What is the total cost of ownership of NDR?

The licence is only one part: add hardware, installation, the staff time to read and tune alerts, training, and what it costs to leave. Hardware means appliances or sensors per site, and their replacement cycle. Installation covers mirror ports or taps on your switches and any professional services. Staff time is often the largest cost: someone has to read alerts every day and investigate the serious ones, and a noisy tool costs more in hours than in licences. Add renewal increases, extra modules you will need later, and data storage if the product keeps traffic records. Finally, consider exit: can you export alerts and evidence when you leave? Compare products over three years, not one. NetSenX has no hardware of its own: one agent on a host connected to a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port watches a segment, prices are published, and alerts are explained in plain language to keep the time per alert down.

Read next

Terms used here

SPAN (switch port analyser)
A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
TAP (test access point)
A small device that copies the traffic on a network cable for a sensor to watch.

← All 25 questions on Budget, staff and alert noiseAll topics