Cisco Secure IPS is very advanced and provides all the advanced security features. It gives us more visibility and control over our network. Cyber attacks are increasing day by day. With the help of Cisco Secure IPS, we can detect and prevent any cyber attack on your network. We are using the Cisco Secure IPS firewall on our site for the last 2 years and now we have more control over your incoming and outgoing users' traffic and we can easy to block any threats. The performance is very fast and it is continually synced with the server for last updates.
Pros
Easy GUI.
Easy to export the report.
Very fast performance and quick response on threats.
It provides us more network security.
It provides us more network visibility.
Centralized management.
Easy to manage.
Cons
Very less documentation available for study.
Likelihood to Recommend
Cisco Secure IPS is required for every organization and it gives us all the advanced security features for more visibility and control on our incoming and outgoing network traffic. We can easy to configure and management is also very easy. You can deploy in the existing network very easily. The price is very low and performance is very high and it works very quickly on threats and takes the necessary action.
An Intrusion Prevention System [IPS] is necessary for every organization. It will keep an eye on a network and find any malicious activities. We are using Cisco Secure IPS in our organization for high-level network security. It provides a lot of advanced features for detecting and preventing any type of cyber attack on your organization. The main function of Cisco Secure IPS is to identify any suspicious activity, prevent the activity from happening, and send an alert to the SOC team.
Pros
You will get more visibility in your network.
Very fast performance
Easy to detect and prevent the suspicious activities.
Easy to export report[s]
Daily security updates
Efficacy
Very low cost
Cisco Threat Intelligence Director
A lot of Cisco documentation available
Cons
I have never faced an issue with Cisco Secure IPS
Likelihood to Recommend
Cisco Secure Intrusion Prevention System [IPS] is well suited for every organization that needs good, deep-level traffic scanning. It keeps an eye on our network's incoming and outgoing traffic, detects and prevents any suspicious activity, and sends the alert to your information security team to investigate. The performance of this device is very fast and it is easy to configure. We can create the rules very easily. There is a lot of documentation available on the Cisco website which will help you to configure and manage.
Firepower NGIPS is our primary IPS/IDS solution. It provides a layer of defense against network intrusion that provides very meaningful feedback via the Firepower Management Center (FMC). We use it both internally and recommend it to our customers as the leading NGIPS/IDS solutions available on the market. We are using Firepower NGIPS to both detect and proactively prevent unauthorized network access.
Pros
Stops unauthorized network access
Provides meaningful event and incident reporting via the FMC
Provides robust detection, prevention, and alerting of IPS/IDS events
Cons
Fine tuning the Firepower policies is tedious and time consuming
Likelihood to Recommend
Any network that contains sensitive customer or user information that has to have any ports open to the internet for any reason needs to have some kind of IPS/IDS solution. Cisco Firepower NGIPS is a Gartner Industry Leader and is very effective for the purpose, especially when combined with other Cisco Security platform solutions.
We use Sourcefire Defense Center to manage and deploy the Firepower software on our Cisco ASA 5500-X firewalls.
This adds layer 4-7 visibility to our networks edge.
Pros
Rules are based on the SNORT engine which has a tremendous base of rules.
Helps protect your network and users by leveraging Talos Intelligence resources, like the domain and IP reputation databases.
Allows you to define a policy which can then be applied to all FirePower devices in your networks.
Cons
The performance is not always as good as you'd want. Some operations take the better part of a minute (drilling down in traffics analysis).
Deploying or upgrading the FirePower software to the ASA firewalls takes a long time and deployment might fail without a clear reason.
Likelihood to Recommend
The only way to get layer 4-7 security on your Cisco ASA devices. The solution has a lot of potential but I think that it still needs work to perform better.
