management00 Ratings7.35 Ratings
    Incident indexing/searching00 Ratings8.733 Ratings
    Best Alternatives
    Cisco ThousandEyesMicrosoft Sentinel
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Catchpoint
    Score8.5 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    Nexthink
    Score7.3 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco ThousandEyesMicrosoft Sentinel
    Likelihood to Recommend
    9.1
    (126 ratings)
    8.5
    (74 ratings)
    Likelihood to Renew
    8.6
    (6 ratings)
    6.5
    (2 ratings)
    Usability
    8.6
    (7 ratings)
    8.2
    (27 ratings)
    Availability
    7.3
    (1 ratings)
    -
    (0 ratings)
    Performance
    7.3
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    6.7
    (6 ratings)
    8.0
    (3 ratings)
    In-Person Training
    8.2
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    6.4
    (1 ratings)
    -
    (0 ratings)
    Configurability
    8.2
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    6.4
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    6.4
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    7.3
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    -
    (0 ratings)
    5.0
    (1 ratings)
    Vendor post-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Cisco ThousandEyesMicrosoft Sentinel
    Likelihood to Recommend
    Cisco
    Unified communications real-time analysis is one of the biggest points of the solution. You can see your traffic path and find issues before, during and after the calls. This is very useful for analyzing VoIP and video conferencing problems like in WebEx, Microsoft Teams and Zoom. It helps to see network issues like packet loss, jitter, or latency that can make call quality bad. Another good use case is checking cloud apps and SaaS services. Many companies use external platforms like Microsoft Azure, 365, Salesforce, or AWS. It lets Networking teams see the network path from users to these services so they can find if problems come from the company network, the internet provider, or the cloud service. Also, it is good for companies using mix of on-prem and cloud. It shows how traffic moves between different parts of the network, so IT teams can see where a problem happens and fix it faster. There are different types of agents that we can use in Cisco ThousandEyes. Enterprise agents can be use for a relative big amount of synthetic test. Endpoint agents are install in user PC or MAC laptops to check network quality from the client side. WebEx devices also have built-in agents that help to see performance problems in meetings, making it easy to find what is causing a bad call. Maybe it's not the best solution if what you want to measure is not HTTPs based or hasn't an API. Also if your scenario is Zoom Rooms, you won't have the same level of integration that it has for WebEx and Microsoft solutions.
    Incentivized
    Read full review
    Microsoft
    What has really impressed me is how Microsoft Sentinel delivers centralised security monitoring across multiple data sources in our enterprise. It has reduced cost of handling large security logs by collecting and analyzing data without friction of managing traditional SIEM infrastructure. It is easy to work to integrate with Azure logs for quick data analysis.
    Incentivized
    Read full review
    Pros
    Cisco
    • Cisco ThousandEyes does the holistic discovery of the end components, the network components, and it's really fast at identifying where the issue is, which is not normally identified by the classic monitoring tools. So it's quite a fast identifying the issue of the networks and Cisco ThousandEyes also provides a very good real user end user monitoring experience for the end customers. So those are the two real life and also very good examples for Cisco ThousandEyes.
    Incentivized
    Read full review
    Microsoft
    • The visual presentation of data is terrific, so including what we had prior to Microsoft Sentinel, it presents data in a much more usable way, so that's been quite refreshing. It's not quite as complex to understand what you're looking at.
    Incentivized
    Read full review
    Cons
    Cisco
    • The elephant in the room is going to be cost. ThousandEyes is a great tool, but you will pay for it. There are other services that do a good job at providing a smaller subset of features compared to ThousandEyes. If all you need is that particular subset of features, ThousandEyes may not make fiscal sense for your organization.
    • As a subset of the cost issue, within the last 18 months or so the pricing on enterprise (local) agents has been modified in a way that seems not to benefit the customer. Previously enterprise agents had a flat monthly cost associated with them with unlimited test usage (the only limit on test usage was based on concurrent tests running at any given point in time). This meant that instead of using a cloud agent and paying per-test, you had the option of spinning up an cheap Digital Ocean droplet and creating your own cloud agent for external testing without using Cloud Agents. When the change was made they eliminated the flat per-agent cost and instead treated the pricing the same as that of the cloud agents but cutting the number of "cloud units" per test in half for tests run from enterprise agents. For organizations with under-utilized enterprise agents, this may be helpful financially, but for organizations that push their local agents to the limit, the cost skyrocketed.
    • BGP monitor peering sessions have been less than reliable. The data doesn't seem to be an issue, but the sessions seem to bounce or fail altogether on a fairly consistent basis. The routers or servers with which your routers peer sit behind some firewalls that have caused issues in the past.
    Incentivized
    Read full review
    Microsoft
    • One feature that I would like to see improved is probably the log parsing. I think one of the big things that Splunk does better than Microsoft Sentinel is that it makes it easy to bring in new log streams of arbitrary formats and parse them out into columns and tables. Microsoft Sentinel is a lot more involved, though. It takes a lot more manual work to bring in different log sources and parse them out.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    The software does it's job extremely well and the system makes it very user friendly to get into. When looking for software I prefer to not need a PHD to operate it. Having a great UI and simple setup makes it easy to include more members of our team to get more value out of the platform.
