The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT; being able to log and store it in a file allows you to push it to a centralized repository.
Cisco Sourcefire SNORT delivers robust intrusion detection and prevention with high threat protection and low false positives. Despite its seamless integration with Cisco Stealthwatch and ISE, pricing and ease of rule customization need improvement, especially for budget-conscious buyers. Setting up VPNs and managing traffic blocking can be challenging. Cisco's technical support remains reliable, but integration enhancements could refine the administrative experience. Cost-effectiveness remains a strength against competitors like Palo Alto and Fortinet.
