Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Iris Session Analyzer comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Traffic Analysis (NTA)
3rd
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (7th)
Iris Session Analyzer
Ranking in Network Traffic Analysis (NTA)
16th
Average Rating
8.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Network Traffic Analysis (NTA) category, the mindshare of Cisco Secure Network Analytics is 15.1%, down from 17.0% compared to the previous year. The mindshare of Iris Session Analyzer is 0.7%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Muhammad Anas - PeerSpot reviewer
Provides a memory utilization graph and shows disk space and uplink utilization but could include smart navigation in next release
The solution is deployed on-premises. There are more than 20 people who use this solution in my organization. They're infrastructure engineers, network engineers, and information security engineers A great feature is the memory utilization graph. It shows utilization, disk space utilization,…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It provides good visibility to the customers. People are still evaluating it, but it provides visibility and helps them to take action to remediate and mitigate the issues that are highlighted on the dashboard. It has good integration with the Cisco switching platform."
"The beginning of any security investigation starts with net flow data."
"I value the feature which enables me to detect devices talking to suspect IPs."
"Overall, the implementation is very good."
"I believe this solution has reduced our incident response time."
"Cisco Stealthwatch has predefined alerts for different types of security issues that might happen in the network. Whether it's PCs or servers that are used for botnets or Bitcoin mining we receive the alerts automatically. This functionality is what we receive from the solution out of the box."
"The solution allowed us to not only get gain insight but also start collaborating with other tools."
"It has been pretty stable since we deployed it, and everything seems to be working fine."
"A great feature is the memory utilization graph."
"The feature that I have found the most useful is the decode of packets. It gives us a variety of information that helps us in figuring out what to look at. The networks are getting really complex, and without the information that we get from Iris Session Analyzer, we couldn't do our job. Its graphical user interface is also very easy to use and intuitive."
 

Cons

"Cisco Stealthwatch can improve by having bundled packages for popular add-ons. It would be a lot easier for people implementing it, have let's say a better way to use the product."
"It's too complicated to install, when starting out."
"Cisco could improve the administration for the customers."
"It's not great as a standalone solution."
"There could be better integration on the programming side, which uses Python. StealthWatch could provide a template for Python to manage the switches. For example, it would be nice if StealthWatch bounced a port automatically it detected something anomalous."
"Stealthwatch is still maturing in AI. It uses artificial intelligence for predictions, but AI still needs to mature. It is in a phase where you get 95% correct detection. As its AI engine learns more, it will become more accurate. This is applicable to all the devices that are using AI because they support both supervised and unsupervised machine learning. The accuracy in the case of supervised machine learning is dependent on the data you feed into the box. The accuracy in the case of unsupervised machine learning is dependent on the algorithm. The algorithm matures depending on retrospective learning, and this is how it is able to detect zero-day attacks."
"I would like to see more expansion in artificial intelligence and machine learning features."
"They should include Citrix VDIs in the next release."
"They can increase flexibility in the search engine. Basically, I go with the information I have at the time. If I could just type in the parameter that I want to search for and its value, it might be easier than having to do the groundwork upfront before I can get my traces."
"Sometimes the network analyzer will show that a server is down when it's actually working."
 

Pricing and Cost Advice

"The licensing costs are outrageous."
"​Licensing is done by flows per second, not including outside (in traffic)."
"Pricing is much higher compared to other solutions."
"NetFlow is very expensive."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"The tool is not cheaply priced."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"The pricing for this solution is good."
"I don't know what the cost to buy the solution was, but I doubt if it's a significant part of the budget as far as the maintenance and support are concerned."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
29%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
Ask a question
Earn 20 points
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
xtel communications, banco votorantim, petronas
Find out what your peers are saying about Cisco Secure Network Analytics vs. Iris Session Analyzer and other solutions. Updated: March 2025.
846,617 professionals have used our research since 2012.