Cisco Sourcefire SNORT is a versatile cybersecurity tool offering threat detection, scalability, and integration with Cisco tools. It is recognized for ease of configuration and comprehensive protection, making it suitable for intrusion prevention and firewall applications.


| Product | Mindshare (%) |
|---|---|
| Cisco Sourcefire SNORT | 3.1% |
| Fortinet FortiGate | 11.4% |
| Darktrace | 10.8% |
| Other | 74.7% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Intrusion Detection and Prevention Software (IDPS) | Apr 30, 2026 | Download |
| Product | Reviews, tips, and advice from real users | Apr 30, 2026 | Download |
| Comparison | Cisco Sourcefire SNORT vs Fortinet FortiGate | Apr 30, 2026 | Download |
| Comparison | Cisco Sourcefire SNORT vs Darktrace | Apr 30, 2026 | Download |
| Comparison | Cisco Sourcefire SNORT vs Check Point IPS | Apr 30, 2026 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Fortinet FortiGate | 4.2 | 11.4% | 92% | 592 interviewsAdd to research |
| Darktrace | 4.1 | 10.8% | 95% | 84 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 6 |
| Midsize Enterprise | 7 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 39 |
| Midsize Enterprise | 23 |
| Large Enterprise | 60 |
Cisco Sourcefire SNORT provides advanced malware protection and integrates seamlessly with Cisco products. It enables automatic IPS tuning, real-time visibility, and intelligent security automation, which together enhance network security. Users benefit from its URL filtering, email spam elimination, and it delivers low false positives. Though highly effective, feedback highlights a desire for improvements in stability, dashboard effectiveness, traffic blocking customizations, and integration with Cisco DNA Center. Cost concerns and calls for cloud-based deployments also emerge in user feedback. Technical support and performance are also discussed, with VPN configuration posing challenges.
What are the key features of Cisco Sourcefire SNORT?Organizations primarily deploy Cisco Sourcefire SNORT for network security in sectors like finance and healthcare. Used extensively in data centers with Cisco Firepower, it provides intrusion prevention, URL filtering, and VPN security. Pre-configured settings make it practical for on-premises deployment, ensuring secure user-to-server and server-to-server interactions.
Cisco Sourcefire SNORT was previously known as Sourcefire SNORT.
CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
| Author info | Rating | Review Summary |
|---|---|---|
| Cloud Architect at a consultancy with 1-10 employees | 4.5 | I've used Cisco Sourcefire SNORT for endpoint protection, valuing its logging, reporting, and customizable rules. It's stable and scalable with proper limits, and the setup is straightforward, though I lack experience with zero-day detection and community rules. |
| Treasury Specialist at Dah Sing Bank | 4.0 | I can't share specific use cases due to industry restrictions, but the most valuable feature of Cisco Sourcefire SNORT is its threat detection. While the setup is easy, the dashboard needs improvement. We are considering alternatives like Huawei and H3C. |
| Sr. Executive Design Engineering Team at Wateen Telecom (pvt.) | 3.5 | We use Cisco Sourcefire SNORT for IT security prevention systems, integrated with a next-generation firewall. It offers good protection and visibility but suffers from stability issues and complexity compared to competitors like FortiGate. |
| Sr. Manager - Infosec at PAGCOR | 4.5 | We protect our virtual server funds using Cisco Sourcefire SNORT, valuing its visibility across the virtual environment. Although it's expensive, we switched from TippingPoint through public bidding and see a positive ROI without breaches. |
| Director at Baverianvine | 4.0 | I use this stable on-premise IPS solution for external firewalls, serving 10,000 users for over seven years. While its cloud integration could improve, I find it effective and recommend it, rating it eight out of ten. |
| Network Engineer at Arab Islamic Bank | 4.0 | We are using Cisco Sourcefire SNORT primarily as an edge firewall for security. Its most valuable feature is the event monitoring dashboard, though it needs improvement. We previously used McAfee but replaced it with Cisco Sourcefire SNORT. |
| Lead Program Manager at a computer software company with 10,001+ employees | 3.5 | I find this an intelligent and stable IDS/IPS, offering strong SSL encryption and advanced threat protection like Firepower. While implementation could be easier, I'm satisfied with its scalability and support. I rate it 7/10, pending further use. |
| Network Security Engineer at a computer software company with 501-1,000 employees | 4.0 | Cisco Sourcefire SNORT is an effective intrusion detection system that simplifies configuration with pre-defined settings, streamlining deployment and management. However, its traffic blocking approach is confusing and challenging to implement due to architectural constraints. |