Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Compare Cisco Networking

Cisco Networking vs. HPE vs. Huawei

See how Huawei and HPE networking monitoring tools compare with Cisco Digital Network Architecture (Cisco DNA). For security, segmentation, programmability, and other network management needs, Cisco DNA comes out on top. Our network architecture delivers intelligence beyond the edge to drive faster innovation, reduce cost and complexity, and help you gain a competitive advantage.

Cisco

HPE

Huawei

Expand all

Security

Group users and devices for policy complianceCisco Software-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN-based.LimitedSecurity-groups-based policies through Free Mobility capability in Agile Controller.
Cisco Software-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN-based.Security-groups-based policies through Free Mobility capability in Agile Controller.
User and application segmentationCisco Software-Defined Access uses software-based segmentation to keep different traffic types separate.Exception-based.
Cisco Software-Defined Access uses software-based segmentation to keep different traffic types separate.Exception-based.
AI-powered security insightsWith Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
With Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
Encrypted-traffic threat and malware containmentCisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--help eliminate threats across the network.LimitedHPE/Aruba requires network offload.
Cisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--help eliminate threats across the network.HPE/Aruba requires network offload.
Identify wireless interference or threatsCisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution does not provide continuous scanning on all channels.Huawei's software-based solution does not provide granularity to detect and mitigate wireless interference.
Cisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution does not provide continuous scanning on all channels.Huawei's software-based solution does not provide granularity to detect and mitigate wireless interference.
Security active learningTalos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Talos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Trustworthy solutionsThe secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. LimitedLimitedControl plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
The secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. LimitedControl plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
Streamlined security solutions and network integrations
Identification and mitigation of security vulnerabilities

