Cisco IOS Security vs Nmap

• Authentication.
• Access lists.
• Port security.

Read full review

• NMap provides a very fast and a very thorough network "sweep" that allows you to quickly map out exactly what's on your network.
• NMap is highly configurable. The "canned" choices are very good in most instances, but using various switches and options, you can create a very specific scan and get exactly the results you're looking for.
• NMap is easy to use. Even a new administrator will be able to use the graphical version (Zenmap) with efficiency right away.

Read full review

• Cisco could provide an initial set up script for those are not used to the CLI (Command Line Interface). With that initial script, people could easily deploy the security features instead of having to learn how to use the commands.
• The web interface that Cisco provides with the routers, although it’s useful to set up the security features, it could also have some sort of tutorials to help people understand the main concepts of iOS security.
• You have to license iOS security separately from the main OS. For that reason, sometimes it tends to be a little expensive if you have a small business.

Read full review

• exporting, There's a serious lack of ability to export the information in a readable format to present to VPs and such. I always find myself doing a lot of data massaging to get it in a pretty format
• some scans can trigger sensitive IDS/IPS
• SYN scans can be particularly aggressive and cause problems on remote systems.

Read full review

• Cisco iOS security helped our business deploy a relatively safe solution for a small amount of money.
• If you don’t have enough budget to invest in a robust and expensive firewall solution, you can safely use Cisco iOS security to protect your branch or remote office without compromise your network.
• Because Cisco iOS security uses a simple command-line based interface, you can deploy standardized scripts and keep the operational costs low.

Read full review

• Positive return as it's open-source (free) on all OS's.
• If a person is not used of the command line there are a ton of front ends that make it point-and-click so the learning curve is good. That cuts down on time and manpower.

Read full review