Skip to main content
TrustRadius
Cisco Secure Network Analytics

Cisco Secure Network Analytics
Formerly Cisco Stealthwatch

Overview

What is Cisco Secure Network Analytics?

Cisco Stealthwatch is a network behavior analysis product based on technology acquired by Cisco with its Lancope acquisition in 2015.

Read more
Recent Reviews

Watch that flow go!

7 out of 10
July 05, 2022
Incentivized
StealthWatch is currently being used to analyze NetFlow in our organization. This gives us important insight into what kinds of traffic is …
Continue reading

Stealthwatch Value Add

10 out of 10
March 29, 2022
Incentivized
Cisco Secure Network Analytics allows you to see everything on your network, whether it is wired or wireless. This is truly critical in …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Product Details

What is Cisco Secure Network Analytics?

Cisco Secure Network Analytics (Stealthwatch) aims to help users outsmart emerging threats in a digital business with machine learning and behavioral modeling, and know who is on the network and what they are doing using telemetry from the network infrastructure. Additionally, Cisco states users can detect advanced threats and respond to them quickly, protect critical data with smarter network segmentation, and do it all with an agentless solution that grows with the business.

Cisco Secure Network Analytics Competitors

Cisco Secure Network Analytics Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo

Cisco Secure Network Analytics Downloadables

Frequently Asked Questions

Cisco Stealthwatch is a network behavior analysis product based on technology acquired by Cisco with its Lancope acquisition in 2015.

Darktrace, Splunk Enterprise, and LogRhythm NextGen SIEM Platform are common alternatives for Cisco Secure Network Analytics.

The most common users of Cisco Secure Network Analytics are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(29)

Attribute Ratings

Reviews

(1-1 of 1)
Companies can't remove reviews or game the system. Here's why
July 05, 2022

Watch that flow go!

Score 7 out of 10
Vetted Review
Verified User
Incentivized
StealthWatch is currently being used to analyze NetFlow in our organization. This gives us important insight into what kinds of traffic is going through our network devices and allows us to provide this information to other departments in a much easier and digestible way than before. We have used it to help other departments in their decision making and analytics.
  • StealthWatch is very good at capturing NetFlow.
  • Stealthwatch is very good at presenting NetFlow data in easy to understands graphs and charts.
  • StealthWatch makes reporting on traffic much easier.
  • The StealthWatch interface is clunky and broken into 2 parts, both an HTML console and a JAVA console. This causes issues as one is completely different than the other.
  • Licenses are eaten up very quickly and can be pricey.
  • Upgrading StealthWatch is more tedious and time consuming than it should be.
I think a larger company that needs NetFlow data and has someone who can dedicate some time into learning the inner workings of StealthWatch could take advantage of all that StealWatch has to offer, but the suite itself may be too much to swallow for smaller staffed companies or companies that don't need this kind of visibility into network traffic.
  • StealthWatch helps other departments make decisions quickly based on NetFlow data.
  • StealthWatch can bring a lot of reporting to the table that can be used to advance project necessities and prove data necessities to management.
I haven't used any other products like StealthWatch in the past.
Cisco Secure Network Analytics can definitely provide more visibility into your network environment, allowing you to monitor East-West traffic as well as North-South traffic. This can be essential for a NOC or your I.T Security team and well worth the investment in setting up the netflows across your environment in order to get the most out of this product.
Leaders need to realize that we are long past the point where just an egress firewall is enough to maintain a good security posture. Corporations need to monitor the traffic both coming into their network and the traffic traversing inside of their network. Products like this allow a lot more visibility into your network that is not availability with just a firewall or syslog.
Cisco Secure Network Analytics is a fantastic tool, but does require some setup and upkeep which may turn off smaller IT Security teams. However, once all the flows are set up and the product is functioning with the proper rules, the insight into your network is fantastic. For us, the product has a significant ROI and will be a product we keep up on.
Implementation of the product can be tedious, especially fine tuning its rules to customize it to your environment. However, after that is done, CSNA is a very useful and flexible product that would enhance the security posture of any corporate network.
We haven't had too many issues with the uptime and availability of CSNA, but the application does have a lot of dependancies and we have seen issues after an upgrade that caused an outage for several hours.
CSNA integrates very well with other Cisco products and has some API options, but I have not integrated it much beyond that point so I can't attest to how it would integrate with 3rd party products.
  • We've used CSNA to track traffic of medical devices that we didn't have visibility into previously.
Return to navigation