Nozomi Networks Vantage OT & IoT Security Solution

We use Nozomi Networks  in our operational technology environment to manage the inventory of assets in our plants and conduct vulnerability assessments and risk quantification. It helps us identify communication that is not allowed between zones.

The most valuable features of Nozomi Networks  are the visibility of OT protocols and the versatility in finding the details of the assets feeding the tool. It is helpful because we can see all the traffic coming from the plants. We can distinguish what kind of traffic is our baseline, what is different from normal operation, and what is traversing the OT zone to the IT zone.

Nozomi Networks currently offers add-ons, such as ARP agents, that can be installed on machines to expand the information we receive from sensors. However, these are part of a licensing structure, which can be costly. It would be very helpful if these agents were available free of charge. The solution itself has no major problems, but this is a feature request I would make for improvement.

I have had experience with Nozomi Networks for three years.

I would rate the stability of Nozomi Networks as a nine out of ten. It is very good.

Scalability is straightforward and tied to the license. We have a batch of 5,000 assets, but deploying the Guardian  solution is unlimited. We can install the software image anywhere in any plant and still receive information.

I would rate their customer service at eight out of ten. While their support is good, we are looking for added value in a provider. I would like to see more proactive communication and campaigns from them to help us gain further benefits and visibility of the product features.

Positive

We previously used Tenable OT Security . We switched to Nozomi Networks due to price and architecture. Scalability is easier with Nozomi Networks, and the reporting part is integrated with the tools, unlike in Tenable, where it was separate.

The initial setup was very easy. We have a solution called Vantage  licensed by assets. We manage 5,000 assets and deploy the tool with Nozomi Networks software. We only need to connect a span port or mirror port from the network to start receiving information.

Nozomi Networks is priced moderately. Its cost is not too expensive, but it is not low either.

Nozomi Networks scores a nine out of ten overall. There is no perfect solution, but it is a solid choice for managing OT security.

Public Cloud

Other

I use this solution for vulnerability scanning in energy firms.

The time capsule feature is valuable.

I believe there is room for improvement regarding on-premises AI.

I have been using the solution for half a year.

The implementation was carried out by just two engineers.

I do not have ROI at the moment. It is too early to talk about it.

I considered alternative solutions such as Elastic and Curator.

I chose Nozomi because it is far ahead of other competitors, like Curator and Elastic. I would rate the overall solution nine out of ten.

On-premises

There are different use cases, and it depends on the product and the customer. Usually, it is used for asset management and other features. Sometimes it serves as an IDS solution instead.

It has impacted security operations in a better way.

The network visualization feature of Nozomi impacts security operations positively. It is valuable for asset management, although there are probably better solutions for that.

I would like more customizable options for configurations. Creating custom queries is time-consuming. It would be beneficial if more options were added for easier configurations.

Personally, I have been familiar with Nozomi Networks  for a couple of years.

I am not involved in daily operations. As far as I know, Nozomi Networks  is considered to be of good quality. The product is stable and doesn’t usually require frequent technical support interaction.

I don't deal with technical support on a daily basis. However, the product itself is stable, so there is usually no need to contact support.

Neutral

The initial setup is straightforward for a basic configuration. However, custom configurations can be quite complex and time-consuming.

It is probably mid-range in pricing. It's not cheap, yet it is also not super expensive either.

I'd rate the solution seven out of ten.

Nozomi Networks is an easy-to-use and powerful tool. The solution's network visualization feature helps you monitor and manage all your OT assets. It also helps review vulnerabilities and any critical issues.

I used the solution for about one year in my last job.

The solution provides good stability.

It is easy to scale the solution.

The solution's technical support is very good. We worked a lot with the local support team here in Mexico, and it was awesome. They visited us every month and were always ready to help us with everything we needed.

Positive

The solution’s initial setup is easy. Nozomi staff helped us run a couple of demos. The first time, we just observed everything. Later, we could install everything and run it, which was not very difficult.

The solution's pricing is good and cheaper than that of Claroty. Nozomi Networks is worth the money.

I would recommend the solution to other users.

Overall, I rate the solution ten out of ten.

The tool's visibility is good. We can see the traffic flow. 

Nozomi Networks should improve its pricing. 

I have been working with the product for five years. 

I think it's a stable solution and don't foresee any problems in the future. It's a leading security platform and is widely used in Italy. This gives them full visibility of all devices, which is often difficult to achieve. IT managers usually lack visibility into all products and security solutions. However, this platform lets customers gain visibility of their entire device environment. I rate its stability an eight out of ten. 

My company has three customers for the product. 

My company has enough knowledge of security and hence hasn't contacted support yet. 

Positive

The solution's deployment is easy and requires only two days. 

The platform's impact is significant because it provides a clear vision of all devices, including non-standard ones. Usually, customers have no idea about their environment, machines, or operations, making it very difficult to achieve visibility across all devices in the network. This is the main scope of the platform.

There are noticeable cost savings for a company after implementing Nozomi Networks. With this solution, fewer technical resources are needed, and the people managing the data center or environment have fewer daily activities to handle. A robust security solution means fewer tickets to manage and more precise security. This leads to less configuration needed on network devices or firewalls. These are the main benefits of implementing this solution.

The operational and technical architects, NOC, and SOC teams usually use nodes to detect and remediate firewall issues. They prefer not to analyze the environment more deeply. Instead, they rely on alerts about threats or suspicious, malicious traffic flow in their network devices.

I would recommend it because it is easy to install and develop. It provides a deep analysis of devices, which helps manage security reviews and ensure compliance. Overall, it is a good solution for these main purposes.

I rate the overall product a nine out of ten. 

On-premises