Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Compare Cisco Networking

Cisco Networking vs. HPE vs. Huawei

See how Huawei and HPE networking monitoring tools compare with Cisco Digital Network Architecture (Cisco DNA). For security, segmentation, programmability, and other network management needs, Cisco DNA comes out on top. Our network architecture delivers intelligence beyond the edge to drive faster innovation, reduce cost and complexity, and help you gain a competitive advantage.

Cisco

HPE

Huawei

Expand all

Security

Group users and devices for policy complianceSoftware-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN-based.LimitedSecurity-groups-based policies via Free Mobility capability in Agile Controller.
Software-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN-based.Security-groups-based policies via Free Mobility capability in Agile Controller.
User and application segmentationSoftware-Defined Access uses software-based segmentation to keep different traffic types separate.Exception-based.
Software-Defined Access uses software-based segmentation to keep different traffic types separate.Exception-based.
Encrypted-traffic threat detectionWith Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
With Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
Encrypted-traffic threat and malware detectionCisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--help eliminate threats across the network.LimitedHPE requires network off-load.
Cisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--help eliminate threats across the network.HPE requires network off-load.
Identify wireless interference or threatsCisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution does not provide continuous scanning on all channels.Huawei's software-based solution does not provide granularity to detect and mitigate wireless interference.
Cisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution does not provide continuous scanning on all channels.Huawei's software-based solution does not provide granularity to detect and mitigate wireless interference.
Security active learningTalos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Talos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Trustworthy solutionsThe secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. LimitedLimitedControl plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
The secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. LimitedControl plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
Distributed security anomaly detection
Incident-response workflow optimization

Innovations

Operational insightsCisco is now shipping a second release of Cisco DNA Center that adds more network assurance, enhanced machine-learning capabilities, and over 100 actionable tips to help customers remediate network issues quickly and easily.HPE's NetInsight does not yet offer proof of customer success. Huawei's CampusInsight doesn't have a customer implementation success story.
Cisco is now shipping a second release of Cisco DNA Center that adds more network assurance, enhanced machine-learning capabilities, and over 100 actionable tips to help customers remediate network issues quickly and easily.HPE's NetInsight does not yet offer proof of customer success. Huawei's CampusInsight doesn't have a customer implementation success story.
Track user location via BLE or Wi-FiCisco DNA Spaces, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.LimitedHPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi-based location.LimitedHuawei eSight works as a location server, but it is very limited and provides RSSI-based location that's low accuracy--3-5m, according to a Huwaei WLAN location white paper.
Cisco DNA Spaces, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.HPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi-based location.Huawei eSight works as a location server, but it is very limited and provides RSSI-based location that's low accuracy--3-5m, according to a Huwaei WLAN location white paper.
Engage with customers on locationThe Cisco DNA Spaces solution offers a better understanding of how users interact with the environment so that businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
The Cisco DNA Spaces solution offers a better understanding of how users interact with the environment so that businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
Monitor by endpoint typeCisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and can classify traffic on the edge and inside the network with TrustSec.LimitedAruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​LimitediPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Cisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and can classify traffic on the edge and inside the network with TrustSec.Aruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​iPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Support new capabilities without major upgradesIntegration of custom UADP ASICs, and access point modularity allows Cisco to add new hardware-based features without new hardware.LimitedNo support for modular access points. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.
Integration of custom UADP ASICs, and access point modularity allows Cisco to add new hardware-based features without new hardware.No support for modular access points. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.

