Guest

DNA Competitive Comparison

dna-comparison-icon-240x200

Can Your Network Drive Digital Transformation?

According to IDC Research, 45% of companies surveyed plan to make their networks digital ready in the next two years. See how the leading vendors compare in delivering the capabilities you need for your digital-ready network for today, and tomorrow. See the results and business benefits of a digital-ready network.

Cisco

HPE

Huawei

Arista

Expand all

Innovations

Track user location via BLE or Wi-FiCisco CMX, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.LimitedHPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi based location.
Cisco CMX, with Virtual BLE Beacon and Hyperlocation, supports tracking of BLE and Wi-Fi devices with location accuracy up to 1-2m.HPE has limited support with Bluetooth in the access points but lacks precise Wi-Fi based location.
Engage with customers on locationThe Cisco CMX solution offers a better understanding of how users interact with the environment so businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
The Cisco CMX solution offers a better understanding of how users interact with the environment so businesses can make better decisions. HPE provides BLE location in its access points, tags, and Meridian applications for way-finding and customer engagement.
Monitoring by endpoint typeCisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and classify traffic on the edge and the inside the network with TrustSec.LimitedAruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​LimitediPCA is offered as an option, but provides limited platform support and visibility.
Cisco can use analytics to monitor behavior with Stealthwatch and Flexible NetFlow, and classify traffic on the edge and the inside the network with TrustSec.Aruba switches support sFlow technology but are prone to false alarms, blurred analysis, and missed packets.​iPCA is offered as an option, but provides limited platform support and visibility.
Support new capabilities without major upgradesThrough the integration of custom ASICs, UADP, and Access Point Modularity, Cisco offers support for new innovations.LimitedNo support for modular APs. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.No wireless platforms, and switching platforms are based on off-the-shelf chip components.
Through the integration of custom ASICs, UADP, and Access Point Modularity, Cisco offers support for new innovations.No support for modular APs. Switching platforms use a custom AISC with limited extensibility.No current support for modular access points or switches.No wireless platforms, and switching platforms are based on off-the-shelf chip components.

Network and Infrastructure Agility

Unified policy deploymentAcross wired, wireless, and WAN.HPE has a different interface for management.Limited
Across wired, wireless, and WAN.HPE has a different interface for management.
Actionable dataAcross wired, wireless, and WAN.LimitedLimited
Across wired, wireless, and WAN.
Machine learning
Better experience for Apple usersCisco and Apple have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.LimitedFunctionality can only be supported through manual QoS prioritisation and Wi-Fi standards. LimitedFunctionality can only be supported through manual quality-of-service prioritisation.
Cisco and Apple have joined efforts to provide a better user experience for Apple device users connected to a Cisco network.Functionality can only be supported through manual QoS prioritisation and Wi-Fi standards. Functionality can only be supported through manual quality-of-service prioritisation.
Optimise wireless during peak usageFlexible Radio Assignment automatically optimises the network, improving user experiences during unpredicted times of high density.LimitedHuawei supports software-based radio configuration in its AP8030 but it does not support dual 5-GHz radios in its access points.
Flexible Radio Assignment automatically optimises the network, improving user experiences during unpredicted times of high density. Huawei supports software-based radio configuration in its AP8030 but it does not support dual 5-GHz radios in its access points.
Consistent app performance across networkThe Easy QoS application provides a simplified way to deliver end-to-end quality of service.
The Easy QoS application provides a simplified way to deliver end-to-end quality of service.
Detect and set features to new deviceCisco Auto Smartports dynamically detects devices and configures ports based on device type.LimitedHPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of device.
Cisco Auto Smartports dynamically detects devices and configures ports based on device type.HPE can detect and set characteristics on an access point attaching to an HPE switch, but it cannot detect other types of device.
Power resiliency for infrastructureCisco offers Persistent PoE and Fast PoE and Unviersal PoE and provides multiple-level redundancy through StackWise.HPE offers basic Poe/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE and PoE+ Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.Arista platforms offer no PoE support.
Cisco offers Persistent PoE and Fast PoE and Unviersal PoE and provides multiple-level redundancy through StackWise.HPE offers basic Poe/PoE+ (30W) support. A limited number of switches support dual power supplies for 1:1 power redundancy.Huawei supports PoE and PoE+ Power over HDMI (PoH; 95W) on a single S5700 platform. Power redundancy is 1:1 PoH (95W) on a single S5700 platform.Arista platforms offer no PoE support.
Automation across WAN, WLAN, wiredPrime Infrastructure supports wired and wireless and can centrally provision WAN path selection with IWAN. Get security, encryption, app visibility, and control with APIC-EM and TrustSec.LimitedHPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave.
Prime Infrastructure supports wired and wireless and can centrally provision WAN path selection with IWAN. Get security, encryption, app visibility, and control with APIC-EM and TrustSec.HPE uses SDN controllers and AirWave for automated deployment of switches and APs. Missing is the ability to manage WAN devices in AirWave.
Power over EthernetLimitedHPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. LimitedHuawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. LimitedArista has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
HPE has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. Huawei has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances. Arista has some UPOE-capable switches but does not support advanced PoE capabilities simultaneously. UPOE, Perpetual PoE, and Fast PoE must be managed in separate instances.
Policy-defined segmentation
Device profiling for granular policy
Software-based patching
mGig across 48 ports
Audio Video Bridging

Security

Group users and devices for policy complianceSoftware-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN based.
Software-Defined Access creates logical/virtual groups that allow security policy to move with the user.VLAN based.
User and application segmentationSoftware-Defined Access uses software-based segmentation to keep different traffic types separate.Exception based.
Software-Defined Access uses software-based segmentation to keep different traffic types separate.Exception based.
Encrypted-traffic threat detectionWith Cisco infrastructure and Stealthwatch, organisations can analyse metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
With Cisco infrastructure and Stealthwatch, organisations can analyse metadata and apply AI to provide real-time security insights for encrypted traffic with 99.993% accuracy.
Encrypted-traffic threat and malware detectionCisco security solutions—including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment—eliminate threats across the network.LimitedHPE requires network off-load.
Cisco security solutions—including Stealthwatch, TrustSec, Identity Services Engine, and Rapid Threat Containment—eliminate threats across the network.HPE requires network off-load.
Identify wireless interference or threatsCisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution lacks efficiency and does not provide continuous scanning on all channels.
Cisco Aironet access points use CleanAir, Hyperlocation Module, and Flexible Radio Assignment to locate and eliminate security threats and RF interference.HPE's software-based solution lacks efficiency and does not provide continuous scanning on all channels.
Security active learningTalos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Talos intelligence feeds strengthen defenses against known and emerging threats.Through the Niara acquisition and integration in ClearPass, HPE can provide machine learning for security concerns.
Trustworthy SystemsSecure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed. Limited
Secure development lifecycle is published and verifiable. Products have trust anchors, secure boot, and runtime prevention. Software is digitally signed.
Distributed security anomaly detection
Incident-response work flow optimization

Programmability

On-box analytics
ASICs support programmable pipelineLimitedHuawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features in the future.
Huawei's ENP2 is in limited parts of its portfolio and has not been proven to enable features in the future.
Model-based programming capabilities