Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Cisco Umbrella comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 30, 2024
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Cisco Security Portfolio
3rd
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
59
Ranking in other categories
Network Monitoring Software (24th), Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th)
Cisco Umbrella
Ranking in Cisco Security Portfolio
2nd
Average Rating
8.8
Reviews Sentiment
7.4
Number of Reviews
111
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Secure Access Service Edge (SASE) (3rd), Domain Name System (DNS) Security (1st)
 

Mindshare comparison

As of December 2024, in the Cisco Security Portfolio category, the mindshare of Cisco Secure Network Analytics is 15.7%, down from 22.4% compared to the previous year. The mindshare of Cisco Umbrella is 13.3%, up from 13.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cisco Security Portfolio
 

Featured Reviews

Rainier S. - PeerSpot reviewer
You are able to drill down into a center's utilization, then create reports based on it
In the last year or two, we have been working with our Cisco NAS engineers to improve our security posturing. It is more our being proactive rather than reactive. While Stealthwatch and Lancope have this ability to look inside and give you visibility (a great feature), follow-up is the rule. We would like filters that you can put into place to tap onto certain types of behaviors, alerts out, and/or hopefully a block. This is sort of what we are looking for. I might be speaking too early, because we are not down this path yet. We know the feature set is there, we just do not know yet how to achieve it. That is proactive rather than more reactive. For Lancope Stealthwatch, we would like to see it more on the ASA Firewall platform. While this might already be available, this is more a failing of Cisco to inform us if it is there. For example: * Are we on the right or wrong version of the code? * What does the code look like? * Are we are really looking at firewalls? Or is it more about the foundation and route switches that we are seeing? It is about visibility.
Rohan Singh - PeerSpot reviewer
Protects endpoints wherever they are, always pushing people to the right locations to avoid malicious intent
The most valuable thing is how easy it is to deploy. We did it with 9,000 users at my last job, and it took a week to get to all the endpoints. Doing that without having to physically touch all those endpoints was very simple. The single pane of glass management makes it very easy to manage your rollout. We get a lot of "single panes of glass" and, eventually, you need a pane of panes of glass. But it's always good to have a clear and graphical view, and Umbrella's is nice and easy to read. Definitely, of the panes of glass that we do have, it's one of the easiest to use. The single pane of glass is good to group users together and separate people out. Some people need different types of security. Some people are more vulnerable. Some have more highly valuable assets, like C-suite people. It's really good to be able to have end-users defined inside of that. You don't have to jump around. You don't have to figure out who's who. It's all done through one pane of glass. What most people don't realize is that it's running in the background, which is a really nice aspect when it comes to security. Often, when you deploy a security tool, it takes up CPU performance. Everything slows to a grind. But Umbrella is so simple and easy and it doesn't affect the end-user experience. It's the best of all worlds. It's nice when people realize that they're being protected when they go to the wrong site. I think people are happy that they're protected, but it's nice that they rarely notice it. It's generally easy to maintain network connectivity, but with Umbrella, the nice part is that whichever connectivity you're on, you're always secure. With Umbrella, as long as you're online, you're going to be protected.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ease of deployment, once you get your ducks in a row."
"The solution reduces the amount of time it takes to detect and remediate threats."
"There are already many functionalities, so I don't think there is anything to improve."
"The beginning of any security investigation starts with net flow data."
"It's easy to set up. The deployment takes one or two days. You need to collect the data from a device and then direct it to the portal."
"The most valuable features of this solution are the logging, keeping threats under control, and keeping our data and environment secure."
"It has been pretty stable since we deployed it, and everything seems to be working fine."
"I value the feature which enables me to detect devices talking to suspect IPs."
"One of the most important features is the security posture check which Umbrella offers when a user accesses any website. That is one of the most unique features that it offers."
"The core business of Cisco Umbrella is non-malware. That's all it does: block the malware on the gateway."
"It has helped reduce my unit's security events."
"The most valuable feature for us is the DNS-based protection."
"Cisco Umbrella is easy to monitor, manage, and deploy."
"The solution is very easy to manage. We found the initial setup, for example, to be quite simple."
"The weekly reportings are great. The investigation is super and the application management is equally great."
"Cisco Umbrella offers DNS layer security, a secure web gateway, and cloud access security broker functionality."
 