Innovations

Network controllerCisco DNA Center is a powerful network controller and management dashboard that can help you take charge of your network, optimize your Cisco investment, and lower your IT spending. Cisco DNA Center delivers powerful automation, analytics, and security for the largest enterprise networks.LimitedHPE's Aruba Central is similar but its overall functionality is limitedLimitedHuawei's Campus Network Solution is similar but its overall functionality is limited.
Cisco DNA Center is a powerful network controller and management dashboard that can help you take charge of your network, optimize your Cisco investment, and lower your IT spending. Cisco DNA Center delivers powerful automation, analytics, and security for the largest enterprise networks.HPE's Aruba Central is similar but its overall functionality is limitedHuawei's Campus Network Solution is similar but its overall functionality is limited.
Artificial intelligence and machine learning (AI/ML)In Cisco DNA, AI Network Analytics drives network intelligence, empowering administrators to improve performance and issue resolution. AI Endpoint Analytics applies advanced techniques to profile and group endpoints for better scalability, security, and automation. In security applications, ML techniques detects threats and analyzes suspicious activities.LimitedHPE's Aruba Central includes some degree of AI/ML, but it is limited to network analytics.LimitedHuawei's Campus Network Solution has limited AI/ML functions.
In Cisco DNA, AI Network Analytics drives network intelligence, empowering administrators to improve performance and issue resolution. AI Endpoint Analytics applies advanced techniques to profile and group endpoints for better scalability, security, and automation. In security applications, ML techniques detects threats and analyzes suspicious activities.HPE's Aruba Central includes some degree of AI/ML, but it is limited to network analytics.Huawei's Campus Network Solution has limited AI/ML functions.
Device profiling for security and policyAI Endpoint Analytics in Cisco DNA Center uses deep packet inspection (DPI) with Cisco Network Based Application Recognition (NBAR) and Cisco Software-Defined Application Visibility and Control (SD-AVC) to fully profile IoT devices. It then assigns the devices a trust score and groups them for scalable group and policy-based automation and security.
AI Endpoint Analytics in Cisco DNA Center uses deep packet inspection (DPI) with Cisco Network Based Application Recognition (NBAR) and Cisco Software-Defined Application Visibility and Control (SD-AVC) to fully profile IoT devices. It then assigns the devices a trust score and groups them for scalable group and policy-based automation and security.
Traffic analytics for defining policyGroup-Based Policy Analytics in Cisco DNA Center collects details and provides a visual representation of traffic between groups of endpoints, to define effective network-segmentation policies.
Group-Based Policy Analytics in Cisco DNA Center collects details and provides a visual representation of traffic between groups of endpoints, to define effective network-segmentation policies.
Simple policy definition and enforcementGroup-Based Access Control in Cisco DNA Center provides a simple drag-and-drop interface for first-level segmentation and an easy-to-fill matrix for defining a second level of segmentation for granular control of traffic policies.
Group-Based Access Control in Cisco DNA Center provides a simple drag-and-drop interface for first-level segmentation and an easy-to-fill matrix for defining a second level of segmentation for granular control of traffic policies.
Operational insights Cisco DNA Assurance uses enhanced ML capabilities for monitoring network, device, and client performance for optimal user experience. It includes over 100 actionable tips to help customers remediate network issues quickly and easily, and has been adopted successfully by many of the world's largest organizations.HPE/Aruba's NetInsight does not yet offer proof of customer success. Huawei's CampusInsight doesn't have a customer implementation success story.
Cisco DNA Assurance uses enhanced ML capabilities for monitoring network, device, and client performance for optimal user experience. It includes over 100 actionable tips to help customers remediate network issues quickly and easily, and has been adopted successfully by many of the world's largest organizations.HPE/Aruba's NetInsight does not yet offer proof of customer success. Huawei's CampusInsight doesn't have a customer implementation success story.
Track user location via Bluetooth low energy (BLE) or Wi-FiCisco DNA Spaces Indoor IoT Services supports the end-to-end discovery, activation, management, and monitoring of BLE and Wi-Fi devices.LimitedHPE/Aruba has some Bluetooth support in its access points but lacks precise Wi-Fi-based location features.LimitedHuawei eSight works as a location server, but it is limited and provides RSSI-based location that's low accuracy (3-5m), according to a Huwaei WLAN location white paper.
Cisco DNA Spaces Indoor IoT Services supports the end-to-end discovery, activation, management, and monitoring of BLE and Wi-Fi devices.HPE/Aruba has some Bluetooth support in its access points but lacks precise Wi-Fi-based location features.Huawei eSight works as a location server, but it is limited and provides RSSI-based location that's low accuracy (3-5m), according to a Huwaei WLAN location white paper.
Engage with customers on locationThe Cisco DNA Spaces solution offers a clear understanding of how users interact with environments, so that businesses can make informed decisions. HPE/Aruba provides BLE location services in its access points, tags, and Meridian applications for way-finding and customer engagement.
The Cisco DNA Spaces solution offers a clear understanding of how users interact with environments, so that businesses can make informed decisions. HPE/Aruba provides BLE location services in its access points, tags, and Meridian applications for way-finding and customer engagement.
Get proximity reportsWith Cisco DNA Spaces, you can trace where individuals have been and see what users were in the same spaces at the same time. You can map the affected locations, buildings, floors, and zones and have complete control over the privacy levels you want to implement.
With Cisco DNA Spaces, you can trace where individuals have been and see what users were in the same spaces at the same time. You can map the affected locations, buildings, floors, and zones and have complete control over the privacy levels you want to implement.
Monitor by endpoint typeCisco users can deploy analytics to monitor behavior with Stealthwatch and Flexible NetFlow. Cisco can classify traffic on the edge and inside the network with TrustSec.LimitedHPE/Aruba switches support sFlow technology. While sFlow can steam telemetry from the network to external applications, HPE/Aurba's implementation tends to provide false alarms, blurred analysis, and missed packets.​LimitediPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Cisco users can deploy analytics to monitor behavior with Stealthwatch and Flexible NetFlow. Cisco can classify traffic on the edge and inside the network with TrustSec.HPE/Aruba switches support sFlow technology. While sFlow can steam telemetry from the network to external applications, HPE/Aurba's implementation tends to provide false alarms, blurred analysis, and missed packets.​iPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Support new capabilities without major upgradesWith integration of custom UADP ASICs plus access point modularity, Cisco can add new hardware-based features without new hardware.LimitedHPE/Aruba does not support modular access points. Their switching platforms use a custom ASIC with limited extensibility.Huawei does not support modular access points or switches.
With integration of custom UADP ASICs plus access point modularity, Cisco can add new hardware-based features without new hardware.HPE/Aruba does not support modular access points. Their switching platforms use a custom ASIC with limited extensibility.Huawei does not support modular access points or switches.

