
I like the automated asset discovery feature, once we created the network tap, we could easily discover assets on the dashboard.
Another feature that I absolutely love is the integration with Alienvault OTX, having to group/categorise IP addresses and hostnames based on pulses from OTX gives you an idea of what you're about to investigate before you even get started. Review collected by and hosted on G2.com.
The least helpful thing would be the need to spend more for EPS.
If you have a large on-prem environment and you decide to use Alienvault, you could be regularly over-shooting the EPS count for your license, this increases cost.
The more your environment grows, the more you have to pay for licenses. Review collected by and hosted on G2.com.