Amazon GuardDuty vs. Snort

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Amazon GuardDuty
Score 9.8 out of 10
N/A
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.N/A
Snort
Score 8.4 out of 10
N/A
Sourcefire developed Snort, an open source intrusion prevention system capable of real-time traffic analysis and packet logging. Snort was acquired (and is now supported) by Cisco in 2013.N/A
Pricing
Amazon GuardDutySnort
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Amazon GuardDutySnort
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Amazon GuardDutySnort
Top Pros

No answers on this topic

Top Cons

No answers on this topic

Best Alternatives
Amazon GuardDutySnort
Small Businesses
AlienVault USM
AlienVault USM
Score 7.9 out of 10
AlienVault USM
AlienVault USM
Score 7.9 out of 10
Medium-sized Companies
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Amazon GuardDutySnort
Likelihood to Recommend
10.0
(1 ratings)
8.1
(5 ratings)
User Testimonials
Amazon GuardDutySnort
Likelihood to Recommend
Amazon AWS
In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules.
Read full review
Cisco
If a colleague was looking to tighten down their network I can easily recommend Snort to them. It gives you some more peace of mind knowing that its always scanning traffic for malicious looking code. Even things your major firewalls and security hardware might miss, Snort has picked up. Its an easy recommendation for me.
Read full review
Pros
Amazon AWS
  • Monitors outgoing connections from AWS resources to known malicious hosts.
  • Monitors incoming connection to AWS resources from known malicious hosts.
  • Integrates with other centralized logging solutions.
Read full review
Cisco
  • IPS detection.
  • DoS detection.
  • Packet logging.
Read full review
Cons
Amazon AWS
  • Does not have the ability to add any custom monitors.
Read full review
Cisco
  • At times can be unstable with Cisco bugs, require frequent upgrading.
  • FTD images that are being pushed for ASAs are less efficient from an administration standpoint, no CLI.
Read full review
Alternatives Considered
Amazon AWS
No answers on this topic
Cisco
For our organization, the Cisco defense in depth concept works the best. While Cisco can be made to work with other vendors, we have found the best in depth protection by integrating Cisco products for maximum visibility. We had a Barracuda Web Filter, but it was difficult to maintain when you had limited scope on what you could block, so we created a whitelist only setup which required a lot of additional manpower. This wouldn't have covered new threats with DNS spoofing and the like. Sourcefire also integrated with our anti-malware platform (Cisco AMP) for even better visibility on what may be happening on the end users workstation. We are planning on adding in Cisco ISE to complete the approach and possibly stealthwatch to cover our bases in the future. The Palo Alto gear was interesting, but it was priced far out of our range.
Read full review
Return on Investment
Amazon AWS
  • GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage.
Read full review
Cisco
  • Being open source, ROI on free is hard to beat for something that works.
  • I believe it greatly enhances the security of my network.
Read full review
ScreenShots