Cisco Sourcefire SNORT vs Forcepoint Next Generation Firewall comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cisco Sourcefire SNORT and Forcepoint Next Generation Firewall based on real PeerSpot user reviews.

Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS).
To learn more, read our detailed Intrusion Detection and Prevention Software (IDPS) Report (Updated: March 2024).
768,578 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution is stable.""It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions.""Solid intrusion detection and prevention that scales easily in very large environments.""I like most of Cisco's features, like malware detection and URL filtering.""In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well.""The most valuable feature is the visibility that we have across the virtual environment.""The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that.""The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."

More Cisco Sourcefire SNORT Pros →

"The people we deal with is a local partner in Cambodia and we can get good support from them.""It is a scalable solution.""The feature that we like the most about Forcepoint is that we know the technology and have confidence in it. We can have several functionalities to simplify operations and management. We can combine functionalities like log ownership to review the number of devices in the infrastructure.""I found the initial setup process to be very simple and straightforward.""Forcepoint is a complete package because it has network and systems applications. Other firewalls are only for the network.""Forcepoint is a good, stable solution.""Next Generation Firewall's best feature is that it can be managed on one platform.""The central security management center and the content management center are very good."

More Forcepoint Next Generation Firewall Pros →

Cons
"Performance needs improvement.""I would like to have analytics included in the suite.""The implementation could be a bit easier.""We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco.""There are problems setting up VPNs for some regions.""Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience.""The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment.""If the price is brought down then everybody will be happy."

More Cisco Sourcefire SNORT Cons →

"Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices.""The solution's support could use improvement.""The ability to dynamically change policies could be improved.""The security features need to be improved.""Configuration is not easy because it has an old-fashioned interface. The configuration interface is highly complex, and it's been the same for years. They have to change the interface.""Forcepoint Next Generation Firewall could change its interface, allowing standard or direct connect modes to be configured.""You do need knowledge of the solution in order to set the product up properly.""The solution needs to add an antivirus profile and anti-spyware profile, not just policies and VPN."

More Forcepoint Next Generation Firewall Cons →

Pricing and Cost Advice
  • "We have a three-year license for this solution."
  • "Licensing for this solution is paid on a yearly basis."
  • "I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
  • "The cost is per port and can be expensive but it does include training and support for three years."
  • More Cisco Sourcefire SNORT Pricing and Cost Advice →

  • "The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
  • "I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."
  • "We would love to take other solution from Forcepoint, but unfortunately the price is too high. That's why we are not considering using Forcepoing for our proxy and DLB. They have a very good DLB, but the matter in the end is the cost."
  • "Forcepoint is very expensive but it's really secure."
  • "It is expensive."
  • "The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
  • "Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
  • "We have found the price could be reduced. It is a little expensive."
  • More Forcepoint Next Generation Firewall Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    768,578 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet. It is cheaper than Palo Alto and comparable to Fortinet. It also depends on Cisco’s discount. Sometimes it's… more »
    Top Answer:The solution has some stability issues. Also, it's complicated compared to other products like FortiGate.
    Top Answer:They offer templates that provide detailed reports categorized by user, device, and internal network access.
    Top Answer:It is an affordable product. We purchase its yearly license.
    Top Answer:While they offer a comprehensive bundled solution, some users may prefer on-premise deployments for certain features, such as URL filtering. Currently, Forcepoint offers WebSense for URL filtering in… more »
    Ranking
    Views
    2,112
    Comparisons
    1,553
    Reviews
    5
    Average Words per Review
    392
    Rating
    8.0
    31st
    out of 59 in Firewalls
    Views
    2,483
    Comparisons
    2,061
    Reviews
    8
    Average Words per Review
    368
    Rating
    7.3
    Comparisons
    Also Known As
    Sourcefire SNORT
    Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
    Learn More
    Overview

    Snort is an open-source, rule-based, intrusion detection and prevention system. It combines the benefits of signature-, protocol-, and anomaly-based inspection methods to deliver flexible protection from malware attacks. Snort gained notoriety for being able to accurately detect threats at high speeds.

    Forcepoint Next Generation Firewall is a versatile and comprehensive solution for perimeter security, offering features such as SD-WAN, IPS, VPN, and cloud or on-premises subscription keys. It is preferred by many clients over Cisco and is used for obligation redundancy, VPN access, and as the main point of security in infrastructure. 

    The product is praised for its simplicity, flexibility, complete feature set, scalability, and central management capabilities. Other valuable features include IPS, firewall, sandbox, application control, filtering, security management center, connectivity, and integration capabilities.

    Sample Customers
    CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
    California Department of Corrections and Rehabilitation (CDCR)
    Top Industries
    REVIEWERS
    Computer Software Company27%
    Financial Services Firm18%
    Comms Service Provider18%
    Government9%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Government9%
    Financial Services Firm8%
    Comms Service Provider7%
    REVIEWERS
    Computer Software Company21%
    Comms Service Provider21%
    University11%
    Integrator11%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Comms Service Provider12%
    Government9%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business22%
    Midsize Enterprise39%
    Large Enterprise39%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise12%
    Large Enterprise62%
    REVIEWERS
    Small Business59%
    Midsize Enterprise17%
    Large Enterprise24%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise14%
    Large Enterprise60%
    Buyer's Guide
    Intrusion Detection and Prevention Software (IDPS)
    March 2024
    Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: March 2024.
    768,578 professionals have used our research since 2012.

    Cisco Sourcefire SNORT is ranked 13th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Forcepoint Next Generation Firewall is ranked 31st in Firewalls with 39 reviews. Cisco Sourcefire SNORT is rated 7.6, while Forcepoint Next Generation Firewall is rated 7.6. The top reviewer of Cisco Sourcefire SNORT writes "An IPS solution for security and protection but lacks stability". On the other hand, the top reviewer of Forcepoint Next Generation Firewall writes "Good URL filtering with helpful technical support and good scalability". Cisco Sourcefire SNORT is most compared with Fortinet FortiGate IPS, Cisco NGIPS, Check Point IPS, Palo Alto Networks Advanced Threat Prevention and Cisco Secure Network Analytics, whereas Forcepoint Next Generation Firewall is most compared with Fortinet FortiGate, Palo Alto Networks Advanced Threat Prevention, Check Point NGFW, Cisco Secure Firewall and Sangfor NGAF.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.