Cisco Secure IPS vs. OSSEC

For scenarios, I described before, like when you have centralized administration and several locations, and the majority of those locations have the same size/requirements, Firepower is well suited. Easy to maintain, relatively cheap to buy. For scenarios too small, like small sales offices like ours, I don't think Firepower could fit, basically because you'll need to invest a certain amount of money to buy, license and deploy.

Incentivized

• You will get more visibility in your network.
• Very fast performance
• Easy to detect and prevent the suspicious activities.
• Easy to export report[s]
• Daily security updates
• Efficacy
• Very low cost
• Cisco Threat Intelligence Director
• A lot of Cisco documentation available

Incentivized

• The performance is not always as good as you'd want. Some operations take the better part of a minute (drilling down in traffics analysis).
• Deploying or upgrading the FirePower software to the ASA firewalls takes a long time and deployment might fail without a clear reason.

Incentivized

We are in the middle of outsourcing and may not be able to keep this product.

Incentivized

Very easy to navigate GUI in the FMC and very effective at performing the intending duties.

Incentivized

We didn't have any major issues that let us need support. Only, for this reason, I think Cisco Firepower deserves the rating. Even for small issues, the partner that helped us during the project could solve it quickly. There are also tons of documents and other online resources to help maintain, administer and support the product.

Incentivized

We were using the Suricate IDS but it is very difficult to configure and manage so we replace it with Cisco Secure IPS. It gives us all the advanced security features and more control over our network.

Incentivized

• Has made it much easier to determine when incidents have occurred
• Has been effective in reducing false positives and making solution management more efficient and cost effective

Incentivized