ExtraHop Reveal(x) Reviews

We have implemented the ExtraHop Reveal(x) solution at multiple clients. They range from government, retail to financial. We collect north-south and east-west traffic via a visibility layer (packet brokers, taps, spans) and then feed that traffic to the ExtraHop Reveal (x) solution. The volume ranges from 1 GB solutions up to 40 GB solutions with 100 GB in the pipeline. Initially, we approached them for application performance analysis, but we now use it to assist the security teams as well. The behavioral analytics and ability to go back in history is proving extremely valuable.

The analytic views (L2 to L7), with a vast amount of enterprise protocols, standard dashboards, as well as various applications or security dashboards that can be added, gave a very quick ROI. The technical teams are able to gain views of their networks, servers, applications, etc. and the management level is able to gain overview dashboards to assist them as well. Security teams are able to gain insight into the behavior of security elements, which enables them to track the event back in time to see exactly what happened and what elements were involved with the incident. It is also very useful to have the AI/ML element with Reveal (x). The ability to decrypt at the line rate proved invaluable. Various triggers and integration options are available to continually add value to the clients' specific environment.

We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well. The ability to integrate with various other solutions enables improvement in existing processes.

Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data.

Triggers - While the triggers are great for specific use cases, it can add load to the hardware and requires some development skill, which can be costly.

VoIP - While we can view SIP and RTP (quality, MOS, etc.) it is not the best solution for VoIP itself. There are better solutions for more detailed VoIP monitoring. It can solve some problems, but not all problems.

We have been using ExtraHop for quite a few years and we have been using their Reveal (x) platform since it went to market.

It is very stable. Have not had any issues.

The solution can scale up to 100GB and it works.

99% of the time it was great. Only had one incident that took some time, but it was resolved eventually with a positive outcome.

We have used other solutions from other vendors like NetScout, Sinefa, etc. where the client budget, requirement and focus changed. Some clients prefer certain vendors since they might have a standing relationship with them.

Design can take some time, the visibility layer can be quite intricate, but the actual ExtraHop Reveal (x) solution is extremely easy to deploy.

Initially, we depended on the vendor team, but later we deployed mostly ourselves with some input from the vendor team. They were always very helpful and professional.

The ROI is fairly immediate, if you attach a service or dedicated resource. That determines how much you win.

It is important to understand the data you feed any of these solutions. We always recommend a visibility layer (packet brokers, taps, etc.), but that incurs a new cost that can delay the project. So work on a strategy that delivers visibility and a solution that enables your teams. All of this will add to the project and cost. What you put in is what you will get out.

NetScout - TruView, nGeniusOne, Sinefa, nTopNG, Sintrex Flow.

Generally, I enjoy working with this solution and the teams from ExtraHop. Just be sure that you always attache a service or a dedicated resource to any such solution to get the most value out of it.

We primarily use the solution for three main aspects: security, visibility, and application performance.

The most valuable aspect of the solution is the depth of information that's available. With all the documentation and details, it's a very good solution to work with.

Setting up the solution is relatively easy.

At this point, there aren't any features that are lacking, from our perspective. The solution is pretty complete.

The solution is expensive and gets more expensive if a company needs to scale it.

I've been using the solution for about a year now.

The stability of the solution is excellent. We don't have any issues with bugs or glitches. It doesn't crash or freeze. I would say it's quite reliable from a performance standpoint.

We have about a dozen or so people who regularly interact with the solution. They are predominantly project and operational network engineers. We're using the product on a daily basis.

Scalability is probably limited, mainly due to the expenses involved in expanding the solution. Due to costs, companies may be turned off by scaling in any meaningful way.

We've never had to contact technical support. We haven't had any major issues. Therefore, I wouldn't be able to rate the level of their service. From a product perspective, it's been very good so far.

We didn't previously use a different product. This is the first solution that we've used for security and application performance purposes.

The initial setup was not complex. We found the implementation process to be quite simple and straightforward.

It took approximately three weeks to deploy the solution and to have everything up and running.

The great part about the solution is that maintenance is minimal. It's mainly just software upgrades when they're released. When upgrades are needed, our network team is able to handle everything in house.

Our company with our own in-house team plus the vendor handled the setup together.

I don't have any insights into the pricing of the solution. I'm not sure what they are, exactly, however, it is my understanding that the solution itself is costly. There are also additional charges for additional devices to collect the traffic from the network. If you need to scale, the pricing grows too. Everything can add up.

We have a relationship with the vendor, and we're also a customer.

For those considering implementing the solution, I would advise organizations to engage early with their sales managers and sales engineers, in order to understand these cases.

I'd rate the solution nine out of ten.

The security features of this solution are the most valuable.

I can't think of anything right now. They meet all of my customers' requirements.

Additional integration partners would be beneficial.

I would like to see more cloud capability.

I have been working with ExtraHop Reveal(x) for four years.

We are using the latest version.

ExtraHop Reveal(x) is very stable. We have not experienced any issues.

I would rate the stability a nine out of ten.

Sometimes ExtraHop Reveal(x) is easy to scale. We have had some issues with scalability.

I would rate technical support a four out of five. There's a little room for improvement.

The initial setup is simple.

Maintenance requires very little personnel. For example, one person is required for every 100 people.

I would rate the price a three out of five. It could be less expensive.

I have not compared ExtraHop Reveal (x) with other vendors.

We are partners with ExtraHop.

I would rate ExtraHop Reveal(x) a nine out of ten.

We use the solution for an advanced layer of security. It provides us with network visibility to identify types of attacks.

The solution's most valuable feature is network visibility for security purposes.

They should integrate the solution with more security vendors.

We have been using the solution for six months.

It is a stable solution.

We have three end users of the solution in our organization.

We contacted the solution's technical support team for issues related to security layers.

I have used LinkShadow before. It has good offloading features.

The solution's initial setup process is easy. We have to scan the port and tune the configuration for deployment. It takes a week to complete the process.

Our vendor helped us implement the solution.

I advise others to ensure the solution covers all the use cases. I rate it as a seven.