Network and Infrastructure Agility

Assurance and analyticsCisco is now shipping a second release of Cisco DNA Center that adds more network assurance and enhanced machine-learning capabilities to help customers quickly troubleshoot and remediate network issues.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success.LimitedHuawei has limited network assurance and analytics support integrated into its network management solutions. Huawei's CampusInsight 2.0 doesn't have a customer implementation success story.
Cisco is now shipping a second release of Cisco DNA Center that adds more network assurance and enhanced machine-learning capabilities to help customers quickly troubleshoot and remediate network issues.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success.Huawei has limited network assurance and analytics support integrated into its network management solutions. Huawei's CampusInsight 2.0 doesn't have a customer implementation success story.
Unified policy deploymentAcross wired, wireless, and WAN.HPE has a different interface for management.LimitedLimited
Across wired, wireless, and WAN.HPE has a different interface for management.Limited
Policy-defined segmentationLimited
Multidomain network segmentationThree networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--exchange network segmentation information that separates traffic and improves security.
Three networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--exchange network segmentation information that separates traffic and improves security.
Multidomain application experienceThree networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--synchronize traffic SLAs between users and applications for superior user experience.
Three networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--synchronize traffic SLAs between users and applications for superior user experience.
Multidomain securityThree networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--provide a consistent set of security measures to protect users and data.
Three networking domains--SD-Access network for campus and branches, Cisco ACI for data center and cloud, and Cisco SD-WAN--provide a consistent set of security measures to protect users and data.
Actionable dataAcross wired, wireless, and WAN.LimitedHPE NetInsight provides actionable data only for wireless networks. Huawei has no actionable tips for remediation for any issue detected.
Across wired, wireless, and WAN.HPE NetInsight provides actionable data only for wireless networks. Huawei has no actionable tips for remediation for any issue detected.
Better experience for Apple usersApple and Cisco have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.LimitedFunctionality can only be supported through manual quality-of-service (QoS) prioritization and Wi-Fi standards. LimitedFunctionality can only be supported through manual QoS prioritization.
Apple and Cisco have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.Functionality can only be supported through manual quality-of-service (QoS) prioritization and Wi-Fi standards. Functionality can only be supported through manual QoS prioritization.
Optimize wireless during peak usageFlexible Radio Assignment automatically optimizes the network, improving user experience during unpredicted times of high density.LimitedAruba AP345 supports dual 5GHz. However, Aruba's implementation relies on locking the radios to a particular set of channels (band) in dual 5 mode. LimitedHuawei supports software-based radio configuration in its AP8030 but does not support dual 5-GHz radios in its access points.
Flexible Radio Assignment automatically optimizes the network, improving user experience during unpredicted times of high density.Aruba AP345 supports dual 5GHz. However, Aruba's implementation relies on locking the radios to a particular set of channels (band) in dual 5 mode. Huawei supports software-based radio configuration in its AP8030 but does not support dual 5-GHz radios in its access points.
Consistent app performance across networkThe Easy QoS application provides a simplified way to deliver end-to-end quality of service.
The Easy QoS application provides a simplified way to deliver end-to-end quality of service.
Detect and set features to new device Auto Smartports dynamically detects devices and configures ports based on device type.LimitedHPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of devices.
Auto Smartports dynamically detects devices and configures ports based on device type.HPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of devices.
Power resiliency for infrastructureCisco offers Perpetual PoE and Fast PoE and 90W UPOE+, and provides multiple-level redundancy through StackWise-480 technology and StackWise Virtual technology.HPE offers basic PoE/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Cisco offers Perpetual PoE and Fast PoE and 90W UPOE+, and provides multiple-level redundancy through StackWise-480 technology and StackWise Virtual technology.HPE offers basic PoE/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Automation across WAN, WLAN, wiredCisco DNA Center supports wired and wireless and can centrally provision WAN path selection with IWAN. Get automation, orchestration, security, encryption, app visibility, and control with Cisco DNA Center and TrustSec.LimitedHPE/Aruba's AirWave has basic automation support for their products. HPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave. Limited eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
Cisco DNA Center supports wired and wireless and can centrally provision WAN path selection with IWAN. Get automation, orchestration, security, encryption, app visibility, and control with Cisco DNA Center and TrustSec.HPE/Aruba's AirWave has basic automation support for their products. HPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave. eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
Power over EthernetCisco offers Persistent PoE and Fast PoEand new 90W UPOE+LimitedHPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. LimitedHuawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Cisco offers Persistent PoE and Fast PoEand new 90W UPOE+HPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. Huawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Device profiling for granular policy
Software-based patching
Multigigabit across 48 ports
Audio Video Bridging

Programmability

On-box analyticsLimitedAruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
Native Python scripting/Docker container support A separate Intel x86 CPU complex with up to 120 GB of USB 3.0 or up to 960 GB of SATA SSD storage for container-based application hosting.Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
A separate Intel x86 CPU complex with up to 120 GB of USB 3.0 or up to 960 GB of SATA SSD storage for container-based application hosting.Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
ASIC support for programmable pipelineLimitedHuawei's ENP2 is in limited parts of its portfolio and has not been proved to enable features.
Huawei's ENP2 is in limited parts of its portfolio and has not been proved to enable features.
Open-standard, model-based programming capabilitiesNETCONF, RESTCONF, gRPC, YANG, PnP Agent, ZTP/Open PnP, GuestShell (on-box Python).HPE/Aruba has no support for open-standard programmable models.LimitedHuawei NETCONF support works only via a customized agile controller solution.
NETCONF, RESTCONF, gRPC, YANG, PnP Agent, ZTP/Open PnP, GuestShell (on-box Python).HPE/Aruba has no support for open-standard programmable models.Huawei NETCONF support works only via a customized agile controller solution.

Updated on February 2020, based on public information.

Compare other network technologies