Cisco Nexus Dashboard vs. Darktrace

Nexus Dashboard is a vital tool for Cisco data center Nexus deployments, in my opinion. By utilizing multiple applications in the suite, a business can utilize orchestration, monitor services and traffic, test deployment scenarios, verify upgrade processes and readiness, etc. The capabilities of the system can allow for SAN MDS controls, traditional Nexus NXOS integration, and/or essential ACI tools

Darktrace would be well suited to any environment really; the only constraint would be the budget. The cost scales on the number of devices to be monitored by the product, so it can be quite expensive in larger environments. Any company that would benefit from having 24/7 monitoring of their network would find that this product would suit that need perfectly. It can also create a number of reports, which is useful if you have any requirement to present periodic figures and statistics for your network. There are also additional features available and in development such as Antigena, which can be configured to allow potential threats to be automatically mitigated; it can block connections to a certain address, using certain ports, or it can enforce "normal behaviour" where it will only allow a machine to communicate in a way that Darktrace has observed before and considers normal. This has huge benefits particularly for 24/7 organisations where you don't have the ability to have someone monitoring the network personally at all times, as it could stop a malware outbreak in its tracks.

Incentivized

• It provides monitoring for our overall ACI Fabric which includes the Controller, Spine, and Leaf Switches.
• It gives you a single pane of visibility of all of your ACI fabric using Nexus Dashboard, no need to login to each of the multiple ACI fabric controllers.
• Provides an assurance analysis to to your ACI fabric before implementing any change in configuration, they have the Pre-change analysis prior to the firmware upgrade.
• Gives you the overall health of your Fabric and provides anomaly severity.

• Uses it Al model UEBA to detect anomalies in the behaviour of not only the users in a corporate network but also the routers, servers, and endpoints in that network.
• Provides a visualisation of both egress and outbound network traffics flowing in and out of the organisation.
• Darktrace comes with it autonomous AI model detection and responses capabilities.
• Darktrace as an AI next generation NDR solution, prevents ,contains and quarantines malicious traffics from and into the corporate network.

• Flow Telemetry - Need to overcome the restrictions of 20000 flow/sec. No DataCenter is small enough to pump only 20K flows per second. And we want to use this product for proactive monitoring so we cannot decide on a small segment to monitor flow for beforehand.
• Creating tags and label for clubbing certain entities so that we can create customized dashboards to monitor and provide access to Operations team
• Scheduled Reports and Reporting capability is lacking

Incentivized

• The system has so many features and places to tweak we found it hard to tune for our use.
• We met regularly with someone from Darktrace to assist us in processing the alerts
• The process for mail scanning requires you to reroute mail traffic

Incentivized

It's a powerfull product that help administrators to provide email security to our organization.

Good metrics about received emails that help us to determine in doubt case if the email is a false positive or it's malware.

They're improving the product releasing continuous updates and have mobile phone app to manage it.

Incentivized

For the end user, it is relatively easy to use. However, some training and practice is a must because the NSO is not as straightforward as the traditional router CLI. For the administrator, Cisco Network Service Orchestrator (NSO) is just like another program running on the Linux system--there is no big difference.

Incentivized

The Darktrace toolset is very expansive, allowing it to handle many different tasks, but this leads to a user interface that is sometimes not at all intuitive. Icons don't always make sense visually, and the associated tool tips do not always provide enough detail on what action the button performs

Incentivized

Great and effective automation functionalities and the tools on network security management are the best and easy data reports building. Cisco Nexus Dashboard Fabric Controller feature for the network monitoring and easy management of various services and even offers the best analytics and also powerful integration tools for easy data migration.

Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.

Incentivized

The Cisco Nexus Series switches perform admirably in our blended distributed system. We have been dealing with any of these sorts of switches for over 5 years and have been exceptionally happy with their functionality. Several of our other computer networks in our data rooms have proved effective with Cisco equipment. Because of the simplicity of maintenance and the high quality of technical support provided by Cisco representatives, there is a high level of trust in these switches.

Incentivized

We did NOT select Darktrace. OSSIM/AlienVault is a more mature product and it provided better intelligence and reporting. The end user interface is much easier to use - and you can tell built form engineers who have had to do the work. My suggestion for anyone considering Darktrace, is to get the price upfront; do a 30/60 onsite trail; and do the same thing, at the same time, with AlienVault. AlientVault will win every time. I say that because that's exactly what I did.

Incentivized

The platform is very well done, and to date, I have had no complaints about the implementation of the platform and no security issues or vulnerabilities. Cisco in all its product releases new versions to resolve security issues or bugs that appear on the platform, this is a big plus.

• Because it guarantees us expandable network services and without any interruption, providing a better service to each of our clients has been possible.
• It has allowed us to keep the services innovated, doing this process in a reduced time, since it does not require a long programming, so implementing new services is done at a rapid pace.
• Its automation has allowed us to reduce the burden of manual configurations, so having errors has also decreased.
• Because it is based on an automation and orchestration model, providing faster and larger-scale services is possible.

Incentivized

• One big positive is how it helps us with the security assessments that clients have done on us. They are looking to see if we know how we might have unusual/malicious traffic running on the network.
• If you have a small network and only need 1 appliance, it can be a good ROI and peace of mind.
• You could go down a hole in trying to spend time looking at all of your traffic with this software. You need to focus only on what it is showing as potential bad traffic.

Incentivized