Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Fortinet FortiSandbox comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cisco Secure Network Analytics
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
59
Ranking in other categories
Network Monitoring Software (24th), Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (3rd)
Fortinet FortiSandbox
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
38
Ranking in other categories
Advanced Threat Protection (ATP) (5th), Threat Deception Platforms (7th)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Cisco Secure Network Analytics is designed for Network Monitoring Software and holds a mindshare of 1.5%, down 1.7% compared to last year.
Fortinet FortiSandbox, on the other hand, focuses on Advanced Threat Protection (ATP), holds 10.9% mindshare, up 8.5% since last year.
Network Monitoring Software
Advanced Threat Protection (ATP)
 

Featured Reviews

Rainier S. - PeerSpot reviewer
You are able to drill down into a center's utilization, then create reports based on it
In the last year or two, we have been working with our Cisco NAS engineers to improve our security posturing. It is more our being proactive rather than reactive. While Stealthwatch and Lancope have this ability to look inside and give you visibility (a great feature), follow-up is the rule. We would like filters that you can put into place to tap onto certain types of behaviors, alerts out, and/or hopefully a block. This is sort of what we are looking for. I might be speaking too early, because we are not down this path yet. We know the feature set is there, we just do not know yet how to achieve it. That is proactive rather than more reactive. For Lancope Stealthwatch, we would like to see it more on the ASA Firewall platform. While this might already be available, this is more a failing of Cisco to inform us if it is there. For example: * Are we on the right or wrong version of the code? * What does the code look like? * Are we are really looking at firewalls? Or is it more about the foundation and route switches that we are seeing? It is about visibility.
Kiarash Heydari - PeerSpot reviewer
Light and powerful solution design; useful to have
My impression is that the initial setup process is quite straightforward. If you know what you're using it for, the initial setup can be quite easy and the solution is not that hard to use. When it comes to the steps taken for the implementation, you would select the OS you're using and when the files are sent to the appliance you check, and in the appliance configuration, it must be like the visual governance environment. You must set up the OS you have so that appliance can scan or analyze your file. To maintain this solution, you must always have at least one all-around person tuning this solution.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Most valuable features are the network maps and server and network response time."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"Another notable feature of Cisco Secure Network Analytics is its Layer 7 visibility, which allows us to monitor and analyze network communications at the application layer."
"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."
"The search options on Cisco Stealthwatch are the most valuable. You can get very granular with it, down to the kilobits or the seconds if you want. The product supports any time frame that you need, so that is nice."
"We find that Stealthwatch can detect the unseen."
"The beginning of any security investigation starts with net flow data."
"I value the feature which enables me to detect devices talking to suspect IPs."
"The most valuable features of Fortinet FortiSandbox are customization, ICAP protocol, and integration with other vendors. Additionally, the security work very well."
"Overall, it works fine. Its interface is also fine."
"Fortinet FortiSandbox puts suspicious files in quarantine, analyzes for virus risks, and lets them out of quarantine if it detects no risk."
"The adapter is beneficial as it allows integration with various devices, not just Fortinet."
"Fortinet FortiSandbox is faster than other sandbox solutions."
"The solution is easy to manage."
"The solution has the highest stability...The solution's setup is not complex as they are already included in Fortinet."
"It is a stable solution."
 

Cons

"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"There's a lot of traffic on our network that we don't see sometimes."
"If there was one improvement I’d suggest it would be that it detect traffic through an intranet. The product requires that traffic flow through a managed network device. The product is designed mostly for enterprise environments and not smaller environments or businesses."
"The ability to be natively integrated into Port Aggregator would be beneficial because it would reduce just one more component that's needed in order to have that type of view."
"They should include Citrix VDIs in the next release."
"I would like to see better filters."
"I would like to see some improvement when it comes to reporting."
"I would like to see it better organized when I'm looking at it."
"If updated, Fortinet FortiSandbox could cover other risks."
"Not practical for real-time web traffic analysis because users won't wait for the FortiSandbox to complete its analysis before accessing content"
"The response time from technical support should be improved."
"The initial setup is not too complex but could be easier."
"Product could include a user interface and be made simpler for customers to configure."
"It can be difficult if you need to use the Command Line Interface (CLI). It's much easier if you only have to deal with the GUI."
"If we can have more dashboards, it would be good."
"For the MSSPs, it would be great if the product could display all the threat chains on a dashboard since it is an area where the tool is currently lacking."
 

Pricing and Cost Advice

"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"It has a subscription model. There is yearly support, and there is also three-year support. It depends on what the customers want."
"The pricing for this solution is good."
"We pay for support costs on a yearly basis."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"​Licensing is done by flows per second, not including outside (in traffic)."
"Fortinet is more reasonable than Palo Alto."
"The solution is unavailable at a lower cost and can be difficult to deploy."
"Fortinet FortiSandbox is a nominally priced product, so I would not say that it is a very cheap tool."
"The price of Fortinet FortiSandbox is not expensive."
"The price of Fortinet FortiSandbox is expensive."
"We are on an annual license to use the solution. We have an additional feature that is integrated with S5, which is working well."
"I rate the product's pricing a five or six on a scale of one to ten, where one is low, and ten is high."
"There are no costs in addition to the standard licensing fees."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
30%
Financial Services Firm
11%
Government
8%
Manufacturing Company
6%
Computer Software Company
13%
Government
12%
Financial Services Firm
11%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The tool is not cheaply priced. In cybersecurity, you want an extra layer of security in your organization. Some sectors want NDR solutions, so you cannot deploy such tools everywhere, as they are ...
What needs improvement with Cisco Stealthwatch?
The expensive nature of the tool is an area of concern where improvements are required.
What do you like most about Fortinet FortiSandbox?
The real-time analysis capability of FortiSandbox is beneficial for email analysis.
What is your experience regarding pricing and costs for Fortinet FortiSandbox?
I think it's affordable. For the six to seven months of usage, the cost has been reasonable.
What needs improvement with Fortinet FortiSandbox?
We sometimes face a delay in email scanning due to not having multiple virtual machines. Improvements could be made in dynamic scanning, scanning all email components such as URLs and attachments, ...
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
FortiSandbox
 

Learn More

Video not available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Lush, Barnabas Health, Options, Riverside Healthcare, Hillsbourough County Schools, Columbia Public Schools, Schiller AG
Find out what your peers are saying about Zabbix, Auvik, Datadog and others in Network Monitoring Software. Updated: December 2024.
824,067 professionals have used our research since 2012.