11 Reasons to Love RSA NetWitness Platform v11.x

[Anonymous]

If you haven’t seen the new RSA NetWitness Platform, you are missing out. Over the past 12 months, we have released new innovative capabilities, redesigned the user experience and invested in our core functionality to ultimately increase the speed of detection and response to threats.  We believe that we not only have to enable organizations to detect incidents earlier – before there is business impact, but that we must focus on the precious time of the human analysts – no matter what their skill level is.

That is why the RSA NetWitness Platform evolved SIEM provides security monitoring, detection and investigation tools under a single unified platform – across logs, network and endpoint data, with our new orchestration and automation capabilities to aggregate, standardize and normalize alerts from your entire stack of security technologies. And, we are excited to announce we are now offering user and entity behavior analytics as part of the RSA NetWitness Platform. In addition, because we believe it is absolutely critical to have end to end visibility, we are offering free endpoint insights to RSA NetWitness Platform customers.

I’ve only shared 4 of the 11 reasons so far (UEBA, Free Endpoint Insights, Orchestration & Automation and a redesigned and intuitive UI) – but there is so much more! Read more about the significant functionality the RSA NetWitness Platform 11.x provides to enable rapid detection and response.

[PhilipMcLeod]

Amy,

I won't deny NetWitness is a very good product, but can't allow another "new features" sales pitch to misdirect existing customers. Significant functionality and funds were lost after paying professional services to help in upgrading from 10.6.5 to v11.

Between non-functional dashboards and Event view queries taking 10-20 times longer than previously, I am left with closer to 11 outstanding tickets (ASOC-60051, ASOC-60088,SACE-9612, etc.) than reasons to use v11. 

11.1.0.1 is a Beta product that shouldn't have made it out of QA. I'm told that 11.2 is scheduled for Q3, leaving two or three months for the hardware to do little more than take up rack space. Please direct efforts to returning previous capabilities before pushing those that are new and untested.

-Phil 

[MihaMesojedec]

Hi Philip,

If you are waiting for 11.2, then your pain will be over in next 2 weeks when GA is planned for 11.2.

/Miha

[PhilipMcLeod]

Miha,

Excellent news! Much appreciated!

-Phil

[Anonymous]

Hi Philip,

Thanks for sharing, and I am sorry for your frustration and the issues surrounding your upgrade. I spoke with our customer support team and they let me know they are working on an action plan for you, and should be reaching out to you shortly. 

Best,

Amy

[SomBorivong]

Hi Miha - is 11.2 available yet?

thanks

[AbdullaKazimAlA]

Hi Amy, 

I agree RSA NW 11  is good on user interface but performance wise it is very poor. And I have taken the risk to  Deployment of this new release. most of feature is not working  which are being claim here about RSA netwithness 11.1  release with lot of BUG which still not yet fix and you are preparing for launch of 11.2,  ESA engine have lot of issue RSA support team also not aware most of the issue not yet fix . Still need to do lot of work by RSA team   UBEA  also not working  there and log correlation  also not in place.  

Uma Kant 

[Anonymous]

I am sorry to hear of your issues and understand your frustration. I have been in touch with our services team, and know that they are actively looking at your open issues. Please  feel free to contact me directly at amy.blackshaw@rsa.com.

Best,

Amy