Industry Recognition

What People Are Saying about Lancope's StealthWatch

With several hundred customers worldwide, Lancope’s award-winning StealthWatch System delivers end-to-end visibility across physical and virtual networks to eliminate network blind spots and reduce total network and security management costs.

Learn what customers, partners and analysts are saying about StealthWatch — the leader in flow-based security, network and application performance monitoring.

Market Leadership

"Due to [Lancope] having a more sophisticated behavior detection engine... anomalies in the network and applications are more easily detected and surfaced."

"Lancope is a thought leader in the flow-based monitoring technologies..."
Gartner

High ROI

Forrester Consulting study, "The Total Economic Impact of Lancope StealthWatch"

* 259% return on investment
* payback period of just 10 months
* Scalablility is unlimited

Forrester Consulting

In-depth network insight

“Network and security professionals are facing major monitoring and management challenges under today’s technology landscape. Technologies such as StealthWatch provide the in-depth network insight needed to proactively address a comprehensive range of issues that can affect business operations and the bottom line. These types of solutions will be even more crucial moving forward as networks become more complex, attackers use increasingly sophisticated techniques and industry regulations become more stringent.”
Enterprise Management Associates

Streamlined troubleshooting

“Despite its wide availability for some time, organizations are just now recognizing the benefits of harnessing flow data. Network behavior analysis (NBA) systems [like StealthWatch] use flow data to provide visibility into the state of the network to identify suspicious patterns of behavior, policy violations or attacks that have not been identified by adjacent controls. Flow-based monitoring allows networking teams to not only recognize a problem, but also to identify what the problem is and how to solve it. The use of flow metrics can significantly decrease time spent troubleshooting problems.”
Gartner

Effective monitoring across physical and virtual networks

“Lancope nicely differentiates itself in the global network performance and cloud-based application monitoring market by offering unified visibility across physical and virtual networks. The flow-based monitoring ensures optimum network performance at reduced installation and operational costs, thus enhancing customer satisfaction.”
Frost & Sullivan

Unified View of Physical and Virtual Networks

“The evolution of a new generation of network IT challenges increases the difficulty of ensuring acceptable application delivery. In order to be successful in this challenging environment, IT organizations need to develop a systematic approach to application delivery by implementing robust and scalable solutions such as StealthWatch. Successful application delivery requires that IT organizations are able to identify the applications running on the network and are also able to ensure the acceptable performance of the applications relevant to the business while controlling or eliminating applications that are not relevant.”

"While virtualization has a number of key benefits, it also presents significant management challenges. End-to-end network visibility - an absolute requirement for IT organizations - is lost upon server virtualization. Lancope recognizes that virtual machines have limited compute resources and consequently has developed a lightweight solution for gaining visibility into virtual networks. Furthermore, Lancope provides a unified view of physical and virtual network visibility to minimize administrative and management burdens associated with maintaining disparate, non-integrated technologies."
Ashton, Metzler & Associates

Provides NAV Functionality

"In today's threat environment, the network perimeter has disappeared. Insiders are as insidious a threat as outsiders...most networking and information security professionals have no insight regarding the behavior of internal traffic and the potential threats incumbent with that traffic... network analysis and visibility (NAV) tools have the capacity to uplift visibility in a highly scalable manner. Vendors [including] Lancope…offer flow analysis tools that provide NAV functionality."
Forrester

Reduced Cost of Ownership

"Minimizes the need for disparate tools and personnel, allowing organizations to reduce overall application, network, and security management costs."
Webtorials

Meets the Needs of Security, Network and Application Performance Professionals

"With the most recent release of the StealthWatch System, Lancope has found a means to deliver just such a solution in a way that not only meets the current and forward-looking needs of security operations professionals, but also the network and applications performance teams as well. New features in the StealthWatch 6.0 solution add important methods to improve collaboration and efficiency, making it easier to manage networks and manage them well, with benefits that can be readily tuned to the needs and priorities of the served organization."
Enterprise Management Associates

Leading Network Behavioral Analysis (NBA) solution

“Despite its wide availability for some time, organizations are just now recognizing the benefits of harnessing flow data. NBA systems [Lancope] use flow data to provide visibility into the state of the network to identify suspicious patterns of behavior, policy violations or attacks that have not been identified by adjacent controls. Flow-based monitoring allows networking teams to not only recognize a problem, but also to identify what the problem is and how to solve it. The use of flow metrics can significantly decrease time spent troubleshooting problems.”

"Lancope should be on every pure NBA shortlist."
Gartner

Leading Network Behavioral Analysis (NBA) solution

“StealthWatch has emerged as one of the leading NBA solutions, offering benefits for multiple groups within the IT organization. Many enterprises that adopt NBA technology for one purpose often expand the use of the technology to other areas. Organizations may start using flow analysis for performance monitoring, then later find it also works as a network security platform, augmenting IPSes or NAC. From there, organizations may push NBA use further as a regulatory compliance tool.”

