Cisco Secure Network Analytics Review
August 27, 2023

Cisco Secure Network Analytics Review

Jules Rogers | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco Secure Network Analytics

We use it for some security alerts for different bad traffic, malware, and traffic-type things. We also use it to look for what we call deprecated protocols, things that aren't supposed to be on the network. We use secure network analytics to identify traffic that's not supposed to be in use by our users and applications.
  • It's really good at mapping out like what applications are, like who's talking to what. To see if someone thinks that a particular application is only being used a certain way and we can validate what's talking to that system with the tool.
  • There are things that you can search for a particular type of traffic, but you cannot create an alert to alert on that type of traffic. An example of that is a particular encryption type. So like RC4 encryption is prohibited within DHS. I can search for traffic using it, but I can't create a rule alerting on that traffic type.
I wasn't involved in the decision-making when it happened. It was a couple of years ago, but I can't think of the vendor's name. They used to be here at Cisco Live. But it was another NetFlow vendor, but they were strictly NetFlow and all they did was just a net flow and the Secure Network Analytics has like some of the security anomaly detection stuff built into it. And that was kind of a deciding factor of wanting more of the security focus of the net flow. The net flow was a bonus, but the security stuff was what we were looking for.

Do you think Cisco Secure Network Analytics delivers good value for the price?

Yes

Are you happy with Cisco Secure Network Analytics's feature set?

Yes

Did Cisco Secure Network Analytics live up to sales and marketing promises?

Yes

Did implementation of Cisco Secure Network Analytics go as expected?

Yes

Would you buy Cisco Secure Network Analytics again?

Yes

We have a large enterprise that we monitor with it and it fits well there. It might be a little on the more complex size for smaller networks, but that's how we use it.