Try our new research platform with insights from 80,000+ expert users

Cisco Sourcefire SNORT vs ExtremeCloud IQ comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
14th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
No ranking in other categories
ExtremeCloud IQ
Ranking in Intrusion Detection and Prevention Software (IDPS)
17th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
77
Ranking in other categories
Network Management Applications (13th), Network Access Control (NAC) (10th)
 

Mindshare comparison

As of March 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.1%, up from 2.2% compared to the previous year. The mindshare of ExtremeCloud IQ is 0.9%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Cisco Sourcefire SNORT3.1%
ExtremeCloud IQ0.9%
Other96.0%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2772102 - PeerSpot reviewer
Cloud Architect at a consultancy with 1-10 employees
Logging and customizable rules have helped improve threat monitoring and detection
The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT. Being able to log and store it in a file allows you to push it to a centralized repository. The logging and reporting help improve incident response. You should always be logging threats, any sort of misconfiguration, and anything that could be an issue. It's important to at least log and monitor it. The basic rules provide a good baseline in assessing Cisco Sourcefire SNORT's ability in providing real-time analytics for threat detection, but as a professional, you should look to constantly modify that baseline. They provide extensive customizability so you can define your own rules. The customizability allows it to be adaptable in protecting against diverse network threats to the constant change.
UK
Technical Coordinator at Yildiz Technical University
Cloud-based deployment eases IT workload and supports network management
I struggled with the documentation. I expected comprehensive documentation and videos but found them to be too simple. I needed deep details and more thorough resources. Although there were costly courses available, the lack of budget was a hindrance. Improving documentation with more detailed videos and resources would be beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"Solid intrusion detection and prevention that scales easily in very large environments."
"I like most of Cisco's features, like malware detection and URL filtering."
"Cisco technical support is unbeatable. It offers a premium service every time."
"The whole solution is very good, and stable."
"It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings."
"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."
"The solution is rather easy to use."
"ExtremeCloud IQ is integrated with the Ekahau tool so that you can log in to the ExtremeCloud IQ portal, upload the cloud plans, draw all the interiors, and plan the APs with the real-time AP position."
"Extreme is transitioning to 802.11ax facilities running the 2G and the 5G cloud, allowing for higher density in education use cases, and ExtremeCloud IQ provides you with novel ways to manage everything. In the old days, you used to have a controller on-site for your access points, but everything is easier now."
"What's most valuable for me in ExtremeCloud IQ is easy management. It also has centralized administration, so you don't have to go to the customer site to program it. It can be programmed remotely."
"The few times we have needed help, Aerohive has been there for us and I am confident that If I need them they will be there again."
"What our customers like the most is that this device is so rugged. It has very good performance and throughput. Its console is very easy to use and has many features, which makes it different from its competitors. Cloud IQ has all the features built into the console, whereas other solutions require you to integrate multiple solutions with their consoles. You don't need to add anything extra with Cloud IQ. With this single solution, you can do almost everything."
"Its configuration and deployment are the most valuable."
"The tech who handles Extreme IQ tells me it's easy to use and learn. He felt like it was pretty intuitive. It comes with solid training materials. He also has talked about the security features that give you as much or as little control as you want."
"HiveManager is extremely easy to use for anyone with little network experience."
 

Cons

"With the next release, I would like to see some PBR, so that you can do the configuration with the features."
"Performance needs improvement."
"If the price is brought down then everybody will be happy."
"I don't think this solution is a time-based control system, because one cannot filter traffic based on time."
"We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco."
"While the alerts they offer are good, it could improve it in the sense that they should be more detailed to make the alerts more useful to us in general. Sometimes the solution will offer up false positives. Due to the fact that the alerts aren't detailed, we have to go dig around to see why is it being blocked. The solution would be infinitely better if there was just a bit more detail in the alert information and logging we receive."
"I did not experience any pain points that required improvement. Maybe a couple of false-positives, but that's about it."
"The customization of the rules can be simplified."
"Its price could be lower. It is a simplified solution, but it has price challenges. It is costly as compared to other solutions. It has almost everything. The only thing is that MAC is not possible on the cloud, and it has to be on-premises."
"I would like to see a remote phone application for monitoring APs when on the road."
"The certification costs from suppliers are getting out of control, and it's not just Extreme. We have the same problem with Cisco and Huawei."
"A room for improvement in ExtremeCloud IQ is roaming. My team is facing roaming issues with the solution, particularly when using VoIP over WiFi. For example, VoIP sometimes breaks when you walk around the customer site. In terms of what I'd like to see in the next release of the solution, right now, the inventory for ExtremeCloud IQ is awful. There's no stock, and you must wait a year and a half for new stocks. It's awful."
"For me, the only issue is the potential delay in the tool statistics updating in real time after making changes."
"I struggled with the documentation. I expected comprehensive documentation and videos but found them to be too simple."
"Lacks cyber asset tracking."
"The product could support multi-vendor infrastructures."
 

