No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Sourcefire SNORT vs ExtremeCloud IQ comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
14th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
No ranking in other categories
ExtremeCloud IQ
Ranking in Intrusion Detection and Prevention Software (IDPS)
17th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
77
Ranking in other categories
Network Management Applications (12th), Network Access Control (NAC) (10th)
 

Mindshare comparison

As of May 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.1%, up from 2.5% compared to the previous year. The mindshare of ExtremeCloud IQ is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Cisco Sourcefire SNORT3.1%
ExtremeCloud IQ1.2%
Other95.7%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2772102 - PeerSpot reviewer
Cloud Architect at a consultancy with 1-10 employees
Logging and customizable rules have helped improve threat monitoring and detection
The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT. Being able to log and store it in a file allows you to push it to a centralized repository. The logging and reporting help improve incident response. You should always be logging threats, any sort of misconfiguration, and anything that could be an issue. It's important to at least log and monitor it. The basic rules provide a good baseline in assessing Cisco Sourcefire SNORT's ability in providing real-time analytics for threat detection, but as a professional, you should look to constantly modify that baseline. They provide extensive customizability so you can define your own rules. The customizability allows it to be adaptable in protecting against diverse network threats to the constant change.
José Roldan - PeerSpot reviewer
Ingeniero De Preventa at a tech services company with 51-200 employees
Has improved network monitoring with AI-driven insights and centralized device management
The best features of ExtremeCloud IQ include the integration of different vendors in one dashboard, the evolution of the manager, and any devices in networking. The impact of ExtremeCloud IQ on my organization is positive as the deployment is for a hybrid solution, using third-party vendors and cloud solutions for Extreme devices, switches, IP, and access points or SD-WAN solution devices. My IT team is occupied with other jobs, and ExtremeCloud IQ helps with monitoring networking at low costs. For networking and access points, it acts as a controller in a cloud environment, eliminating the need for an appliance controller or wireless LAN controller, thus saving on investment and reducing TCO costs.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"Users have access to intelligent security automation as one of the features, which can easily automate your event impact assessment so your IPS policy tuning can be done as well as your network behavior analysis, and you can do real-time contextual awareness with correlation of events created on your applications, user devices, operating systems, or vulnerabilities, with all of this real-time data captured including your apps and port scans."
"The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."
"The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."
"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."
"I would recommend this solution; it's reliable and scalable, with easy installation and integration."
"Solid intrusion detection and prevention that scales easily in very large environments."
"It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings."
"Since these APs are controller-less they are very dependable and easy to configure."
"One of the most fancy nice-to-have are the BR routers, allowing to work from home as if you were at the office."
"Aerohive is the best vendor yet and their support is great."
"ExtremeCloud IQ helps with monitoring networking at low costs, acting as a controller in a cloud environment, eliminating the need for an appliance controller or wireless LAN controller, thus saving on investment and reducing TCO costs."
"Overall, this product does what we've asked it to do."
"The Client 360 feature provides a comprehensive view of your clients and their activities, including the devices they use. Additionally, a feature called Network 360 offers a 360-degree view of the network, like data usage (in GB), the status of ports and AP, and other details. You can drill down on granular-level drills to gain insights into specific applications and usage patterns like application level and fee, where your data is being wasted or what your clients are doing with the Internet data, what kind of applications they are using, etc."
"HiveManager is extremely easy to use for anyone with little network experience."
"Aerohive's Hive Manager allows you to control all aspects of your WiFi network, from anywhere."
 

Cons

"This is a good solution, but some others may have some advantages."
"The price of this solution could be improved."
"Sometimes the solution will offer up false positives."
"I want to see a better dashboard for the product. The dashboard can be a bit modified or enhanced."
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."
"Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience."
"The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment."
"This solution needs to be more customizable."
"The licensing model could be improved."
"The 120 character requirement for reviews is unnecessary."
"The user interface and disparity of feature releases versus golden firmware. Certain features only exist or work in certain versions."
"It needs to have a good Layer 7 and a better user interface."
"I know a school district, a big school district of mine, ripped out Extreme due to inefficiencies."
"I have had some stability issues with the older AP110/AP120 models taking newer v6 code."
"Regional support and training was nearly non-existent and overseas support was always a hot potato with no commitment to solving any issues."
"The on-premises version of HiveManager NG that we use does not receive updates as soon as the cloud-based version does."
 

