Cloudflare One (SASE) vs. Kemp Flowmon ADS

I wanted to securely connect to my servers without getting tracked by malicious attackers, even though I was on public Wi-Fi. Security was my top priority, and I also wanted a setup that was easy and quick to start and provided great network performance. Cloudflare's Zero trust matches my criteria for becoming my first choice.

Incentivized

Flowmon ADS is a customizable anomaly detection solution with excellent scalability capabilities and quick integration into the organization environment. Flowmon ADS provides a large set of essential detections out of the box, which allows to quickly acquire an awareness of potential problems in the monitored network. Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments. Powerful dashboards make summaries and reporting a breeze. We use the Flowmon Anomaly Detection System daily for event detection and incident handling. It provides high-quality detection methods with low false-positive rates.

• Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level.
• Excellent protection for remote users.
• Best in class browser isolation techniques.

Incentivized

• Kemp Flowmon ADS provides a large set of essential detections out of the box, which allows us to quickly acquire an awareness of potential problems in the monitored network.
• Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments.
• Powerful dashboards make summaries and reporting a breeze.

• Cloudflare still need to improve CASB direction to complete set of SASE tools.
• More integrations with the third-party agents to check device posture in the Zero Trust framework.
• More granularity in firewall rules for full replacement of on-premise solutions.

Incentivized

• Multi-license policy
• Outdated GUI
• Limited use of AI methods

Within a few hours, new engineers are trained in basic tasks and are quite happy they are able to resolve issues independently. After SSO is configured, onboarding is as simple as signing into m365 via a web browser popup.

Incentivized

Good chat support from the portal for basic questions and minor issues. The enterprise support line is provided as well.

Cloudflare was both the most feature-rich and cost-effective of comparisons. Presales engagement understood our challenges and was keen to solve them.

Incentivized

• The cost of Cloudflare Zero trust is much lower, hence reducing spending on infrastructure security.
• The Network performance is improved thanks to Warp protocol.
• Requires less maintenance and hence saves time.

Incentivized

• Early detection of cyber security events and incidents.
• Processing a large number of network flows on input (which means more than 60K flows per second)
• Parameterization of detection methods.
• The possibility to decide on the false-positive rate within the output of each method.