RSA Security Analytics (Netwitness)
May 02, 2018

RSA Security Analytics (Netwitness)

Anonymous | TrustRadius Reviewer
Score 5 out of 10
Vetted Review
Verified User
Review Source

Overall Satisfaction with RSA Security Analytics

We use RSA Security Analytics (previously Netwitness) as a network DVR for look back at events. It does full packet capture and reconstruction. For forensic analysis this is invaluable. It has some threat detection capability. The new GUI is significantly better and actually makes menus usable and reduces confusion for new users.
  • Full packet capture allows look back on security events
  • Packet reconstruction is essential to make sense of packets captured
  • Threat analysis of captured packets provide additional indicators of compromise
  • GUI was horrible prior to the current version
  • In our experience, support does not proactively stay in contact. No health checks or roadmap presentation. Only an automated email at renewal time.
  • Updates frequently break the box and require support intervention
  • The tool is great and an important part of my tool box
  • The level of administration needed is a little too high
  • Support relationships have to be customer led and prompted
Netwitness is an industry leading tool. If you can figure out how to use it, the data is crucial to investigations. The support is improving, but has some distance to cover before they are up to standard for an enterprise level.

RSA NetWitness Network Feature Ratings