No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Cognitive Intelligence [EOL] vs Cisco Secure Network Analytics comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Cognitive Intelligenc...
Average Rating
10.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Cisco Secure Network Analytics
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
62
Ranking in other categories
Network Monitoring Software (32nd), Network Traffic Analysis (NTA) (5th), Network Detection and Response (NDR) (7th), Cisco Security Portfolio (7th)
 

Featured Reviews

Philippe GNEZZERE - PeerSpot reviewer
Core Network Manager at DATACONNECT
Simple deployment, reliable, and helpful support
Cisco Cognitive Threat Analytics is used for cloud security.  The most valuable feature of Cisco Cognitive Threat Analytics is its reliability. Cisco Cognitive Threat Analytics could improve by having quicker detection and response and web analysis. I have been using Cisco Cognitive Threat…
Muhammad Harun-Owr-Roshid - PeerSpot reviewer
CEO at BRIGHT-i SYSTEMS LIMITED
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Cisco Cognitive Threat Analytics is its reliability."
"The search options on Cisco Stealthwatch are the most valuable. You can get very granular with it, down to the kilobits or the seconds if you want. The product supports any time frame that you need, so that is nice."
"Using the Cognitive Analytics feature, we have complete visibility that we didn’t have before."
"The most valuable feature of the solution is that it helps you gain visibility for your application."
"This product alleviates the day-to-day headaches for us, in regards to metrics."
"The best feature of Cisco Secure Network Analytics is its reliability, which I find to be the one that gets used the most."
"The most valuable feature is integration."
"Cisco Stealthwatch has improved our organization because it has brought visibility that we didn't have previously before implementing it."
"The artifacts available in the tool provide better information for analyzing network traffic. It enables a holistic view of network traffic and general packet analysis. It's easy to identify anomalies without the use of signatures. The way in which we implemented Stealthwatch Cloud has enabled my team to analyze traffic behind proxies."
 

Cons

"Cisco Cognitive Threat Analytics could improve by having quicker detection and response and web analysis."
"It would be better to let people know, up front, that is doesn't give you nice, clear information, as seen in the demos, without Cisco ISE installed."
"Complexity on integration is not so straightforward and you really need an expert to help build it out."
"One update that I would like to see is an agent-based client. Currently, Stealthwatch is network-based. A local agent could help manage endpoints."
"I would like to see better filters."
"The customizability of the UI should improve."
"At my company, we might not be using it enough with other applications that we have that can integrate with it."
"Better integration between Cisco Secure Network Analytics and Cisco Secure Workload would be beneficial."
"I think the interface is a little lacking. The interface seems like it just needs to be modernized. It's been the same interface now, ever since I've seen it probably four years ago."
 

Pricing and Cost Advice

"Cisco Cognitive Threat Analytics could reduce the price to allow all countries to afford it. The price is expensive."
"Pricing is much higher compared to other solutions."
"The yearly licensing cost is about $50,000."
"NetFlow is very expensive."
"​Licensing is done by flows per second, not including outside (in traffic)."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"The licensing costs are outrageous."
"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
11%
Financial Services Firm
10%
Construction Company
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise7
Large Enterprise52
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...
What needs improvement with Cisco Stealthwatch?
Several features often look very promising during evaluation or implementation but end up being used only lightly in day-to-day operations. Advanced reporting and scheduled compliance reports look ...
What is your primary use case for Cisco Stealthwatch?
My main use case for Cisco Secure Network Analytics has been network visibility and anomaly-based threat detection within the enterprise environment. In security operations and VAPT-related activit...
 

Also Known As

Cisco Cognitive Threat Analytics, Cognitive Threat Analytics, CTA
Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
 

Overview

 

Sample Customers

Transplace
Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Find out what your peers are saying about Darktrace, Fortinet, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: October 2026.
921,523 professionals have used our research since 2012.