Try our new research platform with insights from 80,000+ expert users

Cisco Sourcefire SNORT vs ExtremeCloud IQ comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
No ranking in other categories
ExtremeCloud IQ
Ranking in Intrusion Detection and Prevention Software (IDPS)
18th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
77
Ranking in other categories
Network Management Applications (14th), Network Access Control (NAC) (10th)
 

Mindshare comparison

As of February 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.1%, up from 2.2% compared to the previous year. The mindshare of ExtremeCloud IQ is 0.9%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Cisco Sourcefire SNORT3.1%
ExtremeCloud IQ0.9%
Other96.0%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2772102 - PeerSpot reviewer
Cloud Architect at a consultancy with 1-10 employees
Logging and customizable rules have helped improve threat monitoring and detection
The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT. Being able to log and store it in a file allows you to push it to a centralized repository. The logging and reporting help improve incident response. You should always be logging threats, any sort of misconfiguration, and anything that could be an issue. It's important to at least log and monitor it. The basic rules provide a good baseline in assessing Cisco Sourcefire SNORT's ability in providing real-time analytics for threat detection, but as a professional, you should look to constantly modify that baseline. They provide extensive customizability so you can define your own rules. The customizability allows it to be adaptable in protecting against diverse network threats to the constant change.
UK
Technical Coordinator at Yildiz Technical University
Cloud-based deployment eases IT workload and supports network management
I struggled with the documentation. I expected comprehensive documentation and videos but found them to be too simple. I needed deep details and more thorough resources. Although there were costly courses available, the lack of budget was a hindrance. Improving documentation with more detailed videos and resources would be beneficial.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates."
"The solution is rather easy to use."
"The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."
"It is quite an intelligent product."
"The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"The most valuable feature is the visibility that we have across the virtual environment."
"Cisco Sourcefire SNORT is easy to configure and the reporting is great. It's also very user-friendly."
"The tech who handles Extreme IQ tells me it's easy to use and learn. He felt like it was pretty intuitive. It comes with solid training materials. He also has talked about the security features that give you as much or as little control as you want."
"Ability to assign zero trust policies from the user."
"This solution's most valuable feature is its short deployment time."
"The technical support for this solution is good."
"The dashboards are great and the user interface is quite intuitive."
"What I like best about ExtremeCloud IQ is its ease of use. Flexibility is another pro of ExtremeCloud IQ. I also find ExtremeCloud IQ feature-rich."
"Its configuration and deployment are the most valuable."
"The deployment made my life very easy."
 

Cons

"I would like to have analytics included in the suite."
"If the price is brought down then everybody will be happy."
"With the next release, I would like to see some PBR, so that you can do the configuration with the features."
"We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco."
"The main dashboard of Cisco Sourcefire SNORT could improve."
"The solution's approach to managing traffic blocking is confusing and impractical."
"The implementation could be a bit easier."
"Cisco Sourcefire SNORT can scale, but if you have too much, you could fill up your log files, which I consider when discussing scalability."
"The dashboard and stability need to be improved."
"We'd like to have a cloud dashboard from which we can see all devices."
"The Virtual Appliance crashed once while doing an upgrade. The good thing here is, even if the management system fails, all our networks and features still remain 100% stable and working."
"The certification costs from suppliers are getting out of control, and it's not just Extreme. We have the same problem with Cisco and Huawei."
"Need port aggregation on the 2384 switches to take full advantage of ac on the APs. I understand that is on their product road map."
"The initial setup of ExtremeCloud IQ is medium difficulty. It is easy with knowledge of networking protocols and SNMP solutions with the MIBs. For those without knowledge of these protocols or MIBs, it can be difficult."
"The solution will show us that there are some issues, but when we try to find those issues, we can't see them."
"Lacks cyber asset tracking."
 

Pricing and Cost Advice

"The cost is per port and can be expensive but it does include training and support for three years."
"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"Licensing for this solution is paid on a yearly basis."
"We have a three-year license for this solution."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"Price-wise, it is a reasonable tool."
"ExtremeCloud IQ's pricing is high."
"ExtremeCloud IQ's pricing is medium, but its support contract costs more."
"Previously, ExtremeCloudIQ provided free licensing for all the basic requirements of their customers. An advanced cloud user had to purchase advanced licenses for automation and advanced country features at the enterprise level. They have restricted the licensing, allowing only up to ten units for testing, which is challenging. This limitation becomes problematic, especially in countries like Sri Lanka or other Asian countries, where customers face economic challenges and have limited budgets. The previous free option was beneficial, but it has become tougher to manage with these new changes. They should revise their pricing structure, offering the basic features free of charge for up to 50 AP. Larger entities with more than 50 APs have the budget to support them. Still, it becomes more difficult for small and medium-sized businesses with less than 50 APs to allocate a significant budget for control and management features."
"It is not the cheapest product but I think that the price is reasonable because you get a lot of support of it's needed."
"Although the pricing is a bit high, I consider Aerohive to be well worth the money."
"There are probably cheaper solutions but we invest for stability and performance for the longer haul."
"Buy near the end of Q4 in order to get a deal."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
883,011 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
13%
Comms Service Provider
9%
Computer Software Company
8%
Financial Services Firm
8%
Manufacturing Company
10%
Educational Organization
8%
Comms Service Provider
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise8
Large Enterprise7
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise14
Large Enterprise24
 

Questions from the Community

What do you like most about Cisco Sourcefire SNORT?
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
I have not had much experience with the community-driven rule set while utilizing Cisco Sourcefire SNORT. I don't have experience with recognizing zero-day vulnerabilities, but based on my knowledg...
What are pros and cons of Aruba 515 Series AP vs. Cisco Meraki or Extreme Networks?
Depends. I have personally used both Cisco and Aruba so I am familiar with them. Extreme I am not, so unless they have some feature that I need or want, I wouldn't consider them. Do you have expe...
What is your experience regarding pricing and costs for ExtremeCloud IQ?
The licensing was a challenge due to budget constraints, and I used ExtremeCloud IQ without a license for a period. The documentation and training courses were also costly, impacting how easily I c...
What advice do you have for others considering ExtremeCloud IQ?
I use ExtremeCloud IQ's real-time analytics. In the cloud solution, I get reports, and it works together with machine learning and artificial intelligence for those reports. This tool permits the c...
 

Also Known As

Sourcefire SNORT
Aerohive Networks, Aerohive HiveManager, HiveManager, ExtremeCloud , ExtremeSecurity
 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Henry Ford Health System, Baltimore Ravens, Brandili, Federal University of Alagoas, CEDAE, Caxias do Sul, UNISC Concurrency, CenturyLink Field, Louisiana College, Cricket Tasmania Stadium, Moscow Internet Exchange
Find out what your peers are saying about Cisco Sourcefire SNORT vs. ExtremeCloud IQ and other solutions. Updated: February 2026.
883,011 professionals have used our research since 2012.