Snort

RATING:

4.4

(10)
Overview

About Snort

Snort is an IPS (Intrusion Prevention System) which is configurable for both business and personal use. Matching rules and patterns trigger security alerts for users when detecting malicious network activity, Snort can be used for packet sniffing, packet logging (e.g network traffic debugging), and as a full-blown IPS. Snort is capable of real-time traffic analysis and protects users from bad traffic, spam, phishing documents and malicious software. With Snort, users have access to 200 plugins, shared configuration and attribute tables, support for multiple packet-processing threads, rule parser, syntax and remarks, performanc emonitors and more.

Snort Pricing

Personal $29.99 one year subscription Business $399 per sensor one year subscription Integrators - contact Cisco for custom pricing.

Starting price: 

$29.99 

Free trial: 

Not Available

Free version: 

Not Available

Snort Reviews

Overall Rating

4.4

Ratings Breakdown

Secondary Ratings

Ease-of-use

4

Customer Support

4.5

Value for money

4

Functionality

4.5

Most Helpful Reviews for Snort

10 Reviews

User Profile

Gustavo Adolfo

Verified reviewer

Computer Networking, 501-1,000 employees

Used weekly for less than 12 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

4

VALUE FOR MONEY

4

CUSTOMER SUPPORT

5

FUNCTIONALITY

4

Reviewed May 2019

Great software detection for intrusions

I really enjoy the time that I've using Snort because the support and the purpose of It was accomplished. This is a great tool for every people that need to keep their network protected

PROS

Snort is a really powerfull software to detect intrusions in your network. With the rules you can easy keep your network protected and you can monitor all traffic in order to know when an intrusion was blocked. The customer support of Snort is really good and they always help customers to find a rules updates or repot a vulnerability. It is really easy to use.

CONS

The main con that I could found is that they need more time to publish the fixed for the vulnerabilities than another competitors in the market.

User Profile

Luisa Fernanda

Verified reviewer

Oil & Energy, 1,001-5,000 employees

Used weekly for less than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

4

VALUE FOR MONEY

3

CUSTOMER SUPPORT

5

FUNCTIONALITY

4

Reviewed June 2019

A good integration in a secured Network

I really liked how Snort works and the benefits that the software gave to me. I could recommend It to every people that needs to block internet traffic or avoid an attack because with the signatures of Snort the network will be secured.

PROS

i've been using this software in firepower appliances for more than 1 year and I really like how Snort works in pro of keep the network secured. I really like that you can send a feedback about an attack and in the next update they add a rule to prevent It. The support is very good and every time they helped me to solve my doubts. I can create a rules to be sure than the network is secured and I can dothis with a lot of parameters like IP, Port, secure zone, interface, URL and geolocation. This is a really good IDS and I like the integration with the firepower devices.

CONS

The worst thing of Snort is the usage of the data bases. This DB is susceptible to a corruption, and when this happens you need to reimage the device. This is something that their support needs to have fixed because the DB should be more stable. When you re-image one device you will lost all configuration and if you don't have a buckup you'll be done.

Gilad

Computer Software, 5,001-10,000 employees

Used weekly for less than 12 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

3

EASE OF USE

4

VALUE FOR MONEY

3

CUSTOMER SUPPORT

3

FUNCTIONALITY

5

Reviewed April 2019

IPS/IDS standardization

This product helped us implementing IPS/IDS faster.

PROS

This implementation works pretty good providing signatures updates (using Talos) and some great logging capabilities (using Syslog).

CONS

This product is not exactly stable and requires some more maintenance from Cisco - we wouldn't be using it if we had more spare time.

Anonymous

10,000+ employees

Used daily for more than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

4

VALUE FOR MONEY

5

CUSTOMER SUPPORT

4

FUNCTIONALITY

5

Reviewed April 2019

Cisco buying Sourcefire (snort) was a great move

Love Snort! Thankful it lives on and is just getting better under cisco

PROS

Cisco's firepower services based off Snort are all the best things about Snort backed by a best in business solution provider like Cisco. Flexible and customizable to a fault and still, after all these years one of the best IDPS solutions on the market. What isn't to like?

CONS

Largely remediated in their latest updates, combineing Snort + ASA on the FTD codebase was initially VERY buggy. The latest updates from Cisco within the last 6months have turned it into a much more stable beast.

Anonymous

11-50 employees

Used daily for less than 12 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

4

VALUE FOR MONEY

4

CUSTOMER SUPPORT

4

FUNCTIONALITY

4

Reviewed September 2018

Snort the best IDS

I have been using this product for the last 1 year.And I like the way it is being integrated. I already recommended this product to my colleagues.Thank you for the team who are behind this product.

PROS

Snort is the best IDS I have used.It provides data protection and prevent intrusion very effectively.The main thing I felt is the easiness of this product.It is very easy to install and use.And also it is secure and cost effective.Customized rules make it easy to use.

CONS

Even if installation and basic set up is easy, things become difficult when we go depth. To include threats specific to our environment is little difficult.

Thomas

Computer Games, 2-10 employees

Used daily for less than 6 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

4

VALUE FOR MONEY

4

CUSTOMER SUPPORT

4

FUNCTIONALITY

3

Reviewed April 2019

Snort is great detection tool

We choose Snort because it suite to our needs and can be used free with community rules updates.

PROS

Snort is great detection tool for your infrastructure and basically it can analyse your network traffic and detect suspicious behavior. This software can save your money at the end, because you find out very quickly what is happenning in your network stack.

CONS

If you want update Snort rules definition, you have to do manually or via your script. As I know, there is no way how to do it via RPM/DEB packages or with BIN :-/ There are community rules (free) and also non-free rules.

Tina

Used less than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

5

VALUE FOR MONEY

5

CUSTOMER SUPPORT

5

FUNCTIONALITY

5

Reviewed January 2018

Reliable IPS

PROS

I'm a huge fan of Cisco and their solutions. Snort is another great add-on to monitor traffic analysis. I always suggest training or working alongside your Cisco partner to ensure you're getting the full benefit of your solution.

Matthew

Used monthly for more than 2 years

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

5

EASE OF USE

5

VALUE FOR MONEY

5

CUSTOMER SUPPORT

5

FUNCTIONALITY

5

Reviewed June 2018

A great IDS / IPS solution

PROS

Snort is a staple in the security field. It is very aggressive in intrusion prevention and detection. This is a must have for compliance.

CONS

Since snort is open source and free, it isn't as clean as it could be. There are other solutions out there that look better.

Anonymous

51-200 employees

Used monthly for less than 12 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

3

VALUE FOR MONEY

5

CUSTOMER SUPPORT

4

FUNCTIONALITY

3

Reviewed March 2019

Awesome Engine

I use it as an engine on Firepower NGFW.

PROS

Their database about every single virus, malware or even any kind of path for security breaches are up to date. I love it !

CONS

Support is not good, to much time by phone, deficient responsive team.

Anonymous

10,000+ employees

Used less than 6 months

Review Source: Capterra
This reviewer was invited by us to submit an honest review and offered a nominal incentive as a thank you.

OVERALL RATING:

4

EASE OF USE

4

FUNCTIONALITY

5

Reviewed November 2018

Snort- a great network tool

PROS

A great IDS tool on your network. It's decently user friendly if your used to code and analysis. Linux and Windows friendly.

CONS

Nothing really, Cisco hasn't changed much since it bought it

10 Reviews