We performed a comparison between Cisco Sourcefire SNORT and Palo Alto Networks Advanced Threat Prevention based on real PeerSpot user reviews.
Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
"The URL filtering is very good and you can create a group for customized URLs."
"The most valuable feature is the visibility that we have across the virtual environment."
"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings."
"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates."
"Cisco technical support is unbeatable. It offers a premium service every time."
"It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions."
"The most valuable feature of Palo Alto Threat Prevention for our company is the next generation firewall."
"The most valuable features are that it's user-friendly, has interesting features, URL filtering, and threat prevention."
"The initial setup was straightforward. It's quite easy. Deployment took one to two weeks."
"The most valuable features are the simplicity, transparency, and overall ease of management."
"I like the solution's interface."
"The sandboxing tools offer great prevention for cloud feeds."
"We are currently using the URL filtering feature, which is the most popular."
"The stability of Palo Alto Networks Threat Prevention is good."
"While the alerts they offer are good, it could improve it in the sense that they should be more detailed to make the alerts more useful to us in general. Sometimes the solution will offer up false positives. Due to the fact that the alerts aren't detailed, we have to go dig around to see why is it being blocked. The solution would be infinitely better if there was just a bit more detail in the alert information and logging we receive."
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."
"The main dashboard of Cisco Sourcefire SNORT could improve."
"The implementation could be a bit easier."
"I did not experience any pain points that required improvement. Maybe a couple of false-positives, but that's about it."
"There are problems setting up VPNs for some regions."
"With the next release, I would like to see some PBR, so that you can do the configuration with the features."
"The customization of the rules can be simplified."
"The initial setup is complex."
"Palo Alto Networks Threat Prevention could improve the commercial offing. Other solutions, such as Fortinet provide better commercial features."
"The price of licenses should be lowered to make it less costly to scale our solution."
"Right now we are focusing on email. If Palo Alto can increase the features related to email filtering and the new malware, it would help us protect our systems."
"It's not so easy to set up a test environment, because it's not so easy to get the test license. The vendor only gives you 90 days for a test license; it's a tough license to get."
"Sometimes when you want to group a set of ports, and communicate with Palo Alto, you cannot group TCP and UDP ports together. This needs to be adjusted."
"The installation was complicated."
"The technology firewall anomaly network could stand improvement."
More Palo Alto Networks Advanced Threat Prevention Pricing and Cost Advice →
Cisco Sourcefire SNORT is ranked 13th in Intrusion Detection and Prevention Software (IDPS) with 18 reviews while Palo Alto Networks Advanced Threat Prevention is ranked 6th in Intrusion Detection and Prevention Software (IDPS) with 24 reviews. Cisco Sourcefire SNORT is rated 7.6, while Palo Alto Networks Advanced Threat Prevention is rated 8.8. The top reviewer of Cisco Sourcefire SNORT writes "An IPS solution for security and protection but lacks stability". On the other hand, the top reviewer of Palo Alto Networks Advanced Threat Prevention writes "A good amount of granularity and advanced URL filtering capabilities". Cisco Sourcefire SNORT is most compared with Fortinet FortiGate IPS, Check Point IPS, Cisco NGIPS, Darktrace and Trend Micro TippingPoint Threat Protection System, whereas Palo Alto Networks Advanced Threat Prevention is most compared with Check Point IPS, Fortinet FortiGate IPS, Arista NDR, Forcepoint Next Generation Firewall and Palo Alto Networks URL Filtering with PAN-DB. See our Cisco Sourcefire SNORT vs. Palo Alto Networks Advanced Threat Prevention report.
See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