Network and Infrastructure Agility

Assurance and analytics Cisco DNA Assurance uses enhanced ML capabilities for monitoring network, device, and client performance for optimum user experience. It includes over 100 actionable tips to help customers remediate network issues quickly and easily.HPE/Aruba's NetInsight is relatively new and does not yet offer proof of customer success.LimitedHuawei has limited network assurance and analytics support integrated into its network management solutions. Huawei's CampusInsight 2.0 doesn't have a customer implementation success story.
Cisco DNA Assurance uses enhanced ML capabilities for monitoring network, device, and client performance for optimum user experience. It includes over 100 actionable tips to help customers remediate network issues quickly and easily.HPE/Aruba's NetInsight is relatively new and does not yet offer proof of customer success.Huawei has limited network assurance and analytics support integrated into its network management solutions. Huawei's CampusInsight 2.0 doesn't have a customer implementation success story.
Unified policy deploymentUsing Cisco SD-Access solution, customers can automatically deploy and enforce unified policies across wired, wireless, and WAN.HPE/Aruba uses separate management systems for wired and wireless networks, and lacks a coherent and uniform policy enforcement mechanism.LimitedHuawei supports a set of policies that are limited to security enforcement.
Using Cisco SD-Access solution, customers can automatically deploy and enforce unified policies across wired, wireless, and WAN.HPE/Aruba uses separate management systems for wired and wireless networks, and lacks a coherent and uniform policy enforcement mechanism.Huawei supports a set of policies that are limited to security enforcement.
Group-based policy for segmentationCisco SD-Access uses group-based policies to segment the network at multiple levels for increased automation, enhanced security, threat detection and remediation, and improved performance.Limited
Cisco SD-Access uses group-based policies to segment the network at multiple levels for increased automation, enhanced security, threat detection and remediation, and improved performance.
Multidomain network segmentationThree networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--exchange network segmentation information that separates traffic end-to-end and improves security throughout.
Three networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--exchange network segmentation information that separates traffic end-to-end and improves security throughout.
Multidomain application experienceThree networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--synchronize traffic SLAs between users and applications for superior end-to-end user experience.
Three networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--synchronize traffic SLAs between users and applications for superior end-to-end user experience.
Multidomain securityThree networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--provide a consistent set of security measures to protect users and data.
Three networking domains--SD-Access for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--provide a consistent set of security measures to protect users and data.
Actionable dataCisco DNA and SD-WAN aggregate, analyze, and present data and insights uniformly across wired, wireless, and WAN infrastructure.LimitedHPE/Aruba NetInsight provides actionable data only for wireless networks.Huawei has no actionable tips for remediating detected issues.
Cisco DNA and SD-WAN aggregate, analyze, and present data and insights uniformly across wired, wireless, and WAN infrastructure.HPE/Aruba NetInsight provides actionable data only for wireless networks.Huawei has no actionable tips for remediating detected issues.
Better experience for Apple usersApple and Cisco have joined efforts to provide a better user experience for Apple device users connected to Cisco networks.LimitedFunctionality can be supported only through manual quality-of-service (QoS) prioritization and Wi-Fi standards. LimitedFunctionality can be supported only through manual QoS prioritization.
Apple and Cisco have joined efforts to provide a better user experience for Apple device users connected to Cisco networks.Functionality can be supported only through manual quality-of-service (QoS) prioritization and Wi-Fi standards. Functionality can be supported only through manual QoS prioritization.
Optimize wireless during peak usageFlexible Radio Assignment automatically optimizes the network, improving user experience during unpredicted times of high density.LimitedHPE/Aruba AP345 supports dual 5-GHz. However, their implementation relies on locking the radios to a particular set of channels (band) in dual 5-GHz mode. LimitedHuawei supports software-based radio configuration in its AP8030 but does not support dual 5-GHz radios in its access points.
Flexible Radio Assignment automatically optimizes the network, improving user experience during unpredicted times of high density.HPE/Aruba AP345 supports dual 5-GHz. However, their implementation relies on locking the radios to a particular set of channels (band) in dual 5-GHz mode. Huawei supports software-based radio configuration in its AP8030 but does not support dual 5-GHz radios in its access points.
Consistent app performance across networkThe Easy QoS application provides a simplified way to deliver end-to-end quality of service.
The Easy QoS application provides a simplified way to deliver end-to-end quality of service.
Detect and set features to new device Auto Smartports dynamically detects devices and configures ports based on device type.LimitedHPE/Aruba can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of devices.
Auto Smartports dynamically detects devices and configures ports based on device type.HPE/Aruba can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of devices.
Power resiliency for infrastructureCisco offers Perpetual PoE and Fast PoE and 90W UPOE+, and provides multiple-level redundancy through StackWise-480 technology and StackWise Virtual technology.HPE/Aruba offers basic PoE/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Cisco offers Perpetual PoE and Fast PoE and 90W UPOE+, and provides multiple-level redundancy through StackWise-480 technology and StackWise Virtual technology.HPE/Aruba offers basic PoE/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Automation across wireless and wiredCisco DNA Center and TrustSec provide uniform wired and wireless automation, orchestration, security, encryption, app visibility, and control.LimitedHPE/Aruba's AirWave has basic automation support for its products. It uses SDN controllers and AirWave for automated deployment of switches and access points. However, the ability to manage WAN devices in AirWave is not available. Limited eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
Cisco DNA Center and TrustSec provide uniform wired and wireless automation, orchestration, security, encryption, app visibility, and control.HPE/Aruba's AirWave has basic automation support for its products. It uses SDN controllers and AirWave for automated deployment of switches and access points. However, the ability to manage WAN devices in AirWave is not available. eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
Power over EthernetCisco offers Persistent PoE, Fast PoE, and 90W UPOE+.LimitedHPE/Aruba has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. LimitedHuawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Cisco offers Persistent PoE, Fast PoE, and 90W UPOE+.HPE/Aruba has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. Huawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Software-based patching
Multigigabit across 48 ports
Audio Video Bridging