“Lancope's StealthWatch combines behavior-based anomaly detection with traffic reporting and network optimization data. The resulting visibility enables network teams to efficiently manage complex networks without the need for additional hardware and software. StealthWatch can also detect zero-day, targeted, low-slow and unknown attacks which enhances network operations and security as well."

“StealthWatch is a best of breed NBA technology.”
Yankee Group

Reduces Mean Time to Resolution

“With StealthWatch in place, we’ve been able to reduce the time required for problem resolution from four or five hours down to just one hour. StealthWatch has brought us several compliance-related benefits as well. We use the advanced user identity tracking to monitor which users are dialing into particular servers and which users are making large data transfers. StealthWatch also enables us to identify, track and report on end users responsible for suspicious activity, including the files they accessed and when they gained access.”
Brocade

Minimizes Complexity Through Easy Deployment

"The StealthWatch FlowSensor VE provides enterprise visibility to help improve security and performance in the virtual environment, while preserving IT cost savings and minimizing complexity through ease of deployment as a VMware virtual appliance."
VMware

Contributes Internal Level of Intelligence

“We are focused on providing enterprises with a centralized and comprehensive solution for understanding the security posture of their organization so security groups and business managers can take coordinated, timely and effective action. Integrating Lancope’s network behavior anomaly detection adds a unique layer of intelligence to this centralized view, identifying previously unknown threats from the outside as well as on the inside of your network. Joint customers of our technologies will find significant value in this integration.”
ArcSight

Accommodates Multiple Departments Achieve Routine Tasks

“During testing, StealthWatch demonstrated the ability to detect unauthorized remote access, worm activity and root cause analysis of increases in WAN activity. All of these functions have aided our efforts to demonstrate compliance with the PCI Data Security Standard. I use StealthWatch to identify anomalous behavior and inappropriate activity; Customer Support uses it to research details in order to resolve user issues or complaints; and, the network group uses StealthWatch in conjunction with other tools to monitor WAN activity and performance.”

Seamlessly Monitors Network

“The StealthWatch Management Console is incredible. I love the way that you can just slice and dice information and right click and get different flow reports from endpoint to endpoint. The analytical capabilities are awesome. With just a few clicks, I can see exactly who is saturating an interface on the WAN, and what they are doing. I can drill down very quickly to see which systems a particular login ID is currently logged into and where it was used during a certain period of time.”


AirTran Airways

Lancope makes good on its ROI

“We purchased Lancope due to a sense of urgency brought about by the results of an external penetration test. Our organization is relatively small, and the IT focus had been on everything but security for a while. Lancope immediately made clear its ROI due to the overwhelming visibility it provided to events that would likely had never been noticed had we not integrated Stealthwatch into our environment. It is hard to pick a favorite aspect at this juncture besides the Stealthwatch solution as a whole.”

TVID: D98-CBB-A1C


Alpha Natural Resources

Reduces Mean Time to Resolution

“With StealthWatch in place, we’ve been able to reduce the time required for problem resolution from four or five hours down to just one hour. StealthWatch has brought us several compliance-related benefits as well. We use the advanced user identity tracking to monitor which users are dialing into particular servers and which users are making large data transfers. StealthWatch also enables us to identify, track and report on end users responsible for suspicious activity, including the files they accessed and when they gained access.”

Brocade Networks

Enhances Visibility of Network and Security Environments

“StealthWatch has been tremendously effective in providing unique visibility for enhanced understanding of our network and security posture. StealthWatch played a key role in the detection of several devices that were infected with the Blaster Virus. Through its powerful correlation ability, StealthWatch worked directly with our firewalls and IDS to alert our information security and networks team about these misbehaving devices."

Complements Existing Infrastructure

“We needed a next-generation solution, like StealthWatch, to complement and enhance our existing network infrastructure and ensure information security, which Chick-fil-A defines as the confidentiality, integrity and availability of information and resources.”


Chick-fil-A

Captures Full Power of NetFlow

“NetFlow is an extremely useful and underused tool for maintaining and troubleshooting enterprise networks. Lancope captures the full power of NetFlow without requiring extensive time or resources from IT teams. In-depth flow data, application analysis and an easy-to-understand, graphical user interface make StealthWatch 6.0 a versatile tool for monitoring and responding to a wide variety of incidents.”

Amazing Summarized Views

“We also like some of the cool summarized views that Lancope provides. For example, we have all of our high-risk networks showing up in a 24hr graph, no-one in one of these networks is allowed to send data directly out to the internet; Lancope gives a great visual of that.”


Cisco Systems

Continuously Updates Personnel About Network

"Upon implementation, StealthWatch immediately alerted us to port-scanning activities on our network and identified several infected machines that had entered through VPN access. StealthWatch allows us to know what is continuously happening on the network. Similar to a mechanic who needs the right tools to fix a car, we use StealthWatch to fix our network."

