topic Re: Cisco Stealthwatch vs Darktrace in Security Analytics

Cisco Stealthwatch vs Darktrace

nomykhan — Tue, 20 Aug 2019 19:31:54 GMT

Hello,

I am looking for a comparison between Cisco Stealthwatch vs Darktrace.

What are the major differences?

Do they complement each other in some aspect?

regards,

Re: Cisco Stealthwatch vs Darktrace

Ameer Mohammed — Fri, 14 Dec 2018 15:34:00 GMT

I have a question, similar.

I have an enterprise customer that recently took Darktrace. They are now switching out their firewalls and considering Checkpoint /Fortinet or CISCO. Can CISCO Firepower compliment Darktrace? Are they even compatible?

Re: Cisco Stealthwatch vs Darktrace

nomykhan — Sat, 15 Dec 2018 05:14:30 GMT

Dear Ameer,

Both have a different purpose.
Cisco Firepower is a firewall. Expect all the functionality that you can
expect from a traditional and NG firewall.

Darktrace work on artificial intelligence and machine learning algorithms
for identifying threats which bypass standard signatures. It taps into your
core switch(via span) and server form for behavior analysis.

Darktrace competitors are Cisco Stealthwatch and Vectra. Major difference
between Darktrace and Stealthwatch is that Darktrace works on packet
capture while stealthwatch works on "xFlows".

One thing you should consider is local support. Sometimes the product is
great but no local or regional expertise for deployment.

Re: Cisco Stealthwatch vs Darktrace

nomykhan — Sat, 15 Dec 2018 05:15:37 GMT

Dear Ameer,

Both have a different purpose.

Cisco Firepower is a firewall. Expect all the functionality that you can expect from a traditional and NG firewall.

Darktrace work on artificial intelligence and machine learning algorithms for identifying threats which bypass standard signatures. It taps into your core switch(via span) and server form for behavior analysis.

Darktrace competitors are Cisco Stealthwatch and Vectra. Major difference between Darktrace and Stealthwatch is that Darktrace works on packet capture while stealthwatch works on "xFlows".

One thing you should consider is local support. Sometimes the product is great but no local or regional expertise for deployment.