Colasoft Capsa vs. IBM SevOne

Capsa is highly recommended to be used in small dense areas of a network where it makes sense to be able to run analytics off of a mirror port to gain insight into traffic trends. It is a costly product to install in branch locations, and requires a decent spec hardware to run appropriately

Incentivized

The software is handy and really helps us track all the issues that may occur in our network, allowing us to rectify them before any significant problems with our server can arise. It also enhances the overall performance of all our servers and networks, but, as I mentioned earlier, it will take considerable time for a beginner to become familiar with every feature of the software.

Incentivized

• Robust Application. Able to handle traffic that most businesses will throw at it.
• Easy to use. Easy to setup captures and filter down to specific traffic types.
• Relatively cheap for what it's able to accomplish.

Incentivized

• To see trends in network usage, identify upgrade switches, increase bandwidth and cabling
• Provide dashboards to operations, logistics for both warehouse and production managers
• Can integrate into incident systems to auto create tickets when issues happen

Incentivized

• Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
• Needs API access to trigger capturesl
• Needs Agents for remote capturesl

Incentivized

• Documentation for the embedded help pages in NMS and more. In my opinion, these do not provide anything of any depth or maybe anything helpful at all. If anything it just seems to be a guide of what actually exists on the page. It is nicely searchable documentation though.
• It is very surprising and disappointing for us to learn that it isn't until the latest version of IBM SevOne that bulk editing was introduced. I think this is such a basic and foundational feature that should have been a part of the original rollout. My team is still trying to configure the REST API.
• It was disappointing for the webinar to start with a speaker who had a thick accent and simply read from slides. To me, it felt hopeless until the second speaker, who was engaging and easy to understand. It's as if this fact wasn't considered. I'm sure the first speaker lost a lot of viewers who didn't stick around to discover the 2nd speaker.
• I asked three different questions during the webinar and none were answered.

Incentivized

Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.

Incentivized

IBM SevOne was selected instead of Datadog because it is perfect for large insurance networks and also connects trouble-free between the on-premise and cloud environments. Its alerts are in real-time, it offers comprehensive dashboards and it allows to gain a better grip on the network issues, thus helping to keep the downtime small and the operations well managed thanks to the good communication.

Incentivized

• While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
• Relatively cheap compared to the feature set.

Incentivized

• The software has minimal downtime, which helps us connect with our customers quickly and resolve their issues.
• Automated networks reports that it gives saves a lot of time and resources.
• Setting up and completing the configuration will take more than three months, which is a significant expense at the outset.

Incentivized