Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Lumu comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Detection and Response (NDR)
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Traffic Analysis (NTA) (3rd), Cisco Security Portfolio (5th)
Lumu
Ranking in Network Detection and Response (NDR)
8th
Average Rating
9.4
Reviews Sentiment
7.8
Number of Reviews
7
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Extended Detection and Response (XDR) (18th)
 

Mindshare comparison

As of March 2025, in the Network Detection and Response (NDR) category, the mindshare of Cisco Secure Network Analytics is 7.6%, down from 10.8% compared to the previous year. The mindshare of Lumu is 3.5%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Juan Solano - PeerSpot reviewer
Protects against threats and handles it in time with moderate pricing
Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is integration."
"It's a dependable product that is able to pinpoint where we have vulnerabilities if they occur."
"The search options on Cisco Stealthwatch are the most valuable. You can get very granular with it, down to the kilobits or the seconds if you want. The product supports any time frame that you need, so that is nice."
"Cisco Stealthwatch has reduced the amount of time to detect an immediate threat."
"The most valuable features provided by this solution are visibility and information."
"The most valuable feature is having visibility into the data segments throughout our network."
"The solution reduces the amount of time it takes to detect and remediate threats."
"The most valuable feature is its alerts and dashboard."
"Most of it is automated, so I do not have to watch it to get alerts."
"It's been helpful for overall extended network visibility."
"You can access external links, playbooks, MITRE Matrix, and a lot of information."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"Lumu protects against threats immediately and handles them in time."
"The tool's support team helps partners resolve any problems with the product."
 

Cons

"One area that could be improved in SNA is the integration with Cisco ISE for user and session details, which currently requires additional setup."
"I would like to see a hybrid solution that can work without being connected directly to the internet for those destinations."
"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"If they can make this product more web-based, that would be amazing."
"Complexity on integration is not so straightforward and you really need an expert to help build it out."
"At my company, we might not be using it enough with other applications that we have that can integrate with it."
"We've run into some issues with the configuration."
"The initial setup was straightforward but required a lot of data entry, to begin with building out the server types and network types."
"The integration with different vendors and endpoints could be improved."
"It would be good if we could access the physical logs."
"The free version is minimal compared to the full version."
"I am happy with the current features. However, one important one is to improve the reports."
"The reports need improvement."
"Nothing so far needs to be improved."
"Lumu's ability to discover threats is an area of concern where improvements are needed."
 

Pricing and Cost Advice

"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"The yearly licensing cost is about $50,000."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"​Licensing is done by flows per second, not including outside (in traffic)."
"Licensing is on a yearly basis."
"NetFlow is very expensive."
"We pay for support costs on a yearly basis."
"It is the cheapest solution we found."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
842,651 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
29%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
Educational Organization
13%
Computer Software Company
10%
Comms Service Provider
8%
Insurance Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
Lumu's ability to discover threats is an area of concern where improvements are needed.
What is your primary use case for Lumu?
My company is currently dealing with Lumu's onboarding process. Lumu is used to monitor the environment permanently and validate if there is ransomware that can exploit our infrastructure.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Information Not Available
Find out what your peers are saying about Cisco Secure Network Analytics vs. Lumu and other solutions. Updated: March 2025.
842,651 professionals have used our research since 2012.