Try our new research platform with insights from 80,000+ expert users

Cisco Sourcefire SNORT vs ExtremeCloud IQ comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
No ranking in other categories
ExtremeCloud IQ
Ranking in Intrusion Detection and Prevention Software (IDPS)
18th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
77
Ranking in other categories
Network Management Applications (14th), Network Access Control (NAC) (10th)
 

Mindshare comparison

As of March 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.1%, up from 2.2% compared to the previous year. The mindshare of ExtremeCloud IQ is 0.9%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Cisco Sourcefire SNORT3.1%
ExtremeCloud IQ0.9%
Other96.0%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2772102 - PeerSpot reviewer
Cloud Architect at a consultancy with 1-10 employees
Logging and customizable rules have helped improve threat monitoring and detection
The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT. Being able to log and store it in a file allows you to push it to a centralized repository. The logging and reporting help improve incident response. You should always be logging threats, any sort of misconfiguration, and anything that could be an issue. It's important to at least log and monitor it. The basic rules provide a good baseline in assessing Cisco Sourcefire SNORT's ability in providing real-time analytics for threat detection, but as a professional, you should look to constantly modify that baseline. They provide extensive customizability so you can define your own rules. The customizability allows it to be adaptable in protecting against diverse network threats to the constant change.
UK
Technical Coordinator at Yildiz Technical University
Cloud-based deployment eases IT workload and supports network management
I struggled with the documentation. I expected comprehensive documentation and videos but found them to be too simple. I needed deep details and more thorough resources. Although there were costly courses available, the lack of budget was a hindrance. Improving documentation with more detailed videos and resources would be beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like most of Cisco's features, like malware detection and URL filtering."
"The most valuable feature of this solution is the filtering."
"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates."
"The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."
"It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions."
"Solid intrusion detection and prevention that scales easily in very large environments."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."
"I like ExtremeCloud IQ's unified single-pane-of-glass dashboard. It offers a lot of visibility of performance, and it's great for troubleshooting. You don't have to go to 55 different places. You can get the information you need with just a few clicks."
"What our customers like the most is that this device is so rugged. It has very good performance and throughput. Its console is very easy to use and has many features, which makes it different from its competitors. Cloud IQ has all the features built into the console, whereas other solutions require you to integrate multiple solutions with their consoles. You don't need to add anything extra with Cloud IQ. With this single solution, you can do almost everything."
"The HiveManager integration with the VPN Gateway is awesome."
"App and firewall security at the AP."
"The technical support for this solution is good."
"Integrated Firewall in every AP (with DPI inspection) is a killer feature and it is included already in the price of licence (with others, this feature is an add-on licence)."
"The few times we have needed help, Aerohive has been there for us and I am confident that If I need them they will be there again."
"The Client 360 feature provides a comprehensive view of your clients and their activities, including the devices they use. Additionally, a feature called Network 360 offers a 360-degree view of the network, like data usage (in GB), the status of ports and AP, and other details. You can drill down on granular-level drills to gain insights into specific applications and usage patterns like application level and fee, where your data is being wasted or what your clients are doing with the Internet data, what kind of applications they are using, etc."
 

Cons

"Cisco Sourcefire SNORT can scale, but if you have too much, you could fill up your log files, which I consider when discussing scalability."
"The cloud can be improved."
"I want to see a better dashboard for the product. The dashboard can be a bit modified or enhanced."
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."
"Performance needs improvement."
"With the next release, I would like to see some PBR, so that you can do the configuration with the features."
"There are problems setting up VPNs for some regions."
"The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment."
"For me, the only issue is the potential delay in the tool statistics updating in real time after making changes."
"A mobile app would be awesome."
"I know a school district, a big school district of mine, ripped out Extreme due to inefficiencies. It was the guest network that can be a struggle. They tried to differentiate between their primary network, and then offer a secondary."
"Pricing is a bit expensive."
"The product could support multi-vendor infrastructures."
"There can be an improvement by incorporating two-factor authentication or multi-factor authentication for security. Advanced network access control features and application control features should be added to manage applications. Many customers are interested in managing data, such as setting data quotas for individual users."
"Integrating the network access control solution can be complex, as it essentially combines two separate products."
"The tool has simplified things, but it also adds a complexity that sometimes stumps some users."
 

Pricing and Cost Advice

"The cost is per port and can be expensive but it does include training and support for three years."
"Licensing for this solution is paid on a yearly basis."
"We have a three-year license for this solution."
"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"The product pricing is reasonable."
"For example, if you compare Aruba vs Aerohive, you need to check which licences from Aruba you need to match the functionality of Aerohive (usually you need at least three types of licences and a controller with redundancy). The same goes with Cisco, where you need buy additional licences for central management, firewall, spectral analysis, WIPS, PPSK, etc. Aerohive has a very simple model - one licence for all the functionalities - and you can believe that there are many. One licence makes it easy to maintain, scale, renew and you can plan your costs 10 years in advance."
"I would advise that you be sure to compare apples with apples. Many customers just look at the price per AP and licences, and compare that against other solutions. But, they do not look at the complete picture such as: TCO - how much the equipment will cost you over, say, seven years? Will the customer need to change complete infrastructure when they want to buy the newest hardware? Does support include a lifetime warranty and RMA?"
"I did a multi-year license. It was a three-year license. It compares well with others in terms of the price. It is about a hundred dollars per year on a three-year scale."
"It is not the cheapest product but I think that the price is reasonable because you get a lot of support of it's needed."
"Customers need to pay a yearly licensing fee for ExtremeCloud IQ, which is a little bit expensive."
"Buy near the end of Q4 in order to get a deal."
"Although the pricing is a bit high, I consider Aerohive to be well worth the money."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
883,011 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
13%
Comms Service Provider
9%
Financial Services Firm
9%
Computer Software Company
8%
Manufacturing Company
10%
Comms Service Provider
8%
Educational Organization
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise8
Large Enterprise7
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise14
Large Enterprise24
 

Questions from the Community

What do you like most about Cisco Sourcefire SNORT?
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
I have not had much experience with the community-driven rule set while utilizing Cisco Sourcefire SNORT. I don't have experience with recognizing zero-day vulnerabilities, but based on my knowledg...
What are pros and cons of Aruba 515 Series AP vs. Cisco Meraki or Extreme Networks?
Depends. I have personally used both Cisco and Aruba so I am familiar with them. Extreme I am not, so unless they have some feature that I need or want, I wouldn't consider them. Do you have expe...
What is your experience regarding pricing and costs for ExtremeCloud IQ?
The licensing was a challenge due to budget constraints, and I used ExtremeCloud IQ without a license for a period. The documentation and training courses were also costly, impacting how easily I c...
What advice do you have for others considering ExtremeCloud IQ?
I use ExtremeCloud IQ's real-time analytics. In the cloud solution, I get reports, and it works together with machine learning and artificial intelligence for those reports. This tool permits the c...
 

Also Known As

Sourcefire SNORT
Aerohive Networks, Aerohive HiveManager, HiveManager, ExtremeCloud , ExtremeSecurity
 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Henry Ford Health System, Baltimore Ravens, Brandili, Federal University of Alagoas, CEDAE, Caxias do Sul, UNISC Concurrency, CenturyLink Field, Louisiana College, Cricket Tasmania Stadium, Moscow Internet Exchange
Find out what your peers are saying about Cisco Sourcefire SNORT vs. ExtremeCloud IQ and other solutions. Updated: February 2026.
883,011 professionals have used our research since 2012.