Provides Network Intelligence and Insight

“StealthWatch provides critical Network Intelligence to give us awareness and control of what is happening on the network. By gaining the power of knowledge through network insight, StealthWatch allows us to breathe easier about the health of our network.”


Colonial Properties

Runs Smoothly and Quickly

"We needed a robust system to monitor and protect our network investment and Lancope has come to our aid in a pinch, getting StealthWatch up and running quickly. We are able to watch more baseball than monitors because of [StealthWatch]. Having [StealthWatch] in place and having everything run smoothly, it was great for us to have time and go out and watch these playoff games."

Detroit Tigers

Remediate Problems within Seconds

"StealthWatch reduces problem-solving from days to seconds"

“With StealthWatch, we can stay ahead of potential attacks and breaches”


Edge Web Hosting

Understandable Analysis Reports

"StealthWatch performed extremely well during the evaluation. Its non-intrusive approach to monitoring does not impact network performance, and StealthWatch has excellent reporting and alerting capabilities. The depth of analysis and information available from StealthWatch is astounding. The reports it produces—either scheduled or on-demand—are excellent and easy to understand. Its ease of configuration and self-tuning reduces ongoing maintenance efforts. And its accuracy and integration within our existing environment provide ongoing security assurance for our network."

ElectraNet

StealthWatch System provides insight

“Lancope’s StealthWatch System is a product that provides so much insight into what is really happening within your network, and gives the best blend of advance notice of problems combined with historic reporting using standard flow data. Couple this with outstanding support, sales, marketing, and active collaboration with customers and it’s a winning solution.”

TVID: E99-122-5BB


Experian

Increases Team Productivity

“Unless you know what is happening on your network—the actual host conversations and the details about them—you cannot even begin to serve your users. StealthWatch not only provides basic details about the ‘who, what, when and where’ of network traffic, but it also enables us to focus on the all-important ‘why’ behind many network problems. Our team’s productivity has increased significantly because we now have time to focus on other projects instead of spending hours manually diagnosing network-related traffic problems.”

Isolates Abnormalities

“StealthWatch gives us much needed insight into the behavior of our network without the need to sift through countless logs of data. Now we can quickly determine why our network is slow. Even when the network seems to be running well, we know that StealthWatch will isolate any abnormal issues—like worms or a host infected by a bot—and notify us immediately.”


Gilbraltar Industries

Quickly Identify Threats

"StealthWatch helps bring the needle out of the haystack."

TVID: C10-49A-9C7


Global 500 Media & Entertainment Company

Helps View All Traffic Across Network and Security Devices

“The breadth of information StealthWatch affords—in conjunction with both definable and built-in heuristics—helps us view all traffic flowing across our networks and security devices. With StealthWatch, we can identify security threats, capture statistics and data streams for capacity planning, enforce usage policies, and solve performance problems much faster. It also enables our staff to respond to network threats and outages quickly and intelligently, reducing business impact.”

Determines Security and Effectiveness of SCADA Changes

“There are considerable security risks associated with even the smallest changes to the system. StealthWatch proved its value immediately by helping us determine the security and effectiveness of our SCADA changes in real time. StealthWatch provides measurable results in days.”


Henry County Water & Sewerage Authority (HCWSA)

Uses Behavior-Based Algorithms to Identify Network Threats

“StealthWatch enables our support team to make strategic decisions about network and security management based on a unified view of network, security and user information across the enterprise. Not only does it provide network performance monitoring to ensure our applications run optimally, StealthWatch also identifies internal and external threats through behavior-based algorithms.”

Oldcastle APG

Concern Index Correlates Alarms with Threat Levels

“StealthWatch offers the best capabilities for categorizing the threat level of network traffic. Its proprietary Concern Index correlates alarms with threat levels to indicate when malicious activity may be occurring. I found StealthWatch to be both intuitive and logical, as I easily navigated from a high-level view of security and traffic status indicators to the underlying insightful details. Upon installation, StealthWatch immediately identified minor system misconfigurations on the network, such as DNS and WINS settings as well as various unnecessary applications. It even highlighted some interesting traffic for further investigation. We were able to fix a number of network problems during the evaluation period.”

Rand McNally

Edge to Access Network Visibility

"[Lancope’s] anomaly-based protection has been very instrumental in identifying both internal and external security threats."
TVID: E27-DEE-231

United Auto Insurance Group

Minimizes Complexity Through Easy Deployment

"The StealthWatch FlowSensor VE provides enterprise visibility to help improve security and performance in the virtual environment, while preserving IT cost savings and minimizing complexity through ease of deployment as a VMware virtual appliance."

VMware

Complete Network Visibility for Global Enterprises

“Lancope’s solution has provided us with better visibility into network activity across our global enterprise. The near real-time data reporting and alerting capabilities enable our team to detect and respond quicker to security incidents as they occur.”

TVID: 436-FAD-940


Westinghouse Electric