The security features of this solution are the most valuable.
Technical Account Manager at a security firm with 501-1,000 employees
Secure, simple to install, and has helpful technical support
Pros and Cons
- "The security features of this solution are the most valuable."
- "I would like to see more cloud capability."
What is most valuable?
What needs improvement?
I can't think of anything right now. They meet all of my customers' requirements.
Additional integration partners would be beneficial.
I would like to see more cloud capability.
For how long have I used the solution?
I have been working with ExtraHop Reveal(x) for four years.
We are using the latest version.
What do I think about the stability of the solution?
ExtraHop Reveal(x) is very stable. We have not experienced any issues.
I would rate the stability a nine out of ten.
Buyer's Guide
ExtraHop Reveal(x)
May 2024
![PeerSpot Buyer's Guide](https://www.peerspot.com/images/peerspot_logo_lt.png)
Learn what your peers think about ExtraHop Reveal(x). Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
771,157 professionals have used our research since 2012.
What do I think about the scalability of the solution?
Sometimes ExtraHop Reveal(x) is easy to scale. We have had some issues with scalability.
How are customer service and support?
I would rate technical support a four out of five. There's a little room for improvement.
How was the initial setup?
The initial setup is simple.
Maintenance requires very little personnel. For example, one person is required for every 100 people.
What's my experience with pricing, setup cost, and licensing?
I would rate the price a three out of five. It could be less expensive.
Which other solutions did I evaluate?
I have not compared ExtraHop Reveal (x) with other vendors.
What other advice do I have?
We are partners with ExtraHop.
I would rate ExtraHop Reveal(x) a nine out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Sales Engineer | Technical Sales | Pre-Sales at SUSE
Enables users to make an informed decision to mitigate performance or security incidents
Pros and Cons
- "We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well."
- "Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data."
What is our primary use case?
We have implemented the ExtraHop Reveal(x) solution at multiple clients. They range from government, retail to financial. We collect north-south and east-west traffic via a visibility layer (packet brokers, taps, spans) and then feed that traffic to the ExtraHop Reveal (x) solution. The volume ranges from 1 GB solutions up to 40 GB solutions with 100 GB in the pipeline. Initially, we approached them for application performance analysis, but we now use it to assist the security teams as well. The behavioral analytics and ability to go back in history is proving extremely valuable.
How has it helped my organization?
The analytic views (L2 to L7), with a vast amount of enterprise protocols, standard dashboards, as well as various applications or security dashboards that can be added, gave a very quick ROI. The technical teams are able to gain views of their networks, servers, applications, etc. and the management level is able to gain overview dashboards to assist them as well. Security teams are able to gain insight into the behavior of security elements, which enables them to track the event back in time to see exactly what happened and what elements were involved with the incident. It is also very useful to have the AI/ML element with Reveal (x). The ability to decrypt at the line rate proved invaluable. Various triggers and integration options are available to continually add value to the clients' specific environment.
What is most valuable?
We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well. The ability to integrate with various other solutions enables improvement in existing processes.
What needs improvement?
Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data.
Triggers - While the triggers are great for specific use cases, it can add load to the hardware and requires some development skill, which can be costly.
VoIP - While we can view SIP and RTP (quality, MOS, etc.) it is not the best solution for VoIP itself. There are better solutions for more detailed VoIP monitoring. It can solve some problems, but not all problems.
For how long have I used the solution?
We have been using ExtraHop for quite a few years and we have been using their Reveal (x) platform since it went to market.
What do I think about the stability of the solution?
It is very stable. Have not had any issues.
What do I think about the scalability of the solution?
The solution can scale up to 100GB and it works.
How are customer service and technical support?
99% of the time it was great. Only had one incident that took some time, but it was resolved eventually with a positive outcome.
Which solution did I use previously and why did I switch?
We have used other solutions from other vendors like NetScout, Sinefa, etc. where the client budget, requirement and focus changed. Some clients prefer certain vendors since they might have a standing relationship with them.
How was the initial setup?
Design can take some time, the visibility layer can be quite intricate, but the actual ExtraHop Reveal (x) solution is extremely easy to deploy.
What about the implementation team?
Initially, we depended on the vendor team, but later we deployed mostly ourselves with some input from the vendor team. They were always very helpful and professional.
What was our ROI?
The ROI is fairly immediate, if you attach a service or dedicated resource. That determines how much you win.
What's my experience with pricing, setup cost, and licensing?
It is important to understand the data you feed any of these solutions. We always recommend a visibility layer (packet brokers, taps, etc.), but that incurs a new cost that can delay the project. So work on a strategy that delivers visibility and a solution that enables your teams. All of this will add to the project and cost. What you put in is what you will get out.
Which other solutions did I evaluate?
NetScout - TruView, nGeniusOne, Sinefa, nTopNG, Sintrex Flow.
What other advice do I have?
Generally, I enjoy working with this solution and the teams from ExtraHop. Just be sure that you always attache a service or a dedicated resource to any such solution to get the most value out of it.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: We are partners with ExtraHop as well as NetScout and resell their solutions and services.
