Amazon GuardDuty vs Cisco IPS Sensor (Discontinued)

Likelihood to Recommend

In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

IPS sensors are more suited for companies that do not have visibility into their network with third-party analyzing tools. Scenarios would be to place IPS sensors at the perimeter firewalls mainly. IPS sensors are less appropriate for companies that have third-party analyzing tools that will mitigate vulnerabilities and malicious traffic and activities already.

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 2 answers on this topic

Pros

Monitors outgoing connections from AWS resources to known malicious hosts.
Monitors incoming connection to AWS resources from known malicious hosts.
Integrates with other centralized logging solutions.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Detects threats
Included in other Cisco tools
Feeds for automatic actualization

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

Cons

Does not have the ability to add any custom monitors.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

The web GUI is somewhat slow.
Sometimes difficult to adjust policies.
Fail open feature may not work properly all the time.

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 2 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

Support Rating

No score

No answers yet

No answers on this topic

Cisco IPS Sensor (Discontinued) 9.0

Based on 2 answers

Cisco TAC has been great at helping with configurations and issues that may arise

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 2 answers on this topic

Alternatives Considered

No answers on this topic

HP and Fortinet were in the PoC, too, but we decided to use Cisco IPS because it integrated with the rest of our Cisco equipment better. It was well integrated in the ACI datacenter, too. Performance and actual integration work with Cisco. Most of the workers at our company are familiar with Cisco.

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

Return on Investment

GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Recognize virus outbreaks.
Find unauthorized administrative traffic.
Customization needs to be done to reach your objective.

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

Amazon GuardDuty vs Cisco IPS Sensor (Discontinued)