ExtraHop Performance Platform vs. NetWitness Logs

One very big use is the ability to resolve performance issues. One example used was with the performance of sql issues. ExtraHop [Performance Platform] gave us the packet tracing ability to see the database was being queried incorrectly. A programmer has written a query that would bring the database information local and one the queries instead of allowing the sql server itself to do the work and push out the information.

Incentivized

• It is very good at making it easy to find root cause for app issues.
• It provides very good stats, graphs, and diagrams of IT utilization.

Incentivized

• Some person like me who want to see Extrahop can integrate better with other network analysis tools like Wireshark or TCPdump. The desired functionality I've been looking for is to program a kind of specific criteria to trigger the probe starts to run Wireshark or TCPdump to save the trace of a specific problematic session. Sometimes I want to see the evidence in a packet trace layer rather than just have the warning or error only presented in the dashboard.

Incentivized

ExtraHop fits perfectly into the nist security framework to ensure the network is monitored and protected from anomalous behaviors.

Incentivized

Documentation could be a lot better. Tech support is outstanding.

Incentivized

We use ExtraHop specifically to monitor network traffic. It does many other things very well also, but it is the best network traffic analysis tool that we currently have in house. The fact that it is agentless also makes it more reliable and not dependent on agents running on devices throughout our enterprise.

Incentivized

• Accelerated root cause analysis
• Cut out time passing the hot potato, focused time on resolution
• It's a good tool for change management, helping to transform a reactive culture to one that is more proactive
• Enables early warning and visibility, prompts action before a system goes down

Incentivized