Buyer's Guide
ExtraHop Reveal(x)
May 2024
![PeerSpot Buyer's Guide](https://www.peerspot.com/images/peerspot_logo_lt.png)
Learn what your peers think about ExtraHop Reveal(x). Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
771,157 professionals have used our research since 2012.
Technical Account Manager at a security firm with 501-1,000 employees
An easy initial setup with extensive documentation and good stability
Pros and Cons
- "Setting up the solution is relatively easy."
- "The solution is expensive and gets more expensive if a company needs to scale it."
What is our primary use case?
We primarily use the solution for three main aspects: security, visibility, and application performance.
What is most valuable?
The most valuable aspect of the solution is the depth of information that's available. With all the documentation and details, it's a very good solution to work with.
Setting up the solution is relatively easy.
What needs improvement?
At this point, there aren't any features that are lacking, from our perspective. The solution is pretty complete.
The solution is expensive and gets more expensive if a company needs to scale it.
For how long have I used the solution?
I've been using the solution for about a year now.
What do I think about the stability of the solution?
The stability of the solution is excellent. We don't have any issues with bugs or glitches. It doesn't crash or freeze. I would say it's quite reliable from a performance standpoint.
What do I think about the scalability of the solution?
We have about a dozen or so people who regularly interact with the solution. They are predominantly project and operational network engineers. We're using the product on a daily basis.
Scalability is probably limited, mainly due to the expenses involved in expanding the solution. Due to costs, companies may be turned off by scaling in any meaningful way.
How are customer service and technical support?
We've never had to contact technical support. We haven't had any major issues. Therefore, I wouldn't be able to rate the level of their service. From a product perspective, it's been very good so far.
Which solution did I use previously and why did I switch?
We didn't previously use a different product. This is the first solution that we've used for security and application performance purposes.
How was the initial setup?
The initial setup was not complex. We found the implementation process to be quite simple and straightforward.
It took approximately three weeks to deploy the solution and to have everything up and running.
The great part about the solution is that maintenance is minimal. It's mainly just software upgrades when they're released. When upgrades are needed, our network team is able to handle everything in house.
What about the implementation team?
Our company with our own in-house team plus the vendor handled the setup together.
What's my experience with pricing, setup cost, and licensing?
I don't have any insights into the pricing of the solution. I'm not sure what they are, exactly, however, it is my understanding that the solution itself is costly. There are also additional charges for additional devices to collect the traffic from the network. If you need to scale, the pricing grows too. Everything can add up.
What other advice do I have?
We have a relationship with the vendor, and we're also a customer.
For those considering implementing the solution, I would advise organizations to engage early with their sales managers and sales engineers, in order to understand these cases.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Presales Consultant at a tech services company with 201-500 employees
Has good stability but needs more integration with security solutions
Pros and Cons
- "The solution's initial setup process is easy."
- "It needs integration with more security vendors."
What is our primary use case?
We use the solution for an advanced layer of security. It provides us with network visibility to identify types of attacks.
What is most valuable?
The solution's most valuable feature is network visibility for security purposes.
What needs improvement?
They should integrate the solution with more security vendors.
For how long have I used the solution?
We have been using the solution for six months.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
We have three end users of the solution in our organization.
How are customer service and support?
We contacted the solution's technical support team for issues related to security layers.
Which solution did I use previously and why did I switch?
I have used LinkShadow before. It has good offloading features.
How was the initial setup?
The solution's initial setup process is easy. We have to scan the port and tune the configuration for deployment. It takes a week to complete the process.
What about the implementation team?
Our vendor helped us implement the solution.
What other advice do I have?
I advise others to ensure the solution covers all the use cases. I rate it as a seven.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
![PeerSpot user](https://www.peerspot.com/assets/media/images/anonymous_avatar_x50-87dfede4689b8170a453e0c713346f4bf45dfafb.png)
Buyer's Guide
Download our free ExtraHop Reveal(x) Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2024
Popular Comparisons
Darktrace
Vectra AI
Cisco Secure Network Analytics
Rapid7 InsightIDR
Trend Micro Deep Discovery
Trend Micro TippingPoint Threat Protection System
SolarWinds NetFlow Traffic Analyzer
Arista NDR
Cisco Sourcefire SNORT
Corelight
NetWitness XDR
Fidelis Elevate
Cisco Secure Cloud Analytics
Flowmon
Buyer's Guide
Download our free ExtraHop Reveal(x) Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Any recommendations for Network Traffic Analysis (NTA) tools?
- Which Network Analyzer and Network Configuration Manager do you recommend?
- When evaluating Network Traffic Analysis, what aspect do you think is the most important to look for?
- What is the future of the Network Operation Center (NOC)?
- How is AI security improving cybersecurity?
- What is the best network traffic analysis tool for a large enterprise?
- Which device do you recommend to use for traffic shaping & bandwidth optimization between P2P links?
- What are some questions to ask vendors when researching network traffic analysis tools?
- What are your top considerations when choosing a Network Traffic Analysis tool?
@Dawid Van Der Merwe Good points! Thanks for sharing your experience. Would you like to provide a review of Extrahop? We would be interested to get your impressions in a review. Let me know and I'll have someone accompany you through the process.