Snort vs. Opensense

If a colleague was looking to tighten down their network I can easily recommend Snort to them. It gives you some more peace of mind knowing that its always scanning traffic for malicious looking code. Even things your major firewalls and security hardware might miss, Snort has picked up. Its an easy recommendation for me.

Incentivized

This solution is well suited for providing meaningful insights on brand reputation, compliance, and developing email/content strategies for marketing and sales team members. It integrates with email marketing software and provides very customizable analytics. It is not appropriate to be treated as a standalone email and content marketing solution, rather as an add-on to those tools.

Incentivized

• IPS detection.
• DoS detection.
• Packet logging.

Incentivized

• Email Analytics
• Signature Compliance
• Integrations with other Marketing Tools

Incentivized

• At times can be unstable with Cisco bugs, require frequent upgrading.
• FTD images that are being pushed for ASAs are less efficient from an administration standpoint, no CLI.

Incentivized

• UI is very clunky
• A ton in pipeline, but not much dev happening
• Targeting is restricted to only like 300 people

Incentivized

Overall all useability is great. The tool is dummy-proof, so anyone can use it and run it. No IT knowledge needed besides connecting it to your mail server which their team will walk you through. After that, you can have fun with the tools and create what you want to create for your teams.

Incentivized

Opensense customer service is by far the best! I have never had an issue once when calling in or submitting a ticket! They are very kind while working on the phone with them, and they explain everything to you! They will take the time with you to make sure everything gets solved.

Incentivized

For our organization, the Cisco defense in depth concept works the best. While Cisco can be made to work with other vendors, we have found the best in depth protection by integrating Cisco products for maximum visibility. We had a Barracuda Web Filter, but it was difficult to maintain when you had limited scope on what you could block, so we created a whitelist only setup which required a lot of additional manpower. This wouldn't have covered new threats with DNS spoofing and the like. Sourcefire also integrated with our anti-malware platform (Cisco AMP) for even better visibility on what may be happening on the end users workstation. We are planning on adding in Cisco ISE to complete the approach and possibly stealthwatch to cover our bases in the future. The Palo Alto gear was interesting, but it was priced far out of our range.

Incentivized

Opensense was the first company we interviewed, so cannot compare them well against industry competition.

Incentivized

• Being open source, ROI on free is hard to beat for something that works.
• I believe it greatly enhances the security of my network.

• It has positively impacted our ability to securely and safely deliver email content to mass audiences

Incentivized