Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Lumu comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Detection and Response (NDR)
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Traffic Analysis (NTA) (3rd), Cisco Security Portfolio (4th)
Lumu
Ranking in Network Detection and Response (NDR)
9th
Average Rating
9.4
Reviews Sentiment
7.8
Number of Reviews
7
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Extended Detection and Response (XDR) (17th)
 

Mindshare comparison

As of February 2025, in the Network Detection and Response (NDR) category, the mindshare of Cisco Secure Network Analytics is 7.6%, down from 10.9% compared to the previous year. The mindshare of Lumu is 3.2%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Juan Solano - PeerSpot reviewer
Protects against threats and handles it in time with moderate pricing
Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."
"Visibility. The ability to look East and West. To see what is passing through your circuits, where it is coming from, and how big it is."
"It is a good application, providing for real-time monitoring of the organization of data. It can basically identify points of peak traffic where possible issues are being caused."
"I value the feature which enables me to detect devices talking to suspect IPs."
"Cisco Secure Network Analytics has increased the visibility of what is happening in our network, and I think that's the most important reason to use it. We can see what is really happening instead of just looking at numbers from routers or switches."
"It provides good visibility to the customers. People are still evaluating it, but it provides visibility and helps them to take action to remediate and mitigate the issues that are highlighted on the dashboard. It has good integration with the Cisco switching platform."
"Able to drill down into a center's utilization, then create reports based on it."
"It's a dependable product that is able to pinpoint where we have vulnerabilities if they occur."
"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"Lumu protects against threats immediately and handles them in time."
"Most of it is automated, so I do not have to watch it to get alerts."
"You can access external links, playbooks, MITRE Matrix, and a lot of information."
"The tool's support team helps partners resolve any problems with the product."
"It's been helpful for overall extended network visibility."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
 

Cons

"We've had problems with element licensing costs so scalability is a concern."
"There could be better integration on the programming side, which uses Python. StealthWatch could provide a template for Python to manage the switches. For example, it would be nice if StealthWatch bounced a port automatically it detected something anomalous."
"The ability to be natively integrated into Port Aggregator would be beneficial because it would reduce just one more component that's needed in order to have that type of view."
"I would like to see more expansion in artificial intelligence and machine learning features."
"The customizability of the UI should improve."
"The usability of this solution needs to be improved."
"At my company, we might not be using it enough with other applications that we have that can integrate with it."
"The initial setup is complex, as there is a lot to configure."
"The reports need improvement."
"Nothing so far needs to be improved."
"The free version is minimal compared to the full version."
"Lumu's ability to discover threats is an area of concern where improvements are needed."
"The integration with different vendors and endpoints could be improved."
"It would be good if we could access the physical logs."
"I am happy with the current features. However, one important one is to improve the reports."
 

Pricing and Cost Advice

"Our fees are approximately $3,000 USD."
"It is worth the cost."
"It has a subscription model. There is yearly support, and there is also three-year support. It depends on what the customers want."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"On a yearly basis, licensing is somewhere around $30,000."
"Today, we are part of the big Cisco ELA, and it is a la carte. We can get orders for whatever we want. At the end of the day, we have to pay for it in one big expense, but that is fine. We are okay with that."
"The licensing costs are outrageous."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
"It is the cheapest solution we found."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
30%
Financial Services Firm
11%
Government
9%
Manufacturing Company
6%
Educational Organization
12%
Computer Software Company
11%
Insurance Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The tool is not cheaply priced. In cybersecurity, you want an extra layer of security in your organization. Some sectors want NDR solutions, so you cannot deploy such tools everywhere, as they are ...
What needs improvement with Cisco Stealthwatch?
The expensive nature of the tool is an area of concern where improvements are required.
What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
Lumu's ability to discover threats is an area of concern where improvements are needed.
What is your primary use case for Lumu?
My company is currently dealing with Lumu's onboarding process. Lumu is used to monitor the environment permanently and validate if there is ransomware that can exploit our infrastructure.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Information Not Available
Find out what your peers are saying about Cisco Secure Network Analytics vs. Lumu and other solutions. Updated: January 2025.
838,713 professionals have used our research since 2012.