We performed a comparison between Cisco Sourcefire SNORT and Fortinet FortiOS based on real PeerSpot user reviews.
Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS)."The whole solution is very good, and stable."
"The solution is stable."
"The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions."
"The most valuable feature is the visibility that we have across the virtual environment."
"It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings."
"Cisco technical support is unbeatable. It offers a premium service every time."
"For ten to 12 years it has been quite secure."
"Has a very simple OS and a good price point."
"The main features I find useful are intrusion prevention and web filtering. Additionally, the solution is easy to manage."
"I personally think the site-to-site VPN is the most useful feature. A lot of firewalls have that, but to me, that's one of the features that's essential."
"We found the initial setup to be straightforward."
"The most important feature of Fortinet FortiOS is the IPS."
"The fact that is it has a UTM, a Unified Threat Management feature is the most valuable aspect for us. It's an all in one product. It's like our one-stop-shop to the internet."
"The classification of the websites is helpful."
"The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment."
"I would like to have analytics included in the suite."
"The customization of the rules can be simplified."
"Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience."
"I don't think this solution is a time-based control system, because one cannot filter traffic based on time."
"The main dashboard of Cisco Sourcefire SNORT could improve."
"Performance needs improvement."
"The cloud can be improved."
"It would be great if they can push the Microsoft updates through Fortinet OS and provide a centralized patch management system. They should also include the data loss prevention (DLP) and data leakage prevention features. They could also add network monitoring more effectively."
"Real-time threat monitoring is not there."
"I want to see a better integration or a better integration with the endpoint protection or with EDR with the security life cycle."
"It would be better if AWS instances were available. If I want to upgrade from T2.small to T2.medium, it should be available rather than having a big instance and paying a lot of money for that. The issue is that we had deployed in AWS Cloud, and we were using a very small instance. Recently we wanted to move in-house and deploy it on the big instance because it was struggling with the RAM. If we use T2.small, we cannot upgrade it to the T2.medium. It has predefined instances in the marketplace with a lot of cost differences. If I can increase the RAM, I have to choose the T3.large instance. If I'm paying $270 for the small instance, I have to pay more than double the cost for T3.large. It is about $850, and this is not good. So, it would be better if it was cheaper. I think both AWS and Fortinet should think about that. They should provide it on lower instances as well. If I want to upgrade it from T2.small to T2.medium, it should be available, but it's a problem."
"The solution needs improvement with DDoS protection."
"Right now, we have to contend with CLI. We'd like it to be easier. We need the features to be in a UI."
"FortiOS could provide a more detailed analysis of the network and connected devices."
"The complexity of the VPNs should be improved."
Cisco Sourcefire SNORT is ranked 13th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Fortinet FortiOS is ranked 15th in Firewalls with 73 reviews. Cisco Sourcefire SNORT is rated 7.6, while Fortinet FortiOS is rated 8.4. The top reviewer of Cisco Sourcefire SNORT writes "An IPS solution for security and protection but lacks stability". On the other hand, the top reviewer of Fortinet FortiOS writes "Provides effective filtering features, good stability but initial setup is moderately challenging". Cisco Sourcefire SNORT is most compared with Fortinet FortiGate IPS, Cisco NGIPS, Check Point IPS, Palo Alto Networks Advanced Threat Prevention and Darktrace, whereas Fortinet FortiOS is most compared with Fortinet FortiGate, Fortinet FortiManager, Fortinet FortiWeb, Fortinet FortiGate-VM and Infoblox Advanced DNS Protection.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
