Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Compare Cisco Digital Network Architecture

Cisco DNA vs. HPE vs. Huawei

Compare Huawei and HPE networking monitoring tools, and see how they stand up to Cisco Digital Network Architecture (DNA). For security, segmentation, programmability, and other network management needs, Cisco DNA comes out on top. Our network architecture delivers intelligence beyond the edge to drive faster innovation, reduce cost and complexity, and help you gain the competitive advantage.

Cisco

HPE

Huawei

Expand all

Security

Group users and devices for policy complianceSoftware-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN based.LimitedSecurity-groups-based policies via Free Mobility capability in Agile Controller.
Software-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN based.Security-groups-based policies via Free Mobility capability in Agile Controller.
User and application segmentationSoftware-Defined Access uses software-based segmentation to keep different traffic types separate.Exception based.
Software-Defined Access uses software-based segmentation to keep different traffic types separate.Exception based.
Encrypted-traffic threat detectionWith Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
With Cisco infrastructure and Stealthwatch, organizations can analyze metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
Encrypted-traffic threat and malware detectionCisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--eliminate threats across the network.LimitedHPE requires network off-load.
Cisco security solutions--including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment--eliminate threats across the network.HPE requires network off-load.
Identify wireless interference or threatsCisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution lacks efficiency and does not provide continuous scanning on all channels.Huawei's software-based solution lacks efficiency and doesn't provide granularity to detect and mitigate wireless interference.
Cisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution lacks efficiency and does not provide continuous scanning on all channels.Huawei's software-based solution lacks efficiency and doesn't provide granularity to detect and mitigate wireless interference.
Security active learningTalos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Talos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Trustworthy SystemsThe secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. LimitedControl plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
The secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. Control plane is unencrypted by default. Access points do not have unique certificates to encrypt the control plane.
Distributed security anomaly detection
Incident-response workflow optimization

Innovations

Operational insightsCisco is now shipping a second release of DNA Center that adds more network assurance, enhanced machine-learning capabilities, and over 100 actionable tips to help customers remediate network issues quickly and easily.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success. Huawei has recently launched CampusInsight 2.0 (annnounced in March 2017). However, it doesn't have a customer implementation success story.
Cisco is now shipping a second release of DNA Center that adds more network assurance, enhanced machine-learning capabilities, and over 100 actionable tips to help customers remediate network issues quickly and easily.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success. Huawei has recently launched CampusInsight 2.0 (annnounced in March 2017). However, it doesn't have a customer implementation success story.
Track user location via BLE or Wi-FiCisco CMX, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.LimitedHPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi-based location.LimitedHuawei eSight works as a location server, but it is very limited and provides RSSI-based location that's low accuracy--3-5m, according to a Huwaei WLAN location white paper.
Cisco CMX, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.HPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi-based location.Huawei eSight works as a location server, but it is very limited and provides RSSI-based location that's low accuracy--3-5m, according to a Huwaei WLAN location white paper.
Engage with customers on locationThe Cisco CMX solution offers a better understanding of how users interact with the environment so that businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
The Cisco CMX solution offers a better understanding of how users interact with the environment so that businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
Monitoring by endpoint typeCisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and can classify traffic on the edge and the inside the network with TrustSec.LimitedAruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​LimitediPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Cisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and can classify traffic on the edge and the inside the network with TrustSec.Aruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​iPCA is offered as an option but provides limited platform support and visibility. Huawei eSight NTA Monitor access-layer routers and switches support standard traffic management protocols (NetStream, NetFlow, sFlow).
Support new capabilities without major upgradesThrough the integration of custom ASICs, UADP, and access point modularity, Cisco offers support for new innovations.LimitedNo support for modular access points. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.
Through the integration of custom ASICs, UADP, and access point modularity, Cisco offers support for new innovations.No support for modular access points. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.

