Try our new research platform with insights from 80,000+ expert users
Cisco Sourcefire SNORT Logo

Cisco Sourcefire SNORT pros and cons

Vendor: Cisco
3.8 out of 5
1,371 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Cisco Sourcefire SNORT offers solid intrusion detection and prevention that scales easily in very large environments.
Cisco technical support is unbeatable, providing premium service every time.
The filtering feature is highly valuable, along with malware detection and URL filtering.
Threat detection in Cisco Sourcefire SNORT is highly effective, with a high rate of protection and low false positives.
Cisco Sourcefire SNORT is easy to configure and deploy, offering incredible pricing compared to similar solutions.

CONS

Integration with other components, including Cisco's own products, could be improved to enhance the administrative experience.
The pricing needs adjustment, especially for low-budget clients.
Customization of rules could be simplified.
Performance needs improvement, and alerts could be more detailed.
Initial setup might be difficult compared to other products, depending on the environment.
 

Cisco Sourcefire SNORT Pros review quotes

reviewer1420032 - PeerSpot reviewer
Mar 18, 2021
It is quite an intelligent product.
GF
Nov 26, 2019
In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well.
Jack Poon - PeerSpot reviewer
Jul 31, 2024
The tool's most valuable feature is threat detection, which is important because we have multiple layers not only in Cisco.
Learn what your peers think about Cisco Sourcefire SNORT. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,145 professionals have used our research since 2012.
Carlos Reis - PeerSpot reviewer
Feb 27, 2024
It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings.
NetworkE4b4a - PeerSpot reviewer
Jul 2, 2019
Solid intrusion detection and prevention that scales easily in very large environments.
AE
Jan 9, 2020
The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that.
Syed Shahnawaz Hussain - PeerSpot reviewer
Mar 20, 2024
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
AR
Apr 13, 2020
It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions.
reviewer1200357 - PeerSpot reviewer
Jul 22, 2020
The solution is rather easy to use.
Sherwin De Claro - PeerSpot reviewer
Dec 7, 2022
The most valuable feature is the visibility that we have across the virtual environment.
 

Cisco Sourcefire SNORT Cons review quotes

reviewer1420032 - PeerSpot reviewer
Mar 18, 2021
The implementation could be a bit easier.
GF
Nov 26, 2019
To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have.
Jack Poon - PeerSpot reviewer
Jul 31, 2024
I want to see a better dashboard for the product. The dashboard can be a bit modified or enhanced.
Learn what your peers think about Cisco Sourcefire SNORT. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,145 professionals have used our research since 2012.
Carlos Reis - PeerSpot reviewer
Feb 27, 2024
The solution's approach to managing traffic blocking is confusing and impractical.
NetworkE4b4a - PeerSpot reviewer
Jul 2, 2019
Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience.
AE
Jan 9, 2020
We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco.
Syed Shahnawaz Hussain - PeerSpot reviewer
Mar 20, 2024
The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment.
AR
Apr 13, 2020
Performance needs improvement.
reviewer1200357 - PeerSpot reviewer
Jul 22, 2020
While the alerts they offer are good, it could improve it in the sense that they should be more detailed to make the alerts more useful to us in general. Sometimes the solution will offer up false positives. Due to the fact that the alerts aren't detailed, we have to go dig around to see why is it being blocked. The solution would be infinitely better if there was just a bit more detail in the alert information and logging we receive.
Sherwin De Claro - PeerSpot reviewer
Dec 7, 2022
I would like to have analytics included in the suite.