Lumu vs NetWitness NDR comparison

"Most of it is automated, so I do not have to watch it to get alerts."

"It's been helpful for overall extended network visibility."

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"Lumu protects against threats immediately and handles them in time."

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."

"It helps our security team respond more accurately when there are threats, then we get less false positives or negatives."

"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."

"The interface of this solution is very flexible and easy to use."

"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."

"RSA NetWitness does market analysis in a more granular form. It gives you full visibility."

"It is stable. We have been using it for some time, without any issues."

"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."

"The free version is minimal compared to the full version."

"The integration with different vendors and endpoints could be improved."

"It would be good if we could access the physical logs."

"I am happy with the current features. However, one important one is to improve the reports."

"The reports need improvement."

"Nothing so far needs to be improved."

"The solution lacks a reporting engine."

"I would like to see Security Orchestration and Response Automation (SOAR) integration."

"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."

"The solution is modular, for example you can buy the RSA ePack, which you buy as a module is not part of the conduit solution. They could include it and have it as an all-in-one solution."

"The initial setup requires a high level of skill."

"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."

"The contamination feature could be improved."

"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."

"It is the cheapest solution we found."

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"I do not have any opinion on the pricing or licensing of the product."

"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."

"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."

"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."

"It is an expensive product."

"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."

"We are on a three-year contract to use RSA NetWitness Network."