We performed a comparison between Cisco Sourcefire SNORT and Trend Micro Deep Discovery based on real PeerSpot user reviews.
Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"The URL filtering is very good and you can create a group for customized URLs."
"Cisco technical support is unbeatable. It offers a premium service every time."
"The whole solution is very good, and stable."
"The product is inexpensive compared to leading brands such as Palo Alto or Fortinet."
"The most valuable feature of this solution is the filtering."
"Solid intrusion detection and prevention that scales easily in very large environments."
"It is a very good solution. It is very light, and it is quite quick to figure out the problem in your network."
"The most valuable features are monitoring for advanced persistent threats, the system runs in a sandbox allowing for effective zero-day exploits management, and the Inspector has a built-in sandbox."
"The platform provides all essential features for discovery and administration."
"Generally speaking, it just gives us a broad understanding of exactly what kind of threats occur. The submission point, analyzing point, and virtualization are within the environment that it supports. It helped us to improve our security levels and protect our internal network from any threats outside."
"Deep Discovery is scalable and compatible with other products. It's crucial to have that compatibility because it's an integral part of our security solution. It integrates smoothly. The interface is user-friendly, so administration is simple."
"The HTML file sandboxing is very good."
"I like the sales operations testing. and support."
"Initial setup is easy. It can be done by yourself."
"There are problems setting up VPNs for some regions."
"While the alerts they offer are good, it could improve it in the sense that they should be more detailed to make the alerts more useful to us in general. Sometimes the solution will offer up false positives. Due to the fact that the alerts aren't detailed, we have to go dig around to see why is it being blocked. The solution would be infinitely better if there was just a bit more detail in the alert information and logging we receive."
"We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco."
"The pricing needs to be improved. We have lots of low-budget clients around us. Budget constraints are always a deterrent in our market."
"The customization of the rules can be simplified."
"The implementation could be a bit easier."
"The main dashboard of Cisco Sourcefire SNORT could improve."
"The initial setup is a little difficult compared to other products in the market. It depends on the environment. If we are doing any migration, it might take months in a brown-field environment."
"Deep Discovery is easy to manage, but there is still room for improvement on the administration and operations side. Competing products have a cleaner interface that makes it easier to manage their products. Trend Micro offers a lot of features in one product suite, but it can be unwieldy for the customer to manage all that with a single interface."
"The scalability is sometimes limited."
"The solution could be more secure."
"Trend Micro Deep Discovery's technical support could be improved, and it could be made more active."
"I would like to see integration with third-party tools to improve the visibility of the dashboards."
"The solution needs to be able to integrate better with third-party infrastructure."
"The stability of the solution could be improved. It should be 100% stable, but it's not there right now."
"Trend Micro Deep Discovery is a very expensive solution, making it very hard to sell."
Cisco Sourcefire SNORT is ranked 15th in Intrusion Detection and Prevention Software (IDPS) with 17 reviews while Trend Micro Deep Discovery is ranked 9th in Intrusion Detection and Prevention Software (IDPS) with 21 reviews. Cisco Sourcefire SNORT is rated 7.6, while Trend Micro Deep Discovery is rated 8.4. The top reviewer of Cisco Sourcefire SNORT writes "The solution provides visibility across virtual environments, protects internal networks, and is scalable to meet organizational needs". On the other hand, the top reviewer of Trend Micro Deep Discovery writes "A physical or virtual network appliance designed to quickly detect advanced malware". Cisco Sourcefire SNORT is most compared with Fortinet FortiGate IPS, Cisco NGIPS, Check Point IPS, Palo Alto Networks Advanced Threat Prevention and Darktrace, whereas Trend Micro Deep Discovery is most compared with Darktrace, Trend Micro TippingPoint Threat Protection System, Arista NDR, Vectra AI and Palo Alto Networks Advanced Threat Prevention. See our Cisco Sourcefire SNORT vs. Trend Micro Deep Discovery report.
See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.