Try our new research platform with insights from 80,000+ expert users

Cisco Secure IPS (NGIPS) vs Cisco Secure Network Analytics comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cisco Secure IPS (NGIPS)
Average Rating
8.2
Number of Reviews
63
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (6th)
Cisco Secure Network Analytics
Average Rating
8.2
Number of Reviews
58
Ranking in other categories
Network Monitoring Software (24th), Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (3rd)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Cisco Secure IPS (NGIPS) is designed for Intrusion Detection and Prevention Software (IDPS) and holds a mindshare of 4.3%, down 4.6% compared to last year.
Cisco Secure Network Analytics, on the other hand, focuses on Network Monitoring Software, holds 1.5% mindshare, down 1.7% since last year.
Intrusion Detection and Prevention Software (IDPS)
Network Monitoring Software
 

Featured Reviews

Carlos Bracamonte - PeerSpot reviewer
Mar 15, 2023
Good protection, reliable and responsive support
Some of our customers are having DDOS attacks and ransomware attacks Earlier in July 2019, I noted that there was an attack. To mitigate future attacks from the ransomware in Columbia Bank and other similar situations, we at Cisco Talent, which is responsible for security intelligence, provided…
JT
Feb 20, 2023
Increased the visibility of what is happening in our network
We're currently using it to figure out what is happening in our network. For example, to see whether there's any incorrect traffic in our network. We are also using it to monitor traffic coming from the internet into our network. We have about 30,000 end users and about 60,000 end devices in the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"NGIPS lets you map web requests to a specific user to determine who is downloading files and what they are accessing. You can use it to identify users downloading malware or track time wasters using Facebook or something like that. It gives you visibility into what your users are doing on the Internet."
"The most valuable feature is its IPS ability. You are able to balance security and connectivity."
"The solution is stable. This is one of the good things in Firepower. Especially if we use ESE with it."
"I like how NGIPS has everything in one console."
"I like the security solutions from Cisco."
"In the virtual deployment, you have a couple of choices depending on your needs and how much bandwidth you have that needs to be inspected."
"It has good intelligence. It does a great job at stopping threats."
"The most valuable feature is that it is able to detect any form of infiltration."
"It provides good visibility to the customers. People are still evaluating it, but it provides visibility and helps them to take action to remediate and mitigate the issues that are highlighted on the dashboard. It has good integration with the Cisco switching platform."
"From a security standpoint, it is just seeing pockets as well. Visibility is very key for us."
"The feature most valuable for us is to gain visibility of what is actually floating through, so we can stop it based on whether it's good or bad traffic."
"The most valuable feature is NetFlow. The beginning of any security investigation starts with NetFlow data."
"StealthWatch lets me see the ports running in and out and the country. It has excellent reporting, telemetry, and artificial intelligence features. With the telemetry, I can set thresholds to detect sudden changes and the alarms go through the PLC parts. I can see all the ports running on that trunk."
"It has been pretty stable since we deployed it, and everything seems to be working fine."
"The deployment was a breeze. It is a very innovative and robust platform that allows us to bi-directionally stitch together data elements from Netflow-enabled devices to provide a context for network utilization."
"Provides easily identifiable anomalies that you can't see with signature detections."
 

Cons

"The price of Cisco NGIPS could improve."
"The GUI could be improved. The pain point is really only focused toward the security engineer who configures it and the operation engineer who manages it."
"I would like to see better integration with SIEMs."
"The only thing I think they may need to improve on a little bit is identifying software more correctly when you do network discovery."
"The SSL decrypt could be improved, but it's normal. All the devices in our platform need a lot of memory or CPU to do the SSL decrypt. This is an issue to improve in all platforms, not only in Cisco."
"If there was a software-based solution for scaling up then it would be much better."
"The look and feel of the console could be updated."
"There are certain limitations that need to be addressed."
"We've run into some issues with the configuration."
"It's a good solid solution but integration with Network Access Control products with Cisco ISE would be good."
"The version with the Dell server had iDRAC problems. Often, it reported iDRAC failure."
"It is time-consuming to set it up and understand how the tool works."
"There could be better integration on the programming side, which uses Python. StealthWatch could provide a template for Python to manage the switches. For example, it would be nice if StealthWatch bounced a port automatically it detected something anomalous."
"Cisco Stealthwatch needs more integration with device discovery. We have to do a lot of hard work to figure out what things are. Better service integration is required."
"The visualization could be improved, the GUI is not the best."
"Cisco Stealthwatch can improve by having bundled packages for popular add-ons. It would be a lot easier for people implementing it, have let's say a better way to use the product."
 

Pricing and Cost Advice

"The pricing could be improved. Our customers have a yearly license."
"I would rate the pricing four out of 10."
"The licensing can be billed annually or in multi-year contracts such as three, four, or five years."
"It is expensive. It has separate licensing for all the features, and every feature set seems to require another license. Licensing is on a yearly basis. There are no additional costs besides the standard licensing fee."
"The price of Cisco NGIPS could be reduced. It is more expensive than other solutions."
"The weakness of Cisco Firepower is the cost. Some of the customers see it as very expensive."
"When it comes to pricing you pay for a permanent licensing structure. One, three, and five-year options. There are no extra costs."
"The price of the solution is expensive to a degree it cannot be used by small businesses. It is best suited for medium and enterprise businesses."
"Pricing is much higher compared to other solutions."
"Licensing is on a yearly basis."
"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"The licensing costs are outrageous."
"NetFlow is very expensive."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"The yearly licensing cost is about $50,000."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
802,829 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
University
12%
Financial Services Firm
8%
Government
7%
Computer Software Company
32%
Financial Services Firm
11%
Government
7%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco NGIPS?
The product's initial setup phase was easy.
What needs improvement with Cisco NGIPS?
There are certain limitations that need to be addressed.
What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
I would rate Cisco SNA as a nine out of ten in terms of costliness.
What needs improvement with Cisco Stealthwatch?
One area that could be improved in SNA is the integration with Cisco ISE for user and session details, which currently requires additional setup.
 

Also Known As

Sourcefire NGIPS, Firepower NGIPS
Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
 

Learn More

Video not available
 

Overview

 

Sample Customers

American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Find out what your peers are saying about Cisco Secure IPS (NGIPS) vs. Cisco Secure Network Analytics and other solutions. Updated: January 2020.
802,829 professionals have used our research since 2012.