Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Trellix Intrusion Prevention System comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (22nd), Network Traffic Analysis (NTA) (3rd), Network Detection and Response (NDR) (5th), Cisco Security Portfolio (5th)
Trellix Intrusion Preventio...
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
14
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (15th)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Cisco Secure Network Analytics is designed for Network Monitoring Software and holds a mindshare of 1.2%, down 1.7% compared to last year.
Trellix Intrusion Prevention System, on the other hand, focuses on Intrusion Detection and Prevention Software (IDPS), holds 3.3% mindshare, up 3.1% since last year.
Network Monitoring Software
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Juan Muriel - PeerSpot reviewer
Protects from attacks in real-time and provides accurate threat intelligence updates
I rate the ease of setup a seven or eight out of ten. The platform functions very well. We need technical support to make improvements to the platform. The deployment takes eight months. We need two or three system engineers and one electronic engineer specialized in Trellix platforms to deploy the tool. We need only one system engineer to maintain the product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using the Cognitive Analytics feature, we have complete visibility that we didn’t have before."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
"Overall, the implementation is very good."
"Stability is the most valuable feature we have seen in this solution."
"The most valuable feature we got out of Stealthwatch is to be able to, while troubleshooting, go deep into one of our interfaces and verify what the bandwidth is and if there's any activity there that's causing problems."
"The most valuable feature is having visibility into the data segments throughout our network."
"The solution allowed us to not only get gain insight but also start collaborating with other tools."
"From a security standpoint, it is just seeing pockets as well. Visibility is very key for us."
"McAfee NSP is much more stable than Cisco."
"The ability to centrally manage all the IPS sensors, track the different security events generated by it, and customize the different policies, depending on their location."
"The product is worth the investment."
"There's a good dashboard you can drill down into. It helps you easily locate intrusions and the source of attacks."
"Great monitoring feature."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"The most valuable features in Trellix for me are the automated signature updates. It is a great and convenient feature."
"The threat intelligence updates are very accurate."
 

Cons

"I would like to see more and cleaner reporting. For example, if I pull up Steven and I want to look and maybe compare him to what you've done in the past week, and compare that to the past six months, the point would be to see what the difference in activity looks like over this time. I don't see that capability in reporting to date. You see that trend but you don't really see a straightforward comparison. That right there is key to what we want to see about the normal activity."
"It's not great as a standalone solution."
"The visualization could be improved, the GUI is not the best."
"The GUI could use some improvement. Being able to find features more easily would be a great improvement if it was simplified."
"The ability to be natively integrated into Port Aggregator would be beneficial because it would reduce just one more component that's needed in order to have that type of view."
"Improvements are needed on the application layer for complete security analysis."
"The reporting of day-to-day metrics still has room for improvement."
"The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers."
"The pricing could be improved."
"The platform’s GUI could be the latest."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"The solution needs to improve the graphical interface. And they had a limitation in some of the sensor modems as well."
"The technical support must be improved."
"The technical support has room for improvement."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"Some of the documentation is not as straightforward as it could be."
 

Pricing and Cost Advice

"The pricing for this solution is good."
"Our fees are approximately $3,000 USD."
"It has a subscription model. There is yearly support, and there is also three-year support. It depends on what the customers want."
"The yearly licensing cost is about $50,000."
"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."
"Licensing is done by flows per second, not including outside>in traffic."
"The licensing costs are outrageous."
"Pricing is much higher compared to other solutions."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
29%
Financial Services Firm
11%
Government
9%
Manufacturing Company
6%
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
What do you like most about McAfee Network Security Platform?
The threat intelligence updates are very accurate.
What is your experience regarding pricing and costs for McAfee Network Security Platform?
The tool is competitively priced. I rate the pricing a six out of ten.
What needs improvement with McAfee Network Security Platform?
Network Threat Behavior Analysis must be improved. The technical support must be improved. The support team must provide better help with configurations of devices and enabling NTBA.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Cisco Secure Network Analytics vs. Trellix Intrusion Prevention System and other solutions. Updated: January 2020.
842,296 professionals have used our research since 2012.