Darktrace Antigena Network Reviews

We can see what is happening on the network without needing to use network tracing tools in real time and historically

The UI can be daunting (although a little flashy in places) and can confuse what is actually going on.

Being able to triage and manage network problems before users report any issues. Also being able to see any potential risk across the network is highly inciteful.

Automation. AI Engine. Real time monitoring. Dashboards - customized.

There is nothing that we dislike in this product

please use this as an intrusion software

Have used for protection

Amazing dashboards to clearly view of Network traffic in and out flow through out the devices and internet. Support most of the network source devices to bind with the darktrace engine. Real time detection and mitigation capability is quite faster. Implementation is easy.

Customer support services can improved under standard plan itself, Product is quite expensive, Integrations have sort of limitation around the supported products.

We able to prevent ransomware attacks with the help of darktrace, Its AI-driven compute engine capability is quite highly actively which helps un in protecting from ongoing internet attacks and prevent them to be spread across the network.

It tracks the network activity that is taking place and keeps a record of it. It also detects behaviour that deviates from the expected baseline activity and raises alerts for it. Getting a packet capture for the network traffic proved most helpful in debugging network problems.

When I tested it by performing a network-based enumeration of hosts using the UDP protocol, it did not detect my blatant actions. When asking Darktrace about this, they created a custom model for us so that it would look at UDP traffic.

Darktrace allows for detecting suspicious network activity and for identifying compromised hosts based on their suspicious network activity. It also made investigating alerts much easier by providing records of recent network activity.

- Modelling

- Birdeye view/ map

- Filters

- Rich dashboard & feature set

- Realtime traffic flow

- Helpful in investigations/forensics

- Antigena helps taking automated actions based on defined rule set

- It's not very user friendly

- UI can be better

- Too cluttered

- Realtime threats

- Potential breaches

- Analyzing network traffic/flow

- Bandwidth monitoring/ file transferring

Darktrace has many advanced features and reporting capabilities. It captures all packets that flow on the network, and uses that data to create a "trend" of normal and anomalous user activity over the period of 2-3 weeks. Afterwards, if it detects any anomalous activity, it generates alerts and can even block the traffic using the Antigena component. There is also a mobile app available to easily view the captured data.

Darktrace requires an IMAP server to generate email alerts and to enable the functionality of the mobile app. Also, some of the reports may be difficult to understand due to the high level of detail.

Request a trial before signing the contract.

The Antigena component is set to automatically block threats such as ransomware and other anomalous user activity.

The automatic blocking and defining of threats

It can be a little obtuse just because the tool is so robust with so many different functions and definitions

This single appliance covers our whole network and prevents would-be intruders from potentially stealing important data or information

Antigena, which allows networks to take instant action against in-progress cyber-attacks.

Cloud computing can be improved by using better alforithms

Enterprise Immune System

It's almost a set it and forget it type of product. If setup right, you wont have to touch it very often.

The interface is not very intuitive and it can be slow when it tries to load all the visual graphics in a web browser interface.

Adding an additional layer of security on the network to prevent phishing and ransomware attacks. We find that it does a lot more and keeps us updated on anything that might even be remotely suspicious.