TechValidate Research on Cisco Secure Network Analytics


Case Study: United Auto Insurance Group

Introduction

This case study of United Auto Insurance Group is based on a December 2012 survey of Cisco Stealthwatch customers by TechValidate, a 3rd-party research service.

“The anomaly based protection has been very instrumental in identifying security threats both internally and externally.”

Challenges

  • Solved the following operational challenges with Stealthwatch by Cisco:
    • Reduced mean-time-to-know (MTTK) root cause of network or security incidents
    • Improved in network performance, forensic analysis
    • Enhanced network security posture
    • Increased efficiency in the identification of security threats, correlation of user identity and activity, flow collection, monitoring and analysis
    • Enhanced compliance posture

Use Case

  • Primarily uses Stealthwatch by Cisco in the following ways:
    • Incident Response
    • Network Forensics
    • Security Forensics
    • Application performance monitoring
    • PCI compliance
    • Network performance monitoring
  • Used Stealthwatch to detect or prevent the following security threats:
    • Advanced persistent threats
    • Network malware or virus
    • Suspicious user behavior
    • External hacking attempt
    • Compromised host
    • Command and control traffic/ botnets
    • Network reconnaissance
  • Is doing the following with Stealthwatch by Cisco deployment:
    • Operating in a classified network with strictly controlled access to specific segments
    • Monitoring traffic within a data center, physical and virtual

Results

  • Chose Stealthwatch by Cisco for the following capabilities:
    • Behavior-based security monitoring
    • Real-time flow monitoring capabilities
    • Forensics
    • Advanced Persistent Threats (APTs)
    • Auditing and compliance requirements
    • Identity awareness
    • Application Aware Network Performance Monitoring
  • Selected Stealthwatch by Cisco over the following vendors:
    • Arbor Networks
    • NetQoS / CA
    • Open source solution
  • Meets enterprise requirements by utilizing the following Stealthwatch by Cisco benefits:
    • Scalability and flexibility
    • Real-time threat detection and correlation with user identity data
    • Improved incident response and threat management
    • Regulatory compliance
    • Enterprise-wide visibility into network activity
    • Deployment and support simplicity
    • Enterprise-wide user monitoring
    • Forensic analysis
  • Improved time to mitigation of a security incident by > 75% by deploying Stealthwatch by Cisco.
  • Rated the following Stealthwatch by Cisco capabilities as compared to competing vendors:
    • Network Security: Much Better
    • Performance Monitoring: Much Better
    • Network Visibility: Better
    • Innovation: Better




About This Data

This data was sourced directly from verified users of Cisco Secure Network Analytics by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on Cisco Secure Network Analytics