Bewertet am 26.5.2019
Great software detection for intrusions
Gustavo adolfo G.
Kommentare: I really enjoy the time that I've using Snort because the support and the purpose of It was accomplished. This is a great tool for every people that need to keep their network protected
Vorteile: Snort is a really powerfull software to detect intrusions in your network. With the rules you can easy keep your network protected and you can monitor all traffic in order to know when an intrusion was blocked. The customer support of Snort is really good and they always help customers to find a rules updates or repot a vulnerability. It is really easy to use.
Nachteile: The main con that I could found is that they need more time to publish the fixed for the vulnerabilities than another competitors in the market.
Bewertet am 9.6.2019
A good integration in a secured Network
Luisa fernanda S.
Kommentare: I really liked how Snort works and the benefits that the software gave to me. I could recommend It to every people that needs to block internet traffic or avoid an attack because with the signatures of Snort the network will be secured.
Vorteile: i've been using this software in firepower appliances for more than 1 year and I really like how Snort works in pro of keep the network secured. I really like that you can send a feedback about an attack and in the next update they add a rule to prevent It. The support is very good and every time they helped me to solve my doubts. I can create a rules to be sure than the network is secured and I can dothis with a lot of parameters like IP, Port, secure zone, interface, URL and geolocation. This is a really good IDS and I like the integration with the firepower devices.
Nachteile: The worst thing of Snort is the usage of the data bases. This DB is susceptible to a corruption, and when this happens you need to reimage the device. This is something that their support needs to have fixed because the DB should be more stable. When you re-image one device you will lost all configuration and if you don't have a buckup you'll be done.
Bewertet am 5.4.2019
Cisco buying Sourcefire (snort) was a great move
Kommentare: Love Snort! Thankful it lives on and is just getting better under cisco
Vorteile: Cisco's firepower services based off Snort are all the best things about Snort backed by a best in business solution provider like Cisco. Flexible and customizable to a fault and still, after all these years one of the best IDPS solutions on the market. What isn't to like?
Nachteile: Largely remediated in their latest updates, combineing Snort + ASA on the FTD codebase was initially VERY buggy. The latest updates from Cisco within the last 6months have turned it into a much more stable beast.
Bewertet am 19.4.2019
Kommentare: This product helped us implementing IPS/IDS faster.
Vorteile: This implementation works pretty good providing signatures updates (using Talos) and some great logging capabilities (using Syslog).
Nachteile: This product is not exactly stable and requires some more maintenance from Cisco - we wouldn't be using it if we had more spare time.
Bewertet am 17.9.2018
Snort the best IDS
Kommentare: I have been using this product for the last 1 year.And I like the way it is being integrated. I already recommended this product to my colleagues.Thank you for the team who are behind this product.
Vorteile: Snort is the best IDS I have used.It provides data protection and prevent intrusion very effectively.The main thing I felt is the easiness of this product.It is very easy to install and use.And also it is secure and cost effective.Customized rules make it easy to use.
Nachteile: Even if installation and basic set up is easy, things become difficult when we go depth. To include threats specific to our environment is little difficult.
Bewertet am 30.4.2019
Snort is great detection tool
Kommentare: We choose Snort because it suite to our needs and can be used free with community rules updates.
Snort is great detection tool for your infrastructure and basically it can analyse your network traffic and detect suspicious behavior.
This software can save your money at the end, because you find out very quickly what is happenning in your network stack.
If you want update Snort rules definition, you have to do manually or via your script. As I know, there is no way how to do it via RPM/DEB packages or with BIN :-/
There are community rules (free) and also non-free rules.
Bewertet am 29.1.2018
Vorteile: I'm a huge fan of Cisco and their solutions. Snort is another great add-on to monitor traffic analysis. I always suggest training or working alongside your Cisco partner to ensure you're getting the full benefit of your solution.
Bewertet am 6.6.2018
A great IDS / IPS solution
Vorteile: Snort is a staple in the security field. It is very aggressive in intrusion prevention and detection. This is a must have for compliance.
Nachteile: Since snort is open source and free, it isn't as clean as it could be. There are other solutions out there that look better.
Bewertet am 20.3.2019
Kommentare: I use it as an engine on Firepower NGFW.
Vorteile: Their database about every single virus, malware or even any kind of path for security breaches are up to date. I love it !
Nachteile: Support is not good, to much time by phone, deficient responsive team.
Bewertet am 27.11.2018
Snort- a great network tool
Vorteile: A great IDS tool on your network. It's decently user friendly if your used to code and analysis. Linux and Windows friendly.
Nachteile: Nothing really, Cisco hasn't changed much since it bought it