Skip to main content
TrustRadius
Cisco Secure Network Analytics

Cisco Secure Network Analytics
Formerly Cisco Stealthwatch

Overview

What is Cisco Secure Network Analytics?

Cisco Stealthwatch is a network behavior analysis product based on technology acquired by Cisco with its Lancope acquisition in 2015.

Read more
Recent Reviews

Watch that flow go!

7 out of 10
July 05, 2022
Incentivized
StealthWatch is currently being used to analyze NetFlow in our organization. This gives us important insight into what kinds of traffic is …
Continue reading

Stealthwatch Value Add

10 out of 10
March 29, 2022
Incentivized
Cisco Secure Network Analytics allows you to see everything on your network, whether it is wired or wireless. This is truly critical in …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Product Details

What is Cisco Secure Network Analytics?

Cisco Secure Network Analytics (Stealthwatch) aims to help users outsmart emerging threats in a digital business with machine learning and behavioral modeling, and know who is on the network and what they are doing using telemetry from the network infrastructure. Additionally, Cisco states users can detect advanced threats and respond to them quickly, protect critical data with smarter network segmentation, and do it all with an agentless solution that grows with the business.

Cisco Secure Network Analytics Competitors

Cisco Secure Network Analytics Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo

Cisco Secure Network Analytics Downloadables

Frequently Asked Questions

Cisco Stealthwatch is a network behavior analysis product based on technology acquired by Cisco with its Lancope acquisition in 2015.

Darktrace, Splunk Enterprise, and LogRhythm NextGen SIEM Platform are common alternatives for Cisco Secure Network Analytics.

The most common users of Cisco Secure Network Analytics are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(29)

Attribute Ratings

Reviews

(1-10 of 10)
Companies can't remove reviews or game the system. Here's why
Score 9 out of 10
Vetted Review
Verified User
Incentivized
I wasn't involved in the decision-making when it happened. It was a couple of years ago, but I can't think of the vendor's name. They used to be here at Cisco Live. But it was another NetFlow vendor, but they were strictly NetFlow and all they did was just a net flow and the Secure Network Analytics has like some of the security anomaly detection stuff built into it. And that was kind of a deciding factor of wanting more of the security focus of the net flow. The net flow was a bonus, but the security stuff was what we were looking for.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
After integrating and developing a lot of security features in MF NNM, we were not able to meet the requirements from the customer. After the alternative research, we got to know about this Cisco Secure Network Analytics tool and after implementing the same, we finally were able to win CSAT.
MF NNM had a support-related issue as well. It took more than a month to solve for couple of issues frequently. Whenever there is a problem or need their support, reaching out to them has always been a challenge.
Score 8 out of 10
Vetted Review
ResellerIncentivized
  • SolarWinds NetFlow Traffic Analyzer (NTA)
While other platforms such as Nagios and Solarwinds NTA provide visibility of the traffic, it either (*) does not provide API/programmatic way to pull the data to other platforms or (*) does not interface with secondary security systems to report on malicious traffic activity. Ultimately, these platforms accomplish the visibility, but do little else in the overall IT/security ecosystem of product, making them "dead end" data flow products where data goes in but does not share elsewhere.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
In order for Armis to truly provide value, it will require spans and taps at every location. This is not feasible in most places since not all sides have the infrastructure to support this and now you are required to support an additional appliance at every site. Stealthwatch leveraging NetFlow makes it 2nd to none.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
Wireshark is a good option in a lower budget, but Wireshark also has lesser security as compared to Cisco which compelled us to look for something else in [the] same price but with more better features.
Oleksandr Tsapenko | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
ResellerIncentivized
In addition [to] Cisco SteathWatch, we highly evaluated Cisco AnyConnect and Cisco Advanced Malware Protection for Endpoints (Cisco APM4E). Often [these] solutions complement each other and improve network security level. Each of them separate[ly] [are] handy products for you[r] SOC, but together they are much more effective rather than alone.
John Patrick Duro | TrustRadius Reviewer
Score 7 out of 10
Vetted Review
Verified User
Cisco has advantages in terms of the following:
1. Encrypted Traffic Analytics provides visibility and control to traffic without the need to decrypt it.
2. Threat detection that collects proxy records and associates them with flow records, delivering the user application, and URL details. This is very handy in identifying well-hidden threats and anomalous behavior.
Competitors that I have tried do not have the above items and that made us decide on Cisco StealthWatch.
Matt Frederickson | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
NTOP is the only thing out there, in my opinion, that provides similar type of visibility. But StealthWatch is the product all vendors should strive to emulate. It is easy to install; it is easy to configure; it works as advertised (and then some). I do recommend the three-day work shop they occasionally run - or some onsite training. The product is feature rich and the training will help you get the most out of it.
Return to navigation