Cisco IPS Sensor (Discontinued) vs. Cisco Secure IPS

IPS sensors are more suited for companies that do not have visibility into their network with third-party analyzing tools. Scenarios would be to place IPS sensors at the perimeter firewalls mainly. IPS sensors are less appropriate for companies that have third-party analyzing tools that will mitigate vulnerabilities and malicious traffic and activities already.

Incentivized

For scenarios, I described before, like when you have centralized administration and several locations, and the majority of those locations have the same size/requirements, Firepower is well suited. Easy to maintain, relatively cheap to buy. For scenarios too small, like small sales offices like ours, I don't think Firepower could fit, basically because you'll need to invest a certain amount of money to buy, license and deploy.

Incentivized

• Identifies and blocks malicious traffic.
• Detects unwanted traffic and allows your company to be proactive, let alone reactive.
• Comprehensive Threat protection allows companies to adjust thresholds and policies at will.

Incentivized

• You will get more visibility in your network.
• Very fast performance
• Easy to detect and prevent the suspicious activities.
• Easy to export report[s]
• Daily security updates
• Efficacy
• Very low cost
• Cisco Threat Intelligence Director
• A lot of Cisco documentation available

Incentivized

• The web GUI is somewhat slow.
• Sometimes difficult to adjust policies.
• Fail open feature may not work properly all the time.

Incentivized

• The performance is not always as good as you'd want. Some operations take the better part of a minute (drilling down in traffics analysis).
• Deploying or upgrading the FirePower software to the ASA firewalls takes a long time and deployment might fail without a clear reason.

Incentivized

We are in the middle of outsourcing and may not be able to keep this product.

Incentivized

Very easy to navigate GUI in the FMC and very effective at performing the intending duties.

Incentivized

Cisco TAC has been great at helping with configurations and issues that may arise

Incentivized

We didn't have any major issues that let us need support. Only, for this reason, I think Cisco Firepower deserves the rating. Even for small issues, the partner that helped us during the project could solve it quickly. There are also tons of documents and other online resources to help maintain, administer and support the product.

Incentivized

IPS sensors provides the necessary network visibility my company needs to satisfy its security appetite. By doing so, we have been able to stay compliant and up to date with today's network security requirements and procedures. We are able to be proactive with vulnerabilities and reactive to malicious traffic and intrusions in our day to day operations.

Incentivized

We were using the Suricate IDS but it is very difficult to configure and manage so we replace it with Cisco Secure IPS. It gives us all the advanced security features and more control over our network.

Incentivized

• Provided less need to purchase third party analyzing tools.
• Needed more dedicated staff to build/review/and maintain policies and such.
• Answers companies need for network security.

Incentivized

• Has made it much easier to determine when incidents have occurred
• Has been effective in reducing false positives and making solution management more efficient and cost effective

Incentivized