Darktrace vs WatchGuard Network Security

• It did an ok job of analyzing and collecting data. It used a span (mirrored) port and then using its own algorithm developed flow records.
• It did an ok job of segmenting traffic into networks - not always correctly, but ok.
• It tried to identify devices by type - once again, it did ok, but not that great.

Read full review

• URL Filtering: Extremely effective for blocking of questionable content and protecting from phishing sites.
• Antivirus: Our clients have seen far fewer active threats when a WatchGuard Network Security Device is in place.
• Data Loss Prevention: A valuable tool for our clients who require more security when it comes to metadata and personal data leaving the network.

Read full review

• False positives. Darktrace uses "AI" to create its alerts for "unusual" or "malicious" activity. It is very common to see an alert for completely benign and normal device behavior - PC tries to print for the first time in a while, for example.
• Antigena actions. To some extent, this is a continuation of the previous point. Darktrace can break the network connectivity of the suspected device automatically. The excessive number of false positives makes administrators reluctant to use this feature, though. Also, the default Antigena actions are not relevant to real-world problems as I saw them in my experience with Darktrace.

Read full review

• Partner communications on technical issues. For example the undocumented feature of SDWAN hidden route. There is still no documentation on that.
• Too infrequent communications about high incidence technical support issues. We do not want to have to be encountering known issues and then having outages or problems that we then have to put in tickets about.
• Pay attention to your most highly technical partners, not just those that sell a lot of equipment. The highly technical partners can and do provide very usable feedback that can make the products better.
• WG wants partners to build relationships with people inside WG so we can drive solutions to problems, but too frequently, we get no response to emails sent to the proper internal resources about legitimate issues.

Read full review

• We had an ROI just during the POC. DarkTrace helped us identify a ransomware attack and we stopped it before it happened.
• The weekly reports more than pay for itself within the first few months.
• The powerful search capability helps us solve problems where other solutions fall short.

Read full review

• Blocking bad websites has saved many of our clients from any infection which saves time and money from a business being down and needing files restored perspective.
• Automatic end user training has saved time not having to go onsite to do it ourselves.
• Traffic and Security Reports that we use with clients to show them employee usage, blocked security threats, and growth projections.

Read full review