Cisco Sourcefire SNORT Reviews

Cisco Sourcefire SNORT offers scalability, advanced malware protection with URL filtering, and integrated support for IPS and high availability. Users appreciate its user-friendly interface, seamless integration with other Cisco tools, robust threat protection, and automated IPS rule tuning. It provides thorough visibility, reliable monitoring, and effective logging. The system's intelligent security automation and adaptability ensure strong protection against diverse threats, offering extensive customizability for organizations to tailor their security needs efficiently.

• "Users have access to intelligent security automation as one of the features, which can easily automate your event impact assessment so your IPS policy tuning can be done as well as your network behavior analysis, and you can do real-time contextual awareness with correlation of events created on your applications, user devices, operating systems, or vulnerabilities, with all of this real-time data captured including your apps and port scans."
• "We primarily use this solution as an intrusion prevention system for external firewalls and deploy the solution on-premises."
• "This solution makes life a lot easier as there are fewer man-hours required and we no longer need too many resources to manage it."

Users note integration into Cisco DNA Center would be beneficial. Cost reduction is necessary due to budget constraints. Simplified customization and improved performance are desired. Alert details need enhancement to reduce false positives. Some report stability issues and high resource demands. A cloud version is requested. Also mentioned are setup challenges, especially with VPNs, and a need for better dashboards. Overall, a more lightweight design and enhanced technical support are recommended.

• "The implementation could be a bit easier."
• "The utopia is to see everything from one dashboard, but sometimes that's not very possible."
• "Sometimes the solution will offer up false positives."