Pricing and Cost Advice

"Licensing for this solution is paid on a yearly basis."
"The cost is per port and can be expensive but it does include training and support for three years."
"We have a three-year license for this solution."
"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"Although the pricing is a bit high, I consider Aerohive to be well worth the money."
"Extreme licensing is based on the number of access points. When you buy the license for the first year, everything is included, such as access to mapping, etc. If you don't renew your software assurance for the second year, the access points will still work, but you can't use the cloud management tools."
"Start small and grow big. You can choose the basic Aerohive Connect free subscription solution and, later, if needed (in terms of functionality) you can upgrade to Aerohive Select."
"ExtremeCloud IQ's pricing is medium, but its support contract costs more."
"It is easy for customers to use this product because they are able to interchange the license depending on their usage rather than having to buy individual licenses for each asset."
"The product pricing is reasonable."
"Customers need to pay a yearly licensing fee for ExtremeCloud IQ, which is a little bit expensive."
"Previously, ExtremeCloudIQ provided free licensing for all the basic requirements of their customers. An advanced cloud user had to purchase advanced licenses for automation and advanced country features at the enterprise level. They have restricted the licensing, allowing only up to ten units for testing, which is challenging. This limitation becomes problematic, especially in countries like Sri Lanka or other Asian countries, where customers face economic challenges and have limited budgets. The previous free option was beneficial, but it has become tougher to manage with these new changes. They should revise their pricing structure, offering the basic features free of charge for up to 50 AP. Larger entities with more than 50 APs have the budget to support them. Still, it becomes more difficult for small and medium-sized businesses with less than 50 APs to allocate a significant budget for control and management features."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
896,467 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
9%
Comms Service Provider
9%
University
9%
Financial Services Firm
8%
Financial Services Firm
12%
Manufacturing Company
9%
Construction Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise8
Large Enterprise7
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise14
Large Enterprise24
 

Questions from the Community

What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
I have not had much experience with the community-driven rule set while utilizing Cisco Sourcefire SNORT. I don't have experience with recognizing zero-day vulnerabilities, but based on my knowledg...
What is your primary use case for Cisco Sourcefire SNORT?
Endpoint protection is the main use case. The main aspect involves specifying different rules, and when network traffic hits these rules, it will try to block the traffic or at least log the traffi...
What are pros and cons of Aruba 515 Series AP vs. Cisco Meraki or Extreme Networks?
Depends. I have personally used both Cisco and Aruba so I am familiar with them. Extreme I am not, so unless they have some feature that I need or want, I wouldn't consider them. Do you have expe...
What is your experience regarding pricing and costs for ExtremeCloud IQ?
The licensing was a challenge due to budget constraints, and I used ExtremeCloud IQ without a license for a period. The documentation and training courses were also costly, impacting how easily I c...
What advice do you have for others considering ExtremeCloud IQ?
I use ExtremeCloud IQ's real-time analytics. In the cloud solution, I get reports, and it works together with machine learning and artificial intelligence for those reports. This tool permits the c...
 

Also Known As

Sourcefire SNORT
Aerohive Networks, Aerohive HiveManager, HiveManager, ExtremeCloud , ExtremeSecurity
 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Henry Ford Health System, Baltimore Ravens, Brandili, Federal University of Alagoas, CEDAE, Caxias do Sul, UNISC Concurrency, CenturyLink Field, Louisiana College, Cricket Tasmania Stadium, Moscow Internet Exchange
Find out what your peers are saying about Cisco Sourcefire SNORT vs. ExtremeCloud IQ and other solutions. Updated: April 2026.
896,467 professionals have used our research since 2012.