Pricing and Cost Advice

"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"We have a three-year license for this solution."
"The cost is per port and can be expensive but it does include training and support for three years."
"Licensing for this solution is paid on a yearly basis."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"I am not involved in the price, but I am sure that it is not cheap."
"ExtremeCloud IQ's pricing is medium, but its support contract costs more."
"This solution offers annual licensing that is middle of the range in terms of cost."
"The product pricing is reasonable."
"It is costly as compared to Meraki, Aruba, Juniper, and Cisco. Cloud IQ is an enterprise solution, whereas Meraki is specifically a single solution."
"For example, if you compare Aruba vs Aerohive, you need to check which licences from Aruba you need to match the functionality of Aerohive (usually you need at least three types of licences and a controller with redundancy). The same goes with Cisco, where you need buy additional licences for central management, firewall, spectral analysis, WIPS, PPSK, etc. Aerohive has a very simple model - one licence for all the functionalities - and you can believe that there are many. One licence makes it easy to maintain, scale, renew and you can plan your costs 10 years in advance."
"Previously, ExtremeCloudIQ provided free licensing for all the basic requirements of their customers. An advanced cloud user had to purchase advanced licenses for automation and advanced country features at the enterprise level. They have restricted the licensing, allowing only up to ten units for testing, which is challenging. This limitation becomes problematic, especially in countries like Sri Lanka or other Asian countries, where customers face economic challenges and have limited budgets. The previous free option was beneficial, but it has become tougher to manage with these new changes. They should revise their pricing structure, offering the basic features free of charge for up to 50 AP. Larger entities with more than 50 APs have the budget to support them. Still, it becomes more difficult for small and medium-sized businesses with less than 50 APs to allocate a significant budget for control and management features."
"It is easy for customers to use this product because they are able to interchange the license depending on their usage rather than having to buy individual licenses for each asset."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
883,044 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
12%
Comms Service Provider
9%
Financial Services Firm
8%
Computer Software Company
7%
Manufacturing Company
10%
Comms Service Provider
8%
Educational Organization
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise8
Large Enterprise7
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise14
Large Enterprise24
 

Questions from the Community

What do you like most about Cisco Sourcefire SNORT?
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
I have not had much experience with the community-driven rule set while utilizing Cisco Sourcefire SNORT. I don't have experience with recognizing zero-day vulnerabilities, but based on my knowledg...
What are pros and cons of Aruba 515 Series AP vs. Cisco Meraki or Extreme Networks?
Depends. I have personally used both Cisco and Aruba so I am familiar with them. Extreme I am not, so unless they have some feature that I need or want, I wouldn't consider them. Do you have expe...
What is your experience regarding pricing and costs for ExtremeCloud IQ?
The licensing was a challenge due to budget constraints, and I used ExtremeCloud IQ without a license for a period. The documentation and training courses were also costly, impacting how easily I c...
What advice do you have for others considering ExtremeCloud IQ?
I use ExtremeCloud IQ's real-time analytics. In the cloud solution, I get reports, and it works together with machine learning and artificial intelligence for those reports. This tool permits the c...
 

Also Known As

Sourcefire SNORT
Aerohive Networks, Aerohive HiveManager, HiveManager, ExtremeCloud , ExtremeSecurity
 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Henry Ford Health System, Baltimore Ravens, Brandili, Federal University of Alagoas, CEDAE, Caxias do Sul, UNISC Concurrency, CenturyLink Field, Louisiana College, Cricket Tasmania Stadium, Moscow Internet Exchange
Find out what your peers are saying about Cisco Sourcefire SNORT vs. ExtremeCloud IQ and other solutions. Updated: March 2026.
883,044 professionals have used our research since 2012.