Try our new research platform with insights from 80,000+ expert users

Cisco Sourcefire SNORT vs Trend Micro Deep Discovery comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Sourcefire SNORT
Ranking in Intrusion Detection and Prevention Software (IDPS)
14th
Average Rating
7.6
Reviews Sentiment
6.8
Number of Reviews
19
Ranking in other categories
No ranking in other categories
Trend Micro Deep Discovery
Ranking in Intrusion Detection and Prevention Software (IDPS)
5th
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
26
Ranking in other categories
Advanced Threat Protection (ATP) (19th), Network Detection and Response (NDR) (6th)
 

Mindshare comparison

As of May 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cisco Sourcefire SNORT is 3.5%, down from 3.8% compared to the previous year. The mindshare of Trend Micro Deep Discovery is 6.0%, down from 7.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Jack Poon - PeerSpot reviewer
Offers ease of setup and good documentation
When it comes to the product's deployment phase, we have a lot of vendor support. We have a lot of skills here in Hong Kong. Our company doesn't find any problem deploying Cisco solutions. The solution is deployed on an on-premises version. Speaking about the time required to deploy the solution, I would say that we have quite a lot of previous experience with deploying Cisco products. We have our company's standard design document, which we need to follow. We have a standard testing procedure for all those features. We just take out some appropriate parts and then compile them into one document for an individual project. It is actually quite easy for us to do the documentation, so it just takes one or two hours, and we can do the implementation because all the materials and testing procedures are already in our company standard documents, so it is not that difficult for us.
Vladimir Alexandrov - PeerSpot reviewer
Enhanced threat detection through superior sandboxing capabilities with competitive pricing
With Trend Micro Deep Discovery, our enterprise clients can identify forgotten or unmanaged network segments, thereby mitigating unexpected network actions such as outdated antivirus software operations. When under attack, such as with ransomware, it allows us to identify the attack vector and disable it. It also assists in security audits required to prove certain network security measures.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is stable."
"It is quite an intelligent product."
"The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that."
"It simplifies the configuration process by offering pre-defined base configurations, including security and connectivity settings."
"In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well."
"The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates."
"The tool's most valuable feature is threat detection, which is important because we have multiple layers not only in Cisco."
"The most valuable features of Cisco Sourcefire SNORT are the dashboard for monitoring events."
"The performance and stability are great."
"Sandboxing gives us a chance to identify malicious behavior, especially for unknown vulnerabilities, although it's rarely needed as a last resort after all other security measures have failed."
"The product is very easy to install."
"Initial setup is easy. It can be done by yourself."
"The solution has extension-based features that help it to analyze the environment. The environment can have different platforms like Windows, Linux, and Mac. The tool will give a report which can confirm the analysis of the issues. You can also get clear information on threats or suspicious files."
"The tool's most valuable feature is its collaboration with other products. Integrating with other security products was simple and easy."
"The most valuable feature is that the user can customize images of virtual machines in the sandbox functionality. The other vendors only use images that were created by the vendor but not the customer, end-user or partner. This helps to detect advanced threats and attacks."
"Generally speaking, it just gives us a broad understanding of exactly what kind of threats occur. The submission point, analyzing point, and virtualization are within the environment that it supports. It helped us to improve our security levels and protect our internal network from any threats outside."
 

Cons

"The main dashboard of Cisco Sourcefire SNORT could improve."
"There are problems setting up VPNs for some regions."
"With the next release, I would like to see some PBR, so that you can do the configuration with the features."
"The customization of the rules can be simplified."
"I don't think this solution is a time-based control system, because one cannot filter traffic based on time."
"Integration with other components — even Cisco's own products — can be enhanced to improve administrative experience."
"Performance needs improvement."
"To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have."
"Trend Micro can improve the pricing in general. There is nothing else they can add or improve in the solution."
"The scalability is sometimes limited."
"The price range is a little high."
"The product's scalability feature needs to be improved, as it is an area in the product with certain shortcomings."
"The tool's configuration can be made easier."
"I would like to see integration with third-party tools to improve the visibility of the dashboards."
"Trend Micro Deep Discovery is a very expensive solution, making it very hard to sell."
"I would like the ability to analyze all files in our internal network, at the same time on different operating systems. Not just three of them, but as many as possible."
 

Pricing and Cost Advice

"I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices."
"If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five."
"The cost is per port and can be expensive but it does include training and support for three years."
"Licensing for this solution is paid on a yearly basis."
"We have a three-year license for this solution."
"The pricing is okay for some, and sometimes, some people find it expensive."
"Overall, the price is good."
"The tool's licensing costs are yearly. There are no additional costs associated with the product."
"Its price is fine, but Trend Micro can improve the pricing in general. It is a hardware solution. It is based on the number of nodes, and according to the number of nodes, clients decide which box they should acquire. They have to renew their license every year. It is subscription-based."
"The licensing cost is a bit pricey. We pay a yearly subscription."
"The tool’s licensing costs depend on the customers."
"The price of the solution is lower compared to the competition."
"Trend Micro Deep Discovery is quite expensive compared to other endpoint security products."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Financial Services Firm
11%
Government
8%
University
7%
Computer Software Company
16%
Financial Services Firm
11%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cisco Sourcefire SNORT?
The product is inexpensive compared to leading brands such as Palo Alto or Fortinet.
What is your experience regarding pricing and costs for Cisco Sourcefire SNORT?
If one is an extremely expensive product, and ten is cheap, I rate the tool's price as a five. There are some other tools in the market that are more expensive than Cisco. There are no additional c...
What needs improvement with Cisco Sourcefire SNORT?
Cisco offers the Cisco DNA Center, which is a source that provides crucial information for us to monitor performance, and see whether there is any trouble. We are using Cisco DNA center, but again,...
What do you like most about Trend Micro Deep Discovery?
The tool's most valuable feature is its collaboration with other products. Integrating with other security products was simple and easy.
What is your experience regarding pricing and costs for Trend Micro Deep Discovery?
Trend Micro Deep Discovery is expensive compared to regular antivirus solutions, though it is competitively priced compared to similar products with advanced features.
What needs improvement with Trend Micro Deep Discovery?
The main issue is its high cost, which makes it difficult to sell. The technical support has declined in quality over the years. It is necessary for highly qualified partners to get better pre-qual...
 

Also Known As

Sourcefire SNORT
Trend Micro Deep Discovery Inspector, Trend Micro Deep Discovery Analyzer
 

Overview

 

Sample Customers

CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia
Allied Telesis, Atma Jaya Catholic University of Indonesia, Babou, Blekinge County Council, Delacour, Hiroshima Prefectural Government, Live Nation Entertainment Inc., Mazda Motor Logistics Europe, McGill University Health Centre, Mikuni Corporation, OKWAVE, Sinar Mas Land, SWICA, UTOC Corporation
Find out what your peers are saying about Cisco Sourcefire SNORT vs. Trend Micro Deep Discovery and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.