Cisco Secure Network Analytics is a network detection and response platform that analyzes network telemetry (NetFlow/IPFIX/sFlow) and endpoint-derived flow context to detect lateral movement, exfiltration, encrypted-traffic anomalies, and policy violations across on-premises and cloud environments.
Published Oct 15, 2026
| Starting Price | Quote-based; often flow-rate/FPS oriented for on‑prem; Cisco does not publish simple list price | Quote-based; commonly device-count oriented (market perception) | Quote-based; multiple deployment options; list pricing not typically public (some reseller price lists exist) |
| Use Case Fit | Common choice for environments with broad NetFlow/IPFIX coverage and Cisco infrastructure; supports hybrid/on‑prem control and Data Store scaling | Marketed for autonomous detection narratives and rapid out-of-box detection in some environments | Focus on east-west visibility with packet/transaction-level context and workflows for SecOps/NetOps |
| Key Strength | Integration capabilities within Cisco ecosystem; flow analytics; options for on‑prem architectures and data store scaling | Autonomous detection models and response options; market visibility in NDR | Rich network visibility and investigation workflows; deep packet/transaction analysis |
| Key Weakness | Licensing complexity (FPS sizing), perceived high cost; reporting and workflow criticisms | Community criticisms about marketing claims and false positives in some contexts | Requires network traffic access and configuration; operationalization of models requires effort |
PeerSpot publishes engagement-derived metrics that indicate relative evaluation interest; these are not authoritative market share measures but can provide directional signals about evaluation activity.