Andrisoft Wansight
andrisoft.com
What it is
Andrisoft Wansight monitors, analyzes, and accounts for network traffic for NOC and IT operations teams. It does not provide DDoS detection or mitigation. Flow Sensors process flow data such as NetFlow, sFlow, jFlow, NetStream, and IPFIX, while Packet Sensors inspect traffic from mirror ports, TAPs, and in-line links. Analytics include graphs by IP, subnet, and IP group, decoder reports, top lists, and 95th-percentile accounting.
The Flow Collector can search, filter, and export flows, and Packet Tracer displays packet captures in a Wireshark-like view. Reports can cover periods from five seconds to ten years and be emailed on a schedule as PDF or Excel. Linux packages run on customer servers, with a web Console for centralized management, scoped customer and department views, role-based profiles, and white-label branding. The Console also supports SAML 2.0, LDAP, Active Directory, RADIUS, REST API, CLI, and scripts. The one-year Sensor license costs $345 a year for one Packet Sensor or one Flow Sensor, monitoring only. A reviewed request can qualify for a free 30-day evaluation license.
Spec sheet
- Purpose
- Wansight provides network traffic monitoring, analysis, and accounting without DDoS detection or mitigation.Read 4 Oct 2026 · andrisoft.com
- Audience
- Andrisoft describes Wansight as a traffic monitoring platform for NOC and IT operations teams.Read 4 Oct 2026 · andrisoft.com
- Deployment
- Wansight components are Linux packages installed on the customer's own servers, and the Console centralizes management through a web interface.Read 4 Oct 2026 · andrisoft.com
- Trial
- A free evaluation license enables all features on any number of servers for 30 days after the request is reviewed.Read 4 Oct 2026 · andrisoft.com
- Integrations
- The Console supports SAML 2.0, LDAP, Active Directory, and RADIUS authentication, plus a REST API, CLI, and scripts.Read 4 Oct 2026 · andrisoft.com
- Support
- Standard support is included with every license and is available by email and web portal Monday to Friday.Read 4 Oct 2026 · andrisoft.com
- Headquarters
- Timisoara, RomaniaRead 28 Sep 2026 · andrisoft.com
- Founded
- 2006Read 28 Sep 2026 · andrisoft.com
- Analytics
- It provides per-IP, subnet, and IP-group graphs, traffic decoder reports, top lists, and 95th-percentile accounting.Read 4 Oct 2026 · andrisoft.com
- Forensics
- The Flow Collector supports searching, filtering, and exporting flows, and the Packet Tracer displays packet captures in a Wireshark-like view.Read 4 Oct 2026 · andrisoft.com
- Multi-tenant access
- The web Console provides scoped views for customers and departments, role-based profiles, and white-label branding.Read 4 Oct 2026 · andrisoft.com
- Notable limitation
- Wansight does not include the anomaly detection, mitigation responses, or Filter that are available in Wanguard.Read 4 Oct 2026 · andrisoft.com
- Reporting
- Reports can cover periods from five seconds to ten years and be scheduled by email as PDF or Excel.Read 4 Oct 2026 · andrisoft.com
- Supported distributions
- The trial page lists Debian 11–13, Ubuntu 20–26, RHEL 9–10, Rocky Linux, and AlmaLinux for installation.Read 4 Oct 2026 · andrisoft.com
- Traffic sources
- Its Flow Sensors process NetFlow, sFlow, jFlow, NetStream, and IPFIX, while Packet Sensors inspect traffic from mirror ports, TAPs, and in-line links.Read 4 Oct 2026 · andrisoft.com
Plans and prices
Strong points and limits
Strong points
- Processes multiple flow protocols and packet sources
- Searches, filters, and exports flows
- Schedules PDF or Excel reports
- Offers scoped customer and department views
- 30-day evaluation enables all features
Limits
- Does not include DDoS detection or mitigation
- No free plan
- Sensor license costs $345 a year
- License covers one sensor and monitoring only
Who it suits
Wansight suits NOC and IT operations teams that need network traffic monitoring, analysis, and accounting on their own Linux servers. It does not suit teams seeking DDoS detection or mitigation in this product.
Verdict
Wansight provides detailed traffic monitoring and reporting, with a web Console for centralized operations. Its key boundary is explicit: DDoS detection and mitigation are not included.
Where Specifiction places it
- Network Traffic Analysis Software#3 of 268.6