Cisco Multicloud Defense vs. Qualys TruRisk Platform

The sell key was for my company the monitoring all outgoing data and between each cloud provider which we use from all departments which keeps their data in a cloud environment. We could apply specific rules for monitoring and DPL on all traffic, which was the key feature that we were missing in the cloud solution. Also, they provide security features like intrusion prevention, antimalware, and full-path URL filtering, which are nice to have. Applying all at the start can be really time consuming but for the time we spent and how the solution help us to prevent data leave our company it was for sure worth it.

Incentivized

It is well suited for environments that are looking for a solution that is top notch for vulnerability scanning, and is the most accurate at doing so. It would also fit environments that have a lot of endpoints to scan or like to have scanning done on an automatic basis. It is less appropriate in environments that want to use a platform right away, without getting training in how to use it, or reading documentation on the product.

Incentivized

• DLP monitoring - key item for us which helps to view if anything which should leave our environment our or even between each part of network between/inside specific clouds
• Segmentation of subnet, basic but helpful to isolate each host into their own part of single subnet and connect them, including all visibility features which are offered by Cisco defense systems
• Allow/deny rules helps us to block, monitor and logs traffic passing in each direction of our environment

Incentivized

• Attestation is so easy with Qualys. I find this one feature makes the investment worth the cost
• Ease of use. Within an hour of first installing, a person can be running compliance tests without a hitch.
• Great training materials and support. I have never had to take more than twenty minutes to solve a problem either through support or the forums.

Incentivized

• Logs can be tricky to navigate
• GUI can sometimes be confusing
• Wish there was a better sizing recommendation for gateway deployments

Incentivized

• Notices some findings which were not clear why they appear(suspected false positive).
• Working with Qualys support(for example due to the previous point) wasn't the best experience. the response was very slow.
• Qualys limit the daily API requests. In case you need more, it will cost.

Incentivized

If it maintains its current direction it will be very disruptive in the cloud security space

Incentivized

Ease of Use

Incentivized

Again, the usability of Qualys has been a pinpoint for this entire review. It was easily the worst thing about the product and because of this, I would not recommend Qualys to anybody in my field. This should be something that Qualys strives to improve if they wish to stay in business.

Incentivized

As of yet I havent logged a TAC case - It will be interesting to see how it is supported as a new product in the medium term

Incentivized

They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.

Incentivized

The ease of use, analytics, and just overall security feature set of Cisco Multicloud Defense is hard to beat. Their product is very intriguing and quite a bit similar. However, I have learned from past experiences that you get what you pay for. Cisco may be a little more pricy but it is worth it.

Incentivized

We find that Nessus is a great product, on par if not slightly better compared to Qualys in terms of their pricing model. However, Qualys Cloud Platform has better quality reporting, and offers great tips and suggestions on quickly closing a gap and eliminating the risk. In our organization, both products are great and meet our expectations, but due to pricing, we favor Nessus slightly more.

Incentivized

• Saved a lot of money on Operational Overhead. I would say we were able to save more than 10 hours every week.

Incentivized

• The most important thing that happens with this program is to automate one hundred percent the security of my system since this program is in charge of supervising each of the applications and websites in detail.
• One of the purposes for which we trust Qualys Cloud Platform is to keep our system clean and secure; the ability of this software to manage our vulnerability makes us more cautious about working with it.

Incentivized