Network and Infrastructure Agility

Assurance and analyticsCisco is now shipping a second release of DNA Center that adds more network assurance and enhanced machine-learning capabilities to help customers quickly troubleshoot and remediate network issues.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success.LimitedHuawei has limited network assurance and analytics support integrated into its network management solutions. Huawei recently launched CampusInsight 2.0 (annnounced in March 2017). However, Huawei doesn't have a customer implementation success story.
Cisco is now shipping a second release of DNA Center that adds more network assurance and enhanced machine-learning capabilities to help customers quickly troubleshoot and remediate network issues.HPE's NetInsight is a brand-new product (announced in November 2017) that does not yet offer proof of customer success.Huawei has limited network assurance and analytics support integrated into its network management solutions. Huawei recently launched CampusInsight 2.0 (annnounced in March 2017). However, Huawei doesn't have a customer implementation success story.
Unified policy deploymentAcross wired, wireless, and WAN.HPE has a different interface for management.Limited
Across wired, wireless, and WAN.HPE has a different interface for management.
Actionable dataAcross wired, wireless, and WAN.LimitedHPE NetInsight provides actionable data only for wireless networks. Huawei has no actionable tips for remediation for any issue detected.
Across wired, wireless, and WAN.HPE NetInsight provides actionable data only for wireless networks. Huawei has no actionable tips for remediation for any issue detected.
Better experience for Apple usersApple and Cisco have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.LimitedFunctionality can only be supported through manual QoS prioritization and Wi-Fi standards. LimitedFunctionality can only be supported through manual quality-of-service prioritization.
Apple and Cisco have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.Functionality can only be supported through manual QoS prioritization and Wi-Fi standards. Functionality can only be supported through manual quality-of-service prioritization.
Optimize wireless during peak usageFlexible Radio Assignment automatically optimizes the network, improving user experiences during unpredicted times of high density.Aruba AP345 supports dual 5GHz. However, it has just started shipping in the market and does not have a customer success story. Also, Aruba's implementation relies on locking the radios to a particular set of channels (band) in dual 5 mode. LimitedHuawei supports software-based radio configuration in its AP8030 but it does not support dual 5-GHz radios in its access points.
Flexible Radio Assignment automatically optimizes the network, improving user experiences during unpredicted times of high density.Aruba AP345 supports dual 5GHz. However, it has just started shipping in the market and does not have a customer success story. Also, Aruba's implementation relies on locking the radios to a particular set of channels (band) in dual 5 mode. Huawei supports software-based radio configuration in its AP8030 but it does not support dual 5-GHz radios in its access points.
Consistent app performance across networkThe Easy QoS application provides a simplified way to deliver end-to-end quality of service.
The Easy QoS application provides a simplified way to deliver end-to-end quality of service.
Detect and set features to new deviceCisco Auto Smartports dynamically detects devices and configures ports based on device type.LimitedHPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of device.
Cisco Auto Smartports dynamically detects devices and configures ports based on device type.HPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of device.
Power resiliency for infrastructureCisco offers Persistent PoE and Fast PoE and Universal PoE, and provides multiple-level redundancy through StackWise.HPE offers basic Poe/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Cisco offers Persistent PoE and Fast PoE and Universal PoE, and provides multiple-level redundancy through StackWise.HPE offers basic Poe/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE, PoE+, PoE++, and Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.
Automation across WAN, WLAN, wiredDNA Center supports wired and wireless and can centrally provision WAN path selection with IWAN. Get automation, orchestration, security, encryption, app visibility, and control with DNA Center and TrustSec.LimitedHPE/Aruba's AirWave has basic rudimentary auomation support for their products. HPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave. Limited eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
DNA Center supports wired and wireless and can centrally provision WAN path selection with IWAN. Get automation, orchestration, security, encryption, app visibility, and control with DNA Center and TrustSec.HPE/Aruba's AirWave has basic rudimentary auomation support for their products. HPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave. eSight's automation support works through third-party entities, which are not integrated within the eSight solution itself.
Power over EthernetLimitedHPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. LimitedHuawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
HPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. Huawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Policy-defined segmentationLimited
Device profiling for granular policy
Software-based patching
Multigigabit across 48 portsYes
Audio Video Bridging

Programmability

On-box analyticsLimitedAruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
Aruba's new OS-CX has an analytics engine available, supported only on the platforms that have this OS (8400 and 8320 so far).
ASICs support programmable pipelineLimitedHuawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features in the future.
Huawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features in the future.
Open-standard, model-based programming capabilitiesHPE/Aruba has no support for open-standard programmable models.LimitedHuawei NetConf support works only via a customized agile controller solution.
HPE/Aruba has no support for open-standard programmable models.Huawei NetConf support works only via a customized agile controller solution.

Updated on May 2018, based on public information.

IDC video series: Why IT projects fail

Thomas Meyer, group vice president of IDC European Research, explores the top reasons IT projects fail. Watch the overview, then see more about security, total cost of ownership, services, and open and programmable networks.

Building animation Building animation

We love a good competition.

Admittedly, some are better than others.

Paper animation Paper animation

Cisco’s intent-based network
can keep you on target.

ZK Research lays out what it takes to build a secure,
automated network and why we are the best choice to
help you make it happen.

Compare other network technologies