Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Lumu comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Detection and Response (NDR)
8th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
60
Ranking in other categories
Network Monitoring Software (30th), Network Traffic Analysis (NTA) (4th), Cisco Security Portfolio (7th)
Lumu
Ranking in Network Detection and Response (NDR)
7th
Average Rating
9.4
Reviews Sentiment
7.8
Number of Reviews
7
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Extended Detection and Response (XDR) (16th)
 

Mindshare comparison

As of May 2025, in the Network Detection and Response (NDR) category, the mindshare of Cisco Secure Network Analytics is 7.2%, down from 10.2% compared to the previous year. The mindshare of Lumu is 3.8%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Sudhakar T - PeerSpot reviewer
Strong network security analytics with excellent encrypted traffic analysis features
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers. There's a need for a more comprehensive licensing model where all necessary licenses are included by default.
Juan Solano - PeerSpot reviewer
Protects against threats and handles it in time with moderate pricing
Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Another notable feature of Cisco Secure Network Analytics is its Layer 7 visibility, which allows us to monitor and analyze network communications at the application layer."
"It's easy to set up. The deployment takes one or two days. You need to collect the data from a device and then direct it to the portal."
"The most valuable feature is anomaly detection, where it finds things that are not allowed internally."
"The most valuable part is that Stealthwatch is part of a portfolio of security devices from Cisco. Cisco literally can touch every single end point, every single ingress and egress point in the network. Nobody else has that."
"Cisco Secure Network Analytics has increased the visibility of what is happening in our network, and I think that's the most important reason to use it. We can see what is really happening instead of just looking at numbers from routers or switches."
"It has definitely helped us improve our mean time to resolution on network issues."
"The most valuable feature is integration."
"It has improved our internal knowledge of what's going on with the network, and that's helpful."
"The tool's support team helps partners resolve any problems with the product."
"You can access external links, playbooks, MITRE Matrix, and a lot of information."
"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"It's been helpful for overall extended network visibility."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
"Lumu protects against threats immediately and handles them in time."
"Most of it is automated, so I do not have to watch it to get alerts."
 

Cons

"The reporting of day-to-day metrics still has room for improvement."
"Complexity on integration is not so straightforward and you really need an expert to help build it out."
"Stealthwatch needs improvement when it comes to speed."
"I would like to see better filters."
"They should include Citrix VDIs in the next release."
"The customizability of the UI should improve."
"We've run into some issues with the configuration."
"It's not great as a standalone solution."
"It would be good if we could access the physical logs."
"The reports need improvement."
"Lumu's ability to discover threats is an area of concern where improvements are needed."
"I am happy with the current features. However, one important one is to improve the reports."
"Nothing so far needs to be improved."
"The integration with different vendors and endpoints could be improved."
"The free version is minimal compared to the full version."
 

Pricing and Cost Advice

"We pay for support costs on a yearly basis."
"The licensing costs are outrageous."
"The pricing for this solution is good."
"Licensing is done by flows per second, not including outside>in traffic."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"It is worth the cost."
"Pricing is much higher compared to other solutions."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
"It is the cheapest solution we found."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
28%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
Educational Organization
13%
Computer Software Company
9%
Insurance Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
The organization experienced challenges with licensing as Cisco has multiple licensing factors, and there are concerns about the price. Cisco solutions are considered to be very expensive.
What needs improvement with Cisco Stealthwatch?
Improvements are needed on the application layer for complete security analysis. The solution should have the ability to analyze security events not only at the network layer but also at the applic...
What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
Lumu's ability to discover threats is an area of concern where improvements are needed.
What is your primary use case for Lumu?
My company is currently dealing with Lumu's onboarding process. Lumu is used to monitor the environment permanently and validate if there is ransomware that can exploit our infrastructure.
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
No data available
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Information Not Available
Find out what your peers are saying about Cisco Secure Network Analytics vs. Lumu and other solutions. Updated: April 2025.
850,671 professionals have used our research since 2012.
OSZAR »