Try our new research platform with insights from 80,000+ expert users
NetWitness NDR Logo

NetWitness NDR pros and cons

Vendor: NetWitness
4.0 out of 5
263 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Technical support for NetWitness NDR is very good, helping resolve issues effectively.
NetWitness NDR captures traffic comprehensively, detailing every aspect of the communication.
It allows for real-time malware detection.
Recent updates include instant threat response and enhanced integration features.
NetWitness NDR offers strong log correlation and stability.

CONS

The price and training costs of NetWitness NDR are high and could be improved.
There are issues with the deployment process, causing unexpected stops and log passing challenges.
RSA NetWitness Endpoint's blocking feature does not work properly for malicious processes.
Threat detection and threat intelligence in NetWitness NDR need enhancements.
There is a need for better integration with non-native applications and improved overall integration.
 

NetWitness NDR Pros review quotes

TM
Nov 9, 2020
This solution allows us to locate the malware in real-time.
reviewer1724928 - PeerSpot reviewer
Nov 23, 2021
The log correlation is good.
TM
Sep 16, 2021
They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in.
Learn what your peers think about NetWitness NDR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,053 professionals have used our research since 2012.
reviewer1259418 - PeerSpot reviewer
Aug 11, 2022
NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console.
AA
Jul 4, 2018
It helps our security team respond more accurately when there are threats, then we get less false positives or negatives.
reviewer1799727 - PeerSpot reviewer
Sep 23, 2022
Technical support is knowledgeable.
SupravatMaji - PeerSpot reviewer
Jun 23, 2022
The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good.
reviewer1259418 - PeerSpot reviewer
Jan 16, 2020
We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues.
reviewer973458 - PeerSpot reviewer
Feb 2, 2020
The most valuable feature is the way it captures the traffic, and it contains every detail of the communication.
HananSyed - PeerSpot reviewer
Apr 25, 2022
The stability of the RSA NetWitness Endpoint is very good.
 

NetWitness NDR Cons review quotes

TM
Nov 9, 2020
I would like to see Security Orchestration and Response Automation (SOAR) integration.
reviewer1724928 - PeerSpot reviewer
Nov 23, 2021
The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge.
reviewer1259418 - PeerSpot reviewer
Aug 11, 2022
NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious.
Learn what your peers think about NetWitness NDR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,053 professionals have used our research since 2012.
AA
Jul 4, 2018
The initial setup requires a high level of skill.
reviewer1799727 - PeerSpot reviewer
Sep 23, 2022
Threat detection could be better.
SupravatMaji - PeerSpot reviewer
Jun 23, 2022
RSA NetWitness Network could improve on integration with non-native application integration.
reviewer1259418 - PeerSpot reviewer
Jan 16, 2020
The contamination feature could be improved.
reviewer973458 - PeerSpot reviewer
Feb 2, 2020
When analyzing something, you have to click several times. It requires a lot of effort to find something.
HananSyed - PeerSpot reviewer
Apr 25, 2022
The threat intelligence could improve in RSA NetWitness Endpoint.
Jakaria Udoy - PeerSpot reviewer
Aug 25, 2022
The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features.