Solid intrusion detection and prevention that scales easily in very large environments.
Cisco Sourcefire SNORT delivers robust intrusion detection and prevention with high threat protection and low false positives. Despite its seamless integration with Cisco Stealthwatch and ISE, pricing and ease of rule customization need improvement, especially for budget-conscious buyers. Setting up VPNs and managing traffic blocking can be challenging. Cisco's technical support remains reliable, but integration enhancements could refine the administrative experience. Cost-effectiveness remains a strength against competitors like Palo Alto and Fortinet.
