Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs IBM SevOne Network Performance Management (NPM) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 10, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Monitoring Software
22nd
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (4th)
IBM SevOne Network Performa...
Ranking in Network Monitoring Software
39th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
53
Ranking in other categories
Server Monitoring (19th), IT Infrastructure Monitoring (45th), Log Management (47th), Cloud Monitoring Software (27th)
 

Mindshare comparison

As of February 2025, in the Network Monitoring Software category, the mindshare of Cisco Secure Network Analytics is 1.3%, down from 1.7% compared to the previous year. The mindshare of IBM SevOne Network Performance Management (NPM) is 1.0%, down from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Monitoring Software
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Grzegorz Nowak - PeerSpot reviewer
Improves infrastructure planning by helping us analyze network traffic
We use SevOne to collect and report on network flows SevOne improves infrastructure planning by helping us analyze network traffic. We can look at bandwidth for specific endpoints on the customer's network and analyze traffic to identify issues. For example, maybe some connectors are unavailable.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Most of the engineers I've worked with have been really good. Very knowledgeable and easy to work with."
"The most valuable features of this solution are the logging, keeping threats under control, and keeping our data and environment secure."
"The solution has increased our threat detection rate. Cisco Stealthwatch has not reduced our incident response times. It has not reduced the amount of time it takes us to detect immediate threats. It has reduced false positives."
"Cisco products are incredibly stable, boasting a 200% stability."
"It is a good application, providing for real-time monitoring of the organization of data. It can basically identify points of peak traffic where possible issues are being caused."
"Visibility. The ability to look East and West. To see what is passing through your circuits, where it is coming from, and how big it is."
"The most valuable feature is NetFlow. The beginning of any security investigation starts with NetFlow data."
"Able to drill down into a center's utilization, then create reports based on it."
"It's given us the ability to create various real-time network performance reports and distribute them to any colleague who can access these reports immediately."
"Flexible architecture: You can extend the system and its capacity by attaching another cluster pair."
"Scalability. I have never had to worry about how to handle really big environments."
"Another useful feature is that SevOne gives you real-time insights into your network performance. It polls every five minutes. That is important for our customers because there are some network teams that are always monitoring their networks."
"We have benefited mainly from the use of the dashboard interface. It makes the network visually interesting for other people who are not in the network. A lot of people are not network techies who understand streams in the network. Based on location, we have streams coming in and out. They can see visually when there is some problem. They don't need to understand all the network technology behind it to be able to understand if everything is working well or if there is a problem."
"The most valuable feature as of late has been the API integration with ServiceNow."
"The most valuable feature is the NMS because that's the core of the system. Without the NMS, the other tools aren't that usable."
"The comprehensiveness of this solution's collection of network performance and flow data is one of the basics in the field for what it does. It meets all of our needs. So for all those areas, for the most straightforward collection capabilities, right up to NetFlow and even telemetry, it meets all those demands. Not only just basic or fundamental SNMP collection capability, but the product also supports what we need for the future with telemetry streaming. So it's very comprehensive."
 

Cons

"At my company, we might not be using it enough with other applications that we have that can integrate with it."
"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"The visualization could be improved, the GUI is not the best."
"They should include Citrix VDIs in the next release."
"Its granularity for RBAC roles-based access control needs improvement."
"Some of our customers find this solution to be a little bit tough because they don't understand how to configure and use it."
"The configuration of the solution was quite complex."
"Cisco could improve the administration for the customers."
"The one area with room for improvement is probably administration. They added data insights to make a better user experience, but I'd like to see some improvements in the way the system's administered."
"The reports are easy to configure but they are a bit outdated in terms of appearance and visualization."
"Software upgrades can be tricky is not easy."
"User-friendly, multi-tenancy."
"When I started using it, I tried adding one of the BroadWorks application servers into SevOne... it created thousands and thousands of objects from that one application server and we immediately ran out of license... It would help, when new objects are discovered, if there were a way to categorize those objects and to pick the part of the object you need..."
"The reporting of NMS is good, but it could be better."
"With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information."
"In terms of having a complete view of our network performance, I would rate it a nine out of 10. The reason for not giving it a 10 is that there is no packet capture associated with SevOne, but we do have other tools in place to do that."
 

Pricing and Cost Advice

"NetFlow is very expensive."
"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"It is worth the cost."
"​Licensing is done by flows per second, not including outside (in traffic)."
"We pay for support costs on a yearly basis."
"Our fees are approximately $3,000 USD."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"The tool is not cheaply priced."
"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."
"Many tools price things based on the number of KPIs that you're collecting around a device. In many cases, there could be hundreds of metrics that you need to collect. SevOne provides device-level pricing. That gives us the flexibility to turn on, and expand on, the metrics that we're collecting around those devices, without taking a financial hit."
"The pricing has been fair."
"There are different options available for licensing, with the per-device option being more expensive but more flexible."
"Prices per license are not huge, but they exist."
"For the value that you get from SevOne, it's worth the price. There are a lot of cheaper alternatives on the market, and even free options. But they require more staff, more resources, and engineers with more advanced knowledge of monitoring. That's what makes SevOne worth the price."
"Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."
"The pricing has not evolved with the market, which is one of the reasons we are moving to a new product."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
838,640 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
30%
Financial Services Firm
11%
Government
9%
Manufacturing Company
6%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
14%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The tool is not cheaply priced. In cybersecurity, you want an extra layer of security in your organization. Some sectors want NDR solutions, so you cannot deploy such tools everywhere, as they are ...
What needs improvement with Cisco Stealthwatch?
The expensive nature of the tool is an area of concern where improvements are required.
What do you like most about SevOne Network Data Platform?
I like the tool’s scalability and real-time reports. Earlier, we struggled to give real-time reports to clients. I also like the tool’s deployment model where we can deploy it either on-premises or...
What is your experience regarding pricing and costs for SevOne Network Data Platform?
The tool is not expensive. We were able to negotiate with SevOne on pricing.
What needs improvement with SevOne Network Data Platform?
SevOne could improve its flexibility because it isn't fully customizable and its out-of-the-box configuration doesn't cover all use cases.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
SevOne
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
ATOS, Devereux, Spark New Zealand, Access4, Rogers Communication, Lumen (formerly known as CenturyLink)
Find out what your peers are saying about Cisco Secure Network Analytics vs. IBM SevOne Network Performance Management (NPM) and other solutions. Updated: January 2025.
838,640 professionals have used our research since 2012.