Cisco Secure IPS (NGIPS) vs Rapid7 InsightVM (Nexpose)

Likelihood to Recommend

For scenarios, I described before, like when you have centralized administration and several locations, and the majority of those locations have the same size/requirements, Firepower is well suited. Easy to maintain, relatively cheap to buy. For scenarios too small, like small sales offices like ours, I don't think Firepower could fit, basically because you'll need to invest a certain amount of money to buy, license and deploy.

Read full review

Eduardo Viero

IT Infrastructure Specialist

RANDON S.AAutomotive, 5001-10,000 employees

View all 4 answers on this topic

Works well most of the time for even large enterprise organizations, but takes a lot of care and feeding to ensure it's running properly.
We have had several issues with 'ghost machines' not updating and continue to report on IP's with no devices attached.
Could use better filtering and reporting built-in and more customized options.

Read full review

Verified User

Analyst in Finance and Accounting

Financial Services Company, 1001-5000 employees

View all 7 answers on this topic

Pros

Low false positive rate as long as it is properly managed/tuned.
Easy to manage and configure with the GUI.
Support is great if assistance is needed.

Read full review

Marc Uydess

Technical Security Analyst

Nine West HoldingsRetail, 1001-5000 employees

View all 4 answers on this topic

Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities.
Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly.
It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature.

Read full review

Verified User

Consultant in Information Technology

Information Technology and Services Company, 51-200 employees

View all 7 answers on this topic

Cons

Fine tuning the Firepower policies is tedious and time consuming

Read full review

Jonathan Pauley

Sales Engineer

Advanced Technical Solutions, LLCInformation Technology and Services, 11-50 employees

View all 4 answers on this topic

In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have
We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there
Filtering capabilities aren't as good as its competitors

Read full review

Verified User

Engineer in Information Technology

Non-Profit Organization Management Company, 501-1000 employees

View all 7 answers on this topic

Likelihood to Renew

Cisco Secure IPS (NGIPS) 9.0

Based on 1 answer

We are in the middle of outsourcing and may not be able to keep this product.

Read full review

Marc Uydess

Technical Security Analyst

Nine West HoldingsRetail, 1001-5000 employees

View all 1 answers on this topic

No score

No answers yet

No answers on this topic

Usability

Cisco Secure IPS (NGIPS) 10.0

Based on 1 answer

Very easy to navigate GUI in the FMC and very effective at performing the intending duties.

Read full review

Jonathan Pauley

Sales Engineer

Advanced Technical Solutions, LLCInformation Technology and Services, 11-50 employees

View all 1 answers on this topic

No score

No answers yet

No answers on this topic

Support Rating

Cisco Secure IPS (NGIPS) 9.0

Based on 4 answers

We didn't have any major issues that let us need support. Only, for this reason, I think Cisco Firepower deserves the rating. Even for small issues, the partner that helped us during the project could solve it quickly. There are also tons of documents and other online resources to help maintain, administer and support the product.

Read full review

Eduardo Viero

IT Infrastructure Specialist

RANDON S.AAutomotive, 5001-10,000 employees

View all 4 answers on this topic

Rapid7 InsightVM (Nexpose) 7.3

Based on 4 answers

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Read full review

Verified User

Analyst in Finance and Accounting

Financial Services Company, 1001-5000 employees

View all 4 answers on this topic

Alternatives Considered

Cisco Firepower is as well positioned in the Gartner magic quadrant as the others I mentioned and not just because of that, but the product is really good, delivers what it's intended to deliver. For us, the main strategy is to simplify administration and operation and as we're a Cisco customer for several other products, our long term relationship gives us a competitive vantage to negotiate and have great deals. In summary: Cisco Firepower is a great product, can cost the same or less than competitors and it's made by a company we already know and trust.

Read full review

Eduardo Viero

IT Infrastructure Specialist

RANDON S.AAutomotive, 5001-10,000 employees

View all 4 answers on this topic

Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation

Read full review

Verified User

Analyst in Information Technology

Oil & Energy Company, 1001-5000 employees

View all 7 answers on this topic

Return on Investment

Good visibility into our traffic and automatic threat protection keeps our network and users safe.

Read full review

Wouter Hindriks

Technical Team Lead Network & Security

Missing Piece BVInformation Technology and Services, 11-50 employees

View all 4 answers on this topic

Can reduce time to patch most critical vulnerabilities
Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position
Easily provides the patch team with a work plan to enhance security more quickly

Read full review

Verified User

Manager in Information Technology

Maritime Company, 201-500 employees

View all 7 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Cisco Secure IPS (NGIPS) Editions & Modules

—

Additional Pricing Details

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Rapid7 InsightVM (Nexpose) Editions & Modules

Edition

insightIDR	$52¹
Vulnerability Management	$22¹
Application Security	$2,000²
Log Management	$19³
insignConnect	Contact sales team

per asset
per app
per GB

Additional Pricing Details

—