Cisco Sourcefire SNORT vs Dragos comparison

"The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."

"The logging is mainly what I consider one of the best features with Cisco Sourcefire SNORT; being able to log and store it in a file allows you to push it to a centralized repository."

"It has a huge rate of protection. It's has a low level of positives and a huge rate of threat protection. It's easy to deploy and easy to implement. It has an incredible price rate compared to similar solutions."

"Cisco technical support is unbeatable. It offers a premium service every time."

"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."

"The whole solution is very good, and stable."

"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."

"The most valuable feature of this solution is the filtering."

"Dragos is more expensive than other vendors, probably about fifteen to twenty percent more, but it is generally worth the investment."

"Dragos' best features are that they are more focused towards Incident Response, so they have a dedicated playbook in their platform, making it easier for anyone investigating any incidents to investigate the alerts."

"The main dashboard of Cisco Sourcefire SNORT could improve."

"The implementation could be a bit easier."

"I want to see a better dashboard for the product. The dashboard can be a bit modified or enhanced."

"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."

"If the price is brought down then everybody will be happy."

"Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience."

"The cloud can be improved."

"There are problems setting up VPNs for some regions."

"Dragos could improve its asset visibility and discovery tools, as the competitor Claroty has better options in this area."

"I think Dragos can offer more flexibility similar to Nozomi and more visibility into the assets, nodes, and links, which would make it more competitive in the future."

"We have a three-year license for this solution."

"The cost is per port and can be expensive but it does include training and support for three years."

"Licensing for this solution is paid on a yearly basis."

"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."

"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."