Cisco Sourcefire SNORT vs Trellix Intrusion Prevention System comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cisco Sourcefire SNORT and Trellix Intrusion Prevention System based on real PeerSpot user reviews.

Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cisco Sourcefire SNORT vs. Trellix Intrusion Prevention System Report (Updated: May 2024).
772,679 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates.""It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings.""It is quite an intelligent product.""Cisco Sourcefire SNORT is easy to configure and the reporting is great. It's also very user-friendly.""The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.""It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions.""The solution is rather easy to use.""The most valuable feature is the visibility that we have across the virtual environment."

More Cisco Sourcefire SNORT Pros →

"The initial setup is straightforward.""The most valuable features in Trellix for me are the automated signature updates. It is a great and convenient feature.""There's a good dashboard you can drill down into. It helps you easily locate intrusions and the source of attacks.""It has a lot of functions, such as firewall. We are administrators, and we create some rules to protect our network. We also monitor the traffic in and out and have disk encryption on-premises. When we detect malware, we scan for the virus on the PC. We can then delete or block the malware.""The most valuable features are the customization of the signature and the unlimited amount of signatures in IPS.""The product is worth the investment.""The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic.""Overall the solution is very good. It offers great protection and gives us a good overview of what is on the network."

More Trellix Intrusion Prevention System Pros →

Cons
"I would like to have analytics included in the suite.""We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco.""The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment.""To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have.""The solution's approach to managing traffic blocking is confusing and impractical.""There are problems setting up VPNs for some regions.""The customization of the rules can be simplified.""With the next release, I would like to see some PBR, so that you can do the configuration with the features."

More Cisco Sourcefire SNORT Cons →

"The technical support must be improved.""The technical support has room for improvement.""The solution needs to improve the graphical interface. And they had a limitation in some of the sensor modems as well.""There are limited resources for configuration guidance.""We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler.""The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement.""The pricing could be improved.""The management console needs to be less complex and easier to navigate."

More Trellix Intrusion Prevention System Cons →

Pricing and Cost Advice
  • "We have a three-year license for this solution."
  • "Licensing for this solution is paid on a yearly basis."
  • "I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
  • "The cost is per port and can be expensive but it does include training and support for three years."
  • More Cisco Sourcefire SNORT Pricing and Cost Advice →

  • "I rate the product’s pricing an eight out of ten."
  • "The tool is competitively priced."
  • More Trellix Intrusion Prevention System Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    772,679 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
    Top Answer:The product is inexpensive compared to leading brands such as Palo Alto or Fortinet. It is cheaper than Palo Alto and comparable to Fortinet. It also depends on Cisco’s discount. Sometimes it's… more »
    Top Answer:The solution has some stability issues. Also, it's complicated compared to other products like FortiGate.
    Top Answer:The threat intelligence updates are very accurate.
    Top Answer:The tool is competitively priced. I rate the pricing a six out of ten.
    Top Answer:Network Threat Behavior Analysis must be improved. The technical support must be improved. The support team must provide better help with configurations of devices and enabling NTBA.
    Ranking
    Views
    1,964
    Comparisons
    1,456
    Reviews
    6
    Average Words per Review
    472
    Rating
    8.0
    Views
    1,484
    Comparisons
    1,104
    Reviews
    5
    Average Words per Review
    298
    Rating
    8.4
    Comparisons
    Also Known As
    Sourcefire SNORT
    McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
    Learn More
    Trellix
    Video Not Available
    Overview

    Snort is an open-source, rule-based, intrusion detection and prevention system. It combines the benefits of signature-, protocol-, and anomaly-based inspection methods to deliver flexible protection from malware attacks. Snort gained notoriety for being able to accurately detect threats at high speeds.

    Block More Intrusions
    Stop new and unknown attacks with signature-based and signature-less intrusion prevention systems. Signature-less intrusion detection finds malicious network traffic and stops attacks where no signatures exist.

    Unify Virtual and Physical Security
    Support network virtualization across private and public cloud platforms to scale security and evolve with changing IT dynamics.

    Maximize Security and Performance
    Scale hardware performance to speeds up to 100 Gbps and leverage data from multiple products.

    Sample Customers
    CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
    Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
    Top Industries
    REVIEWERS
    Computer Software Company27%
    Financial Services Firm18%
    Comms Service Provider18%
    Individual & Family Service9%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Government9%
    Financial Services Firm8%
    Comms Service Provider7%
    VISITORS READING REVIEWS
    Computer Software Company19%
    Government10%
    Financial Services Firm10%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business22%
    Midsize Enterprise39%
    Large Enterprise39%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise13%
    Large Enterprise62%
    REVIEWERS
    Small Business27%
    Midsize Enterprise40%
    Large Enterprise33%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise12%
    Large Enterprise68%
    Buyer's Guide
    Cisco Sourcefire SNORT vs. Trellix Intrusion Prevention System
    May 2024
    Find out what your peers are saying about Cisco Sourcefire SNORT vs. Trellix Intrusion Prevention System and other solutions. Updated: May 2024.
    772,679 professionals have used our research since 2012.

    Cisco Sourcefire SNORT is ranked 11th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Trellix Intrusion Prevention System is ranked 14th in Intrusion Detection and Prevention Software (IDPS) with 14 reviews. Cisco Sourcefire SNORT is rated 7.6, while Trellix Intrusion Prevention System is rated 8.4. The top reviewer of Cisco Sourcefire SNORT writes "An IPS solution for security and protection but lacks stability". On the other hand, the top reviewer of Trellix Intrusion Prevention System writes "Protects from attacks in real-time and provides accurate threat intelligence updates". Cisco Sourcefire SNORT is most compared with Fortinet FortiGate IPS, Cisco NGIPS, Check Point IPS, Palo Alto Networks Advanced Threat Prevention and Cisco Secure Network Analytics, whereas Trellix Intrusion Prevention System is most compared with Trend Micro TippingPoint Threat Protection System, Palo Alto Networks Advanced Threat Prevention, Cisco NGIPS, Check Point IPS and ExtraHop Reveal(x). See our Cisco Sourcefire SNORT vs. Trellix Intrusion Prevention System report.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.