If you haven’t seen the new RSA NetWitness Platform, you are missing out. Over the past 12 months, we have released new innovative capabilities, redesigned the user experience and invested in our core functionality to ultimately increase the speed of detection and response to threats. We believe that we not only have to enable organizations to detect incidents earlier – before there is business impact, but that we must focus on the precious time of the human analysts – no matter what their skill level is.
That is why the RSA NetWitness Platform evolved SIEM provides security monitoring, detection and investigation tools under a single unified platform – across logs, network and endpoint data, with our new orchestration and automation capabilities to aggregate, standardize and normalize alerts from your entire stack of security technologies. And, we are excited to announce we are now offering user and entity behavior analytics as part of the RSA NetWitness Platform. In addition, because we believe it is absolutely critical to have end to end visibility, we are offering free endpoint insights to RSA NetWitness Platform customers.
I’ve only shared 4 of the 11 reasons so far (UEBA, Free Endpoint Insights, Orchestration & Automation and a redesigned and intuitive UI) – but there is so much more! Read more about the significant functionality the RSA NetWitness Platform 11.x provides to enable rapid detection and response.
Amy,
I won't deny NetWitness is a very good product, but can't allow another "new features" sales pitch to misdirect existing customers. Significant functionality and funds were lost after paying professional services to help in upgrading from 10.6.5 to v11.
Between non-functional dashboards and Event view queries taking 10-20 times longer than previously, I am left with closer to 11 outstanding tickets (ASOC-60051, ASOC-60088,SACE-9612, etc.) than reasons to use v11.
11.1.0.1 is a Beta product that shouldn't have made it out of QA. I'm told that 11.2 is scheduled for Q3, leaving two or three months for the hardware to do little more than take up rack space. Please direct efforts to returning previous capabilities before pushing those that are new and untested.
-Phil