Programmability

Open to innovationCisco DNA Center provides an open platform, with APIs that can be used by external applications for further automation and reporting, integrations with IT service management (ITSM) systems, and control of other vendor equipment.
Cisco DNA Center provides an open platform, with APIs that can be used by external applications for further automation and reporting, integrations with IT service management (ITSM) systems, and control of other vendor equipment.
On-box analyticsLimitedAruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
Native Python scripting/Docker container support A separate Intel x86 CPU complex with up to 120 GB of USB 3.0 or up to 960 GB of SATA SSD storage is available for container-based application hosting.Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
A separate Intel x86 CPU complex with up to 120 GB of USB 3.0 or up to 960 GB of SATA SSD storage is available for container-based application hosting.Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
ASIC support for programmable pipelineLimitedHuawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features.
Huawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features.
Open-standard, model-based programming capabilitiesNETCONF, RESTCONF, gRPC, YANG, PnP agent, ZTP/Open PnP, GuestShell (on-box Python).HPE/Aruba has no support for open-standard programmable models.LimitedHuawei NETCONF support works only through a customized agile controller solution.
NETCONF, RESTCONF, gRPC, YANG, PnP agent, ZTP/Open PnP, GuestShell (on-box Python).HPE/Aruba has no support for open-standard programmable models.Huawei NETCONF support works only through a customized agile controller solution.

Updated on September 2020, based on public information.

Compare other network technologies