RSA Security Analytics (Netwitness)
May 02, 2018
RSA Security Analytics (Netwitness)
Score 5 out of 10
Vetted Review
Verified User
Overall Satisfaction with RSA Security Analytics
We use RSA Security Analytics (previously Netwitness) as a network DVR for look back at events. It does full packet capture and reconstruction. For forensic analysis this is invaluable. It has some threat detection capability. The new GUI is significantly better and actually makes menus usable and reduces confusion for new users.
- Full packet capture allows look back on security events
- Packet reconstruction is essential to make sense of packets captured
- Threat analysis of captured packets provide additional indicators of compromise
- GUI was horrible prior to the current version
- In our experience, support does not proactively stay in contact. No health checks or roadmap presentation. Only an automated email at renewal time.
- Updates frequently break the box and require support intervention
- The tool is great and an important part of my tool box
- The level of administration needed is a little too high
- Support relationships have to be customer led and prompted