SolarWinds NetFlow Traffic Analyzer (NTA) vs. Trellix Network Security

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
SolarWinds NetFlow Traffic Analyzer (NTA)
Score 9.3 out of 10
N/A
SolarWinds Netflow Traffic Analyzer is a network monitoring tool within the broader SolarWinds ecosystem. It includes core traffic monitoring features, as well as customizable traffic reports and alerts.N/A
Trellix Network Security
Score 8.6 out of 10
Enterprise companies (1,001+ employees)
Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .
$0
per appliance/ per mbps
Pricing
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Editions & Modules
No answers on this topic
SmartVision
$0
per appliance/ per mbps
Offerings
Pricing Offerings
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeOptionalOptional
Additional Details
More Pricing Information
Community Pulse
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Considered Both Products
SolarWinds NetFlow Traffic Analyzer (NTA)
Chose SolarWinds NetFlow Traffic Analyzer (NTA)
I have not done a detailed evaluation of PRTG vs. SolarWinds Netflow Traffic Analyzer. I selected SolarWinds Netflow Traffic Analyzer because I am already using other SolarWinds products.
Trellix Network Security

No answer on this topic

Best Alternatives
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Small Businesses
Auvik
Auvik
Score 8.5 out of 10
NinjaOne
NinjaOne
Score 9.1 out of 10
Medium-sized Companies
InsightIDR
InsightIDR
Score 8.9 out of 10
Cisco Meraki MX
Cisco Meraki MX
Score 9.0 out of 10
Enterprises
InsightIDR
InsightIDR
Score 8.9 out of 10
Cisco Meraki MX
Cisco Meraki MX
Score 9.0 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Likelihood to Recommend
9.0
(62 ratings)
9.0
(1 ratings)
Usability
10.0
(11 ratings)
-
(0 ratings)
Support Rating
8.0
(49 ratings)
-
(0 ratings)
Online Training
8.2
(1 ratings)
-
(0 ratings)
Vendor post-sale
8.2
(1 ratings)
-
(0 ratings)
Vendor pre-sale
9.1
(1 ratings)
-
(0 ratings)
User Testimonials
SolarWinds NetFlow Traffic Analyzer (NTA)Trellix Network Security
Likelihood to Recommend
SolarWinds
We use and depend on it for status state of our network gear, switches and routers. It does an excellent job of getting you the details you need to confirm all devices and products are working at the level needed. At times, it does tend to flag network switch ports and/or switches themselves as exceeding their rated capacity when frequently it was a quick blip of high traffic due to downloads, or uploads causing the max'ing of the device. Again, you can adjust the settings but then you adjust it too high and miss real activity. It can become nuisance alerting when you tend to then ignore
Read full review
Trellix (FireEye + McAfee)
It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.
Read full review
Pros
SolarWinds
  • The level of customization possible with Network Bandwidth Analyzer is very valuable. Rather than being stuck with a "one-size-fits-all" presentation, an administrator can easily create customized views, reports, and alerts so that users can have a more tailored view of the data provided by Network Bandwidth Analyzer. This has the effect of making the tool more attractive to the end user.
  • The NetFlow Traffic Analyzer piece of Network Bandwidth Analyzer provides the details on bandwidth usage on the network. More than knowing how much bandwidth is being used, one is provided with detailed information on how that bandwidth is being used. This provides invaluable information for capacity planning and even certain forensic tasks faced by the network engineer.
  • The ability to produce network maps provides an easy way to create an attractive and functional NOC/SOC view of the entire network. Both technician and the occasional passerby can quickly determine if there are issues to be addressed. The ability to customize a map with background images and custom icons and stencils can make these maps really pop.
Read full review
Trellix (FireEye + McAfee)
  • Advanced detection of targeted attacks.
  • Mandiant team effort is a big plus.
  • Inline mitigation capabilities particularly well.
  • Different deployment models for specific needs.
  • License and information sharing selection 1 way or 2 way mode.
  • Frequent updates.
  • Low false positive rates.
  • FireEye sandboxing is immune to sandboxing attacks.
  • Central management (CMS) capabilities for managing several NX's.
  • Extra IPS/IDS functionality in the product.
  • Smartvision specific to lateral movement detection.
  • Upgrades and updates with zero down time.
  • Local FireEye support is superb.
  • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
  • SSL inspection support.
  • No need to maintain, build or updates the images. It's highly automatic.
Read full review
Cons
SolarWinds
  • The ability to intuitively and quickly serve up specified information up to a dashboard for general “public” consumption, that cycles through several pages of information.
  • The ability to intuitively set up alerting on bandwidth levels, instead of having to dig through all types of alerts available to find the one needed.
  • Provide a pricing model based on different support levels: if I want only available update installations, don’t make me pay the same amount as those wanting full support.
Read full review
Trellix (FireEye + McAfee)
  • Very first detected APT sample can pass the NX even it's inline blocking mode.
  • Performance optimization for busy networks is cumbersome.
  • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
  • Constant limitations of tcpdump/ packet capture for 10G interfaces.
  • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
  • It's not a full NDR solution or a UBA solution.
  • Lack of device or user mapping.
  • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
  • You cannot make manual submission to NX (needs AX).
  • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
Read full review
Usability
SolarWinds
As far as rating for usability is concerned I would give 10/10 as NTA is very easy to use. All you need to do is install that module and ask network Team to configure the Netflow towards Server IP. [The] rest is pre-configured and reports are pre-built. Moment you receive the flows from Network all you will have is information about traffic.
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Support Rating
SolarWinds
I know we could probably pay for it, but it would be nice if we could get to a tier 2 technician faster. Spending a couple of hours on the phone with the level 1 technician, when we have already tried the troubleshooting they are walking us through, is just a waste of time.
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Online Training
SolarWinds
The training offered by SolarWinds is some of the best out there. They have several different videos that go into great detail from initial setup to advanced configurations. In addition to the view at your own pace video, they also have live training for customers that focus on a single product and you can ask questions with the folks who develop the software. I have had good success with their live sessions and getting questions answered.
Read full review
Trellix (FireEye + McAfee)
No answers on this topic
Alternatives Considered
SolarWinds
SolarWinds NetFlow Traffic Analyzer compared to Wireshark and PRTG Network Monitor beats it by just the simple interface. Though all are manual setup, NTA takes it a step further with graphs and reports that analyze the data for you. In comparing to Extrahop from a bandwidth comparison, Extrahop wins but Extrahop is a lot more than just a bandwidth monitoring and cost.
Read full review
Trellix (FireEye + McAfee)
FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.
Read full review
Return on Investment
SolarWinds
  • Be prepared to answer lots of questions. When people see the data in NTA they are going to want to know why App A is talking to App B. Be ready to explain!
  • Hand the keys to the NTA kingdom to the network team. They will thank you. Everyone wants to have friends on the network team, right?
  • Be prepared to invest in some significant compute and storage performance to keep up with your NTA monitoring
  • Running the latest firmware for your network gear is (often) required to take advantage of all the flow-monitoring. You upgrade regularly, right??
Read full review
Trellix (FireEye + McAfee)
  • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
  • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
  • APTs in our region successfully detected and mitigated by the NX.
  • For the ROI, in a six month period FireEye is paying off its [investment].
  • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
Read full review
ScreenShots

Trellix Network Security Screenshots

Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.