Reviews (1-2 of 2)
May 02, 2018
Score 5 out of 10
We use RSA Security Analytics (previously Netwitness) as a network DVR for look back at events. It does full packet capture and reconstruction. For forensic analysis this is invaluable. It has some threat detection capability. The new GUI is significantly better and actually makes menus usable and reduces confusion for new users.
- Full packet capture allows look back on security events
- Packet reconstruction is essential to make sense of packets captured
- Threat analysis of captured packets provide additional indicators of compromise
- GUI was horrible prior to the current version
- In our experience, support does not proactively stay in contact. No health checks or roadmap presentation. Only an automated email at renewal time.
- Updates frequently break the box and require support intervention
Read this authenticated review
Netwitness is an industry leading tool. If you can figure out how to use it, the data is crucial to investigations. The support is improving, but has some distance to cover before they are up to standard for an enterprise level.
December 03, 2015
Score 8 out of 10
I worked for HCL technologies and was deployed at SBI IT headquarters for implementing their security operations center which involved implementing the tool. They used this tool to manage the security for their entire organizations web gateway . It had a capacity of close to 500000 events per second and had approximately 37000 various security devices linked to the tool .
- Easy to use and understand
- Provides extensive details to analyze the threat with more accuracy
- It is a smart tool with graphical display of data for easier interpretation
- The meta part to form the dashboards were a bit complicated
- The user interface could be made more understandable
Read Utkarsh Ahuja's full review
It is perfectly suited for large organizations aiming for providing web security to the customers or also if they are interested to setup their own security perations center . It is one of the leading security tools in the market and offers comprehensive capability in dealing with web attacks.
RSA NetWitness Network Scorecard Summary
About RSA NetWitness Network
RSA NetWitness Network (formerly RSA Security Analytics) is network detection and response security application from RSA Security.
Categories: Network Security
RSA NetWitness Network Technical Details