Cisco Secure Cloud Analytics vs. Kemp Flowmon ADS

We wanted a better way to monitor the security of our network safety. Cisco gives us the best visibility across the device and it detects threats in our public cloud.

Incentivized

Flowmon ADS is a customizable anomaly detection solution with excellent scalability capabilities and quick integration into the organization environment. Flowmon ADS provides a large set of essential detections out of the box, which allows to quickly acquire an awareness of potential problems in the monitored network. Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments. Powerful dashboards make summaries and reporting a breeze. We use the Flowmon Anomaly Detection System daily for event detection and incident handling. It provides high-quality detection methods with low false-positive rates.

• Improve security and productivity
• Detect advanced threats and indicators of compromise

Incentivized

• Kemp Flowmon ADS provides a large set of essential detections out of the box, which allows us to quickly acquire an awareness of potential problems in the monitored network.
• Custom configuration, filters, and false-positive flagging make the system highly customizable for diverse environments.
• Powerful dashboards make summaries and reporting a breeze.

• No free version [and] cost is bit high.

Incentivized

• Multi-license policy
• Outdated GUI
• Limited use of AI methods

If anything Cisco Secure Cloud Analytics only compliments other Cisco tools. We run a Cisco security stack and each one of those products only enhance and better the other product. Ultimately enhancing and protecting your network at its fullest capabilities. Cisco Secure Cloud Analytics doesn't only stack up, but adds another layer of visibility to help your company out.

Incentivized

• Cisco Secure Cloud Analytics has helped us mitigate network security issues
• Cisco Secure Cloud Analytics has provided us with detailed reporting on what are needs are in regards to network stability
• UI is stale and could use an update

Incentivized

• Early detection of cyber security events and incidents.
• Processing a large number of network flows on input (which means more than 60K flows per second)
• Parameterization of detection methods.
• The possibility to decide on the false-positive rate within the output of each method.