Snort and Guardian, safe and secure
August 24, 2017

Snort and Guardian, safe and secure

Curt Dickman | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco Sourcefire SNORT

I added SNORT and the guardian IPS to my firewall to help meet pci dss compliance. The setup was easy on my firewall - Ipfire - and I have had no problems related to its use. Before my cc terminal was changed, I had to disable guardian as it wouldn't let the old cc terminal through - I believe it was an SSL related issue. My old credit card processing company didn't seem interested in updating my terminal in a timely fashion. With the new cc terminal, I have had no issues. I sometimes leave my win xp virtual machine connected to the internet and have not seen any evidence of an intrusion. I know there are some false positives with the ruleset I use -emerging threats, but it has not blocked any traffic that has impaired any function on my network.
  • I am no IS expert, but I feel SNORT and guardian really helps keep my network safe.
  • So far it has been easy to administer.
  • SNORT and guardian are easy to install add-ons for my firewall.
  • There are plenty of false positives in the logs, but no problems noticed related to them.
  • Being open source, ROI on free is hard to beat for something that works.
  • I believe it greatly enhances the security of my network.
It sure seems to work well in a small business network, I don't know how well it would work in a larger network.