Amazon GuardDuty vs Cisco Secure IPS

• Monitors outgoing connections from AWS resources to known malicious hosts.
• Monitors incoming connection to AWS resources from known malicious hosts.
• Integrates with other centralized logging solutions.

Read full review

• The option to deploy it as a virtual machine in a UCS-E inside a Cisco Router is something to consider a lot. It simplifies a lot the deployment in places where you need to optimize resources and keep things simple. It also saves some money on unnecessary hardware.
• Having the most complete license, we can have in the same box IPS, inspection for malware and URL filtering. As Cisco uses Talos Intelligence network to mitigate and evaluate risks, having this complete set of security features turns the box into a powerful resource to protect our remote locations. Considering the hyper-connected business we have today, it's almost impossible to think that we can run a business without this kind of protection.
• The integration between Firepower NGIPS and other products, like Cisco ISE and Splunk, is also a key feature for this solution. In both cases, you can integrate the product to have the best of both. As a security appliance, it's very important for us to have all the logs centralized in Splunk and this is done simply connecting FMC (Firepower Management Console) to the Splunk collector.

Read full review

• Does not have the ability to add any custom monitors.

Read full review

• Wish additional modules were included such as FireAmp.
• Wish it was easier to include customized signatures if needed. Required to know how to code with Snort in order to add real customization.

Read full review

• GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage.

Read full review

• Has made it much easier to determine when incidents have occurred
• Has been effective in reducing false positives and making solution management more efficient and cost effective

Read full review