- Signature accuracy
- Vulnerability database
- The flexibility to apply the security policies in ways to best suit the environment
The accuracy of the signatures and the data gathered within the events, along with the firesight and vulnerability data greatly reduce the amount of time it takes to isolate a problem and contain it.
None, time to deploy per appliance is very short, and devices are production ready very quickly.
None, we have had great results with the 8000 and 7000 series sensors.
None, we purchase units that can handle roughly double the bandwidth of the network segments we are monitoring to cover future growth, and additional inspection overhead presented by additional features.
5 out of 5Technical Support:
5 out of 5
I have used ISS and Cisco 4200 series IPS appliances.
The switch to sourcefire/cisco 3d systems was made to take advantage of throughput of the hardware resulting in lower total data center footprint (a few larger sensors in place of over a dozen smaller) and the accuracy of the detection capabilities and speed which emerging threats are addressed in new signature releases.
Initial setup was very straightforward, anyone with a firm knowledge of their network, and some light unix/linux experience will find it user friendly.
All deployments were done by on site FTE's
Cisco, ISS, Tipping point
I've been working with Sourcefire (pre Cisco) for several years and have done several large scale deployments of the product for a couple of financial institutions, from product selection, procurement, network design, all the way down to build/rack and stack, and being a security event end user.