Corelight Sensor Reviews

The interface and ease of accessibility and customer support for technical troubleshooting is Awesome

nothing to dislike as of now since i am still using and getting used to to the new feature

We are getting the evidence for the networdk related threat

Corelight is a Centralized Administration tool. its interface is user friendly.

Nothing found so far that i dislike Corelight

Provide Network visibility and play significant role

Very easy to deploy. The hardware sensors and pre-made VM images make deployment as an MSSP very easy as we can just hand this stuff to the customer and give them the key to our Fleet Manager and manage the rest on our side.

Fleet Manager in particular is really good for managing disparate configurations and one-offs across multiple customers.

I'd say Fleet Manager not having the ability to facilitate the particular MSSP scenario where the MSSP owns Fleet Manager and has a variety of customers in one instance, but the customer wants access to Fleet Manager for reporting or perhaps editing configurations. Because we can't silo customers in like a "site" fashion to prevent them from seeing other customer's data, it's a scenario we can't do right now.

I'd say most customers have an idea of how much traffic they've got, but not the composition of it. That rich NTA data central to Corelight is the main value I've seen for the customer's side.

Their TAM team is very helpful when setting up the sensors. So far, the sensors are very easy to use. I like the fleet manager to manage all the sensors from one location.

So far have hot found anything that I dislike

It is giving our SOC visibility into the third leg of the SOC visibility triad - network monitoring.

The support from the Corelight guys is amazing. They provide one-on-one support. They put out updates and features as necessary. Great product integration

Increasing throughput or full packet capture would be significant investments.

Corelight is our source of network visibility. It plays a significant role in our compliance posture.

The support and periodic review with the team assigned to you are excellent. The product (sensor AP along with add-ons such as Suricata and machine-based learning that provide insights within the Crowdstrike (Humio) platform are excellent. The base platform is like Zeek on steriods. If needed,pro-active support even lets you know the hardware may be failing and an RMAs you an identical substitute. The device logs to Humio, syslog, etc. simultaneously

The command line control of the device is excellent, and so is fleet management for a series of APs. There is also an annual Zeek conference in which new insights and roadmaps are presented by Corelight

Nothing - the sensors work perfectly and dashboard summaries are very good. If one wants, one can always simply query the data manually. There is constant improvement with the release of updates and integrations with other vendor products. Corelight support is always helpful no matter what I throw at them - ranging from technical questions down to annual quotes to renew licenses. I simply cannot find anything to dislike

Pro-active security monitoring and if there is penetration, one can look back to trace the origins. I am far more productive than I was without using Corelight.

Simple deployment and great partnership with the account team. Very much appreciate the simplicity of managing a single device or multipule through fleet management tools.

Only enable what you need... the volume of events can be substantial.

Providing a top-notch NDR solution that can handle up to 10gbps of data.

It gives many advances to the soc like , visibility of devices, check each packet of network with every detail. Works as an open source with SIEM. Has a great features as an IDS. Friendly UI.

Many features could be added other than that nothing else .

Helping organisation with lot of security features to protect devices and monitoring threats.

Corelight helps you to find any bad things happening like sneaky viruses or hackers trying to get in and having a detective tool for our Network. So, that we can process Everything safe and run smoothly

The potential downsides of Corelight is that it can be complex to setup and manage and it might require specialized knowledge to use effectively and it needs to be improved for better usages.

Corelight helps find bad things happening on computer networks.It watches the network traffic and tells us if there are any suspicious activities. With this we can secure the systems safe and secure.

It has helped me to have a broader visibility of the devices that connect to the network and process the traffic of our network with the sensors that also help to detect possible vulnerabilities

Based on my experience, I can confirm that the help service is quite useful and efficient in solving everything correctly and quickly.

So far I haven't found anything I don't like about Corelight

improved network visibility with extreme coverage reporting dangerous threats that would cause serious incidents