2019-07-02T06:57:00Z

What needs improvement with Cisco Sourcefire SNORT?


Please share with the community what you think needs improvement with Cisco Sourcefire SNORT.

What are its weaknesses? What would you like to see changed in a future version?

Guest
1010 Answers

author avatar
Top 10Real User

Performance needs improvement. If you compare Cisco Sourcefire with other products, it performs at the same level of compliance. For Cisco Sourcefire, it's not really horrible and it's not really the market and price-performance rate. The performance can be improved.

2020-04-13T06:27:00Z
author avatar
Top 10Real User

There are problems setting up VPNs for some regions. There are cases where they are permitted in Sourcefire but blocked in Check Point. There are some outside ports that are allowed by default but should not be. It would be helpful if a list of third-party services were listed so that the rules could be easily added. An example of this would be a ticket booking site. It would be in a list of services and selecting it would allow transactions with that site.

2020-01-12T12:02:00Z
author avatar
Top 10Real User

We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco. Sourcefire SNORT is very resource heavy in terms of CPU usage and memory consumption. Technical support has told us that this is related to bugs that have yet to be fixed.

2020-01-09T06:15:00Z
author avatar
Top 5LeaderboardReal User

To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team is working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have. Another issue where there's room for improvement is that sometimes I feel like the device is heavy. For example, we can use either the physical or virtual device. Most of the time if you are using the virtual device, you need to have very good RAM. If, for example, we don't have a good RAM in the environment, the device will be kind of heavy. It will not run as quick as you want. Most of the time we need a minimum of 4GB of RAM. Maybe they should add the possibility that we could use 2GB of RAM so that the device can be more lightweight. Those are all small things, but if they can improve them it would be great. Of course, everything is dependent on the process running behind it. I don't know if they have the possibility to make these changes, but if they can, it would be great.

2019-11-26T05:43:00Z
author avatar
Top 5Real User

I don't think this solution is a time-based control system, because one cannot filter traffic based on time.

2019-11-19T06:35:00Z
author avatar
Top 20Real User

The price of this solution could be improved. If the price is brought down then everybody will be happy. I would like to see a cloud-based version of this solution.

2019-10-13T05:49:00Z
author avatar
Top 5LeaderboardReal User

This is a good solution, but some others may have some advantages. For example, Palo Alto has more useful and suitable application abilities. This solution has a better Firepower but the functionalities are not as good. With the next release, I would like to see some PBR, so that you can do the configuration with the features.

2019-10-06T16:38:00Z
author avatar
Real User

This solution needs to be more customizable. The customization of the rules can be simplified.

2019-08-30T04:51:00Z
author avatar
Real User

The pricing needs to be improved. We have lots of low-budget clients around us. Budget constraints are always a deterrent in our market.

2019-08-28T09:52:00Z
author avatar
Real User

One addition to the current product that I think would be helpful is if it was integrated into the Cisco DNA Center. Between their security side, their routing, and the wireless side, they kind of have a gap. If they could bridge the gap and integrate all those in the DNA Center, I think that would be a good goal and something useful to users.

2019-07-02T06:57:00Z
Learn what your peers think about Cisco Sourcefire SNORT. Get advice and tips from experienced pros sharing their opinions. Updated: April 2020.
442,141 professionals have used our research since 2012.