Try our new research platform with insights from 80,000+ expert users

Cisco Sourcefire SNORT vs KerioControl comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
10th
Average Rating
7.6
Number of Reviews
19
Ranking in other categories
No ranking in other categories
KerioControl
Ranking in Intrusion Detection and Prevention Software (IDPS)
14th
Average Rating
8.2
Number of Reviews
56
Ranking in other categories
Firewalls (27th), Unified Threat Management (UTM) (11th)
 

Mindshare comparison

As of November 2024, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.2%, down from 4.3% compared to the previous year. The mindshare of KerioControl is 1.6%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Jack Poon - PeerSpot reviewer
Jul 31, 2024
Offers ease of setup and good documentation
When it comes to the product's deployment phase, we have a lot of vendor support. We have a lot of skills here in Hong Kong. Our company doesn't find any problem deploying Cisco solutions. The solution is deployed on an on-premises version. Speaking about the time required to deploy the solution, I would say that we have quite a lot of previous experience with deploying Cisco products. We have our company's standard design document, which we need to follow. We have a standard testing procedure for all those features. We just take out some appropriate parts and then compile them into one document for an individual project. It is actually quite easy for us to do the documentation, so it just takes one or two hours, and we can do the implementation because all the materials and testing procedures are already in our company standard documents, so it is not that difficult for us.
David Schneiderlin - PeerSpot reviewer
Jul 4, 2023
The product is easy to use and reasonably priced, but the upgrades make the network slower
The filtering rules are valuable. The product is easy to use There is no protocol for VPN in Android. It would be good if the product added a protocol for VPN. The upgrades make the network slower. I have been using the solution for four years. I rate the product’s stability a seven out of ten.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates."
"Solid intrusion detection and prevention that scales easily in very large environments."
"The solution is rather easy to use."
"The most valuable feature is the visibility that we have across the virtual environment."
"Cisco technical support is unbeatable. It offers a premium service every time."
"I like most of Cisco's features, like malware detection and URL filtering."
"The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."
"The URL filtering is very good and you can create a group for customized URLs."
"​Setup is simple. The Kerio interface is very intuitive.​"
"The solution is easy to manage. Kerio Control is unique compared to other firewalls because it has been around since 2000 when we switched and the name it started with was WinRoute, and then later became Kerio Control. It evolved over time and it is more of a proprietary firewall on its own and has been developed through open source."
"The interface control manager where we can allocate LAN connections to certain VLANs is the most valuable feature. The other feature that's important for us is because obviously everything is remote with MyKerio, as long as the boat has an internet connection, we can log onto the Kerio and get statistics, as well as provide support."
"The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features."
"All of the features of Kerio Control are equally good. Most valuable to us are the firewall rules, the intrusion detection system, and IP address features."
"The solution is user-friendly."
"The most valuable feature is to provide users with the ability to log in to the portal page, keep track of their data usage and perform bandwidth management."
"The tool shows what has been blocked externally. It's very good because once installed and correctly set up, it allows you to work from home as if you are in the office, without any errors or issues. It's very simple to use, click to connect or disconnect."
 

Cons

"I want to see a better dashboard for the product. The dashboard can be a bit modified or enhanced."
"The pricing needs to be improved. We have lots of low-budget clients around us. Budget constraints are always a deterrent in our market."
"Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience."
"The customization of the rules can be simplified."
"I don't think this solution is a time-based control system, because one cannot filter traffic based on time."
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."
"The implementation could be a bit easier."
"We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco."
"The solution can be improved to create the capability for larger bandwidths that support our business needs."
"The security part of the software, like virus scanning, website, traffic monitoring, things like that, can take a beating on the appliance. And when there's a lot of things going on, the system can get bogged down. The actual security functionality of it needs a little bit more work, which I believe they are remedying or attempting to remedy at this time, but that's the downfall at this time."
"There isn't a lot to be improved. It works well as it is, but they can maybe improve the reporting side."
"The one thing that did put me off of the solution was that, after they were taken over by GFI, the licensing and a few other items have gotten very complicated."
"I would like it if the interface section had multiple failovers. Although I do have three connections, just in case our physical cables get disconnected, I can only set up one failover as a backup. So, if for some reason our fiber and our AFM went down together, I would have to have it search for our 4G modem. I'd love to have extra backups running."
"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"Their support is getting better but still needs improvement."
"I would like for them to add more security features."
 

Pricing and Cost Advice

"We have a three-year license for this solution."
"Licensing for this solution is paid on a yearly basis."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"The cost is per port and can be expensive but it does include training and support for three years."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"The price of the solution is reasonable. For additional costs, you can add on more features such as antivirus."
"We have to pay approximately EUR 175 for the product."
"I am living in Iran and we cannot buy the product from Kerio because of sanctions."
"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."
"It is a good fit for SMBs because of its maintainability. When you want to keep your costs low, then Kerio Control is a very good solution. It's not an expensive product that is well integrated. It has a complete set of features within it that make it a very strong product."
"I pay approximately $50 for the solution on an annual basis."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Financial Services Firm
9%
University
7%
Government
7%
Computer Software Company
23%
Media Company
9%
Financial Services Firm
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Sourcefire SNORT?
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
Cisco offers the Cisco DNA Center, which is a source that provides crucial information for us to monitor performance, and see whether there is any trouble. We are using Cisco DNA center, but again,...
What do you like most about KerioControl?
The solution provides feasibility regarding cyber privacy.
What is your experience regarding pricing and costs for KerioControl?
KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combin...
What needs improvement with KerioControl?
I would like to see geo-IP filtering added to the filtering rules. Incorporating these rules would be very beneficial if you have different ideas or reasons to filter, such as communication to the ...
 

Also Known As

Sourcefire SNORT
No data available
 

Learn More

 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Triton Technical, McDonald's
Find out what your peers are saying about Cisco Sourcefire SNORT vs. KerioControl and other solutions. Updated: October 2024.
814,649 professionals have used our research since 2012.