Cons

"Complexity on integration is not so straightforward and you really need an expert to help build it out."
"Cisco Stealthwatch needs more integration with device discovery. We have to do a lot of hard work to figure out what things are. Better service integration is required."
"I would like to see it better organized when I'm looking at it."
"The initial setup was straightforward but required a lot of data entry, to begin with building out the server types and network types."
"I would like to see more and cleaner reporting. For example, if I pull up Steven and I want to look and maybe compare him to what you've done in the past week, and compare that to the past six months, the point would be to see what the difference in activity looks like over this time. I don't see that capability in reporting to date. You see that trend but you don't really see a straightforward comparison. That right there is key to what we want to see about the normal activity."
"At my company, we might not be using it enough with other applications that we have that can integrate with it."
"I would like to see better filters."
"It hasn't really improved our direct detection rate but it has definitely reduced our incident response time as we wouldn't have been able to detect threats or immediate risks without this solution."
"Having ready-to-go templates with best practices is definitely something that would be an improvement. Deployment, from day one, is something that definitely needs to be improved for Cisco customers."
"The only thing I can think of is that I'd like to see a little more flexibility in policy creation. The way that policy is currently structured is like a "first hit succeeds" kind of policy. It would be nice if it were more hierarchical."
"The integration with other solutions is a little complex. If you want to integrate with something like ArcSight or LogRhythm or Splunk, you need to do a lot of configuration. There are no easy ways to implement it."
"If I want to see which users access a website, I need an Active Directory registered on Umbrella's cloud."
"If we're trying to deploy it to a Mac through Meraki, it's impossible. The method of deployment for a Mac, and the features available in Meraki, are not compatible at all."
"Cisco Umbrella can be improved in terms of limited coverage and wind vulnerability. The product can only shield a small area, making it less effective for larger spaces or multiple users."
"I'm hoping for the conversion of Cisco ZTNA's features from Duo to Umbrella."
"I would like them to make some videos, practical videos, the kind with steps that people can use to learn and deploy"
 

Pricing and Cost Advice

"The tool is not cheaply priced."
"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"NetFlow is very expensive."
"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"​Licensing is done by flows per second, not including outside (in traffic)."
"The licensing costs are outrageous."
"The yearly licensing cost is about $50,000."
"Cisco Umbrella is not a cheap product. However, it's not a matter of the cost; it's more a matter of the value of security. It is easy to measure this value when you have a security incident. I think the price is a good trade-off for a product that can help you avoid security threats."
"There are no hidden costs with Umbrella. Everything is included in the package."
"Cisco should make the solution cheaper."
"The price could be lower."
"You can request an evaluation license​."
"The price could be lower."
"Cisco solutions are generally perceived to be rather expensive. We have constant internal discussions as to whether we should offer lower-priced security solutions from some of the competitors."
"The price depends on the use case, and it's a bit linear. But it depends on the customer's strategy and how Cisco plans to optimize the costs."
report
Use our free recommendation engine to learn which Cisco Security Portfolio solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
30%
Financial Services Firm
11%
Government
8%
Manufacturing Company
6%
Educational Organization
23%
Computer Software Company
18%
Financial Services Firm
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The tool is not cheaply priced. In cybersecurity, you want an extra layer of security in your organization. Some sectors want NDR solutions, so you cannot deploy such tools everywhere, as they are ...
What needs improvement with Cisco Stealthwatch?
The expensive nature of the tool is an area of concern where improvements are required.
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zscaler Internet Access is a good option for carrying out multiple security functi...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
OpenDNS
 

Learn More

Video not available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Find out what your peers are saying about Cisco Secure Network Analytics vs. Cisco Umbrella and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.