    Incentivized
    Read full review
    Microsoft
    it does the job reasonably well
    Incentivized
    Read full review
    Usability
    Cisco
    There is definitely a learning curve to ThousandEyes, but once you understand how the client deployment works and how to set up monitoring, things go pretty smoothly. I think the initial setting up of clients on endpoints can be a little tricky though.
    Incentivized
    Read full review
    Microsoft
    Mirosoft sentinel is easy to use once the inital setup is completed.The dashboard and centralized alerts make it simple to monitor security events and investigate incidents.Integration with other microsoft security tool is also helpful.Some advanced features and configurations can take time to understand, but overall it provides good, user-friendly security monitoring.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    Being cloud hosted means that you are at the mercy of Cisco web services, but we've had absolutely no issues with its availability.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Performance
    Cisco
    The client is very lightweight on endpoints and the user interface is very fast and fluid.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Support Rating
    Cisco
    You have online support from the tool itself 24/7 and they are very responsive. We also have a specific account manager and specific engineer assigned to help us with very specific questions for our environment. The level of response to our requirements is always super high. We have requested specific features to be added and these have been developed and introduced very quick tot he product (within weeks). Their DevOps and agile approach seems to pay off.
    Incentivized
    Read full review
    Microsoft
    Microsoft support is one of the highest rated on the market. It has global and multilingual support. Calls can be made over the phone and the solution is virtually instantaneous with the help of Microsoft engineers. It's great!
    Incentivized
    Read full review
    In-Person Training
    Cisco
    Our Cisco reps actually had someone teach us a few things about the functionality of ThousandEyes, and it helped a lot. The training was good and we had follow-up assistance as well when we had questions about the monitoring and reporting functions. Overall, we were satisfied with the training and support.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Implementation Rating
    Cisco
    Our implementation was pretty straightforward, with some issues loading clients on endpoints. We didn't have any notable issues, and I don't really have any additional insights.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Alternatives Considered
    Cisco
    No one is better than the other. I can get different data and sometimes similar data, it's important to compare values and verify the data between the tools. Additionally, there are other functionalities that ThousandEyes has that the others don't, but it is also the other way around. I will always recommend to have available not 1 or 2, all possible available for your job.
    Incentivized
    Read full review
    Microsoft
    Compared to platforms such as Splunk, LogRhythm, and Devo, Microsoft Sentinel’s cloud‑native, consumption‑based pricing model and reduced infrastructure overhead tend to offer better overall cost efficiency. This is especially true for organizations already invested in the Microsoft ecosystem, where Sentinel can deliver strong capabilities with a lower total cost of ownership.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Cisco
    The contract was fair and rolled up into some of our other contracts, so it was no big deal getting it up and running.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Scalability
    Cisco
    I think this product would be infinitely scalable since it's all cloud hosted and can support thousands of endpoints if needed. We are only using it for a limited number of endpoints, so we never really considered scalability.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Professional Services
    Cisco
    No answers on this topic
    Microsoft
    Did not use professional services
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • Building the trust from our Merchants is core when you come to renewal time. Trust builds partnerships, builds stickiness and allows for easier upsells or contract renewals.
    • Having a champion in IT that touts your service is important to the business, it removes a large portion of friction in the business to get services implemented and working to its peak.
    • Flexibility in pricing can be better. How they measure the number of agents being used can get thorny. When you build and tear down virtual servers a lot it can appear there are more agents running than there are. Once we understood how they measure we were able to better utilize the product efficiently.
    Incentivized
    Read full review
    Microsoft
    • It's probably neutral. We see value, but it's, again, tick that kind of expense stuff. We're getting more insight and value into what is going on in that cloud workspace, but just noting the cost. So it's probably neutral. I'm not directly responsible, so the full kind of return on investment kind of cycle, that's someone else's problem. I'm like the end user. It's my team that will look at the data and look at the output of Microsoft Sentinel. So the ROI, someone else can worry about that.
    Incentivized
    Read full review
    ScreenShots

    Cisco ThousandEyes Screenshots

    Screenshot of Global availability issues for users trying to use Slack application.Screenshot of The path visibility feature pinpointing where in the transit path an outage or event is occurring.Screenshot of ThousandEyes Internet Insights™, which combines a massive data set with algorithmic outage detection to provide near real-time insights into a business's SaaS applications.  and networks. Internet Insights can be used to manage digital experience at Internet scale.Screenshot of ThousandEyes Event Detection diagnosing events as server or network issue.

    Microsoft Sentinel Screenshots

    Product screenshotProduct screenshotScreenshot of Microsoft Sentinel Capabilities