Average Ratings 1 Rating

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Snort stands as the leading Open Source Intrusion Prevention System (IPS) globally. This IPS utilizes a collection of rules designed to identify harmful network behavior, matching incoming packets against these criteria to issue alerts to users. Additionally, Snort can be configured to operate inline, effectively blocking these malicious packets. Its functionality is versatile, serving three main purposes: it can act as a packet sniffer similar to tcpdump, function as a packet logger that assists in troubleshooting network traffic, or serve as a comprehensive network intrusion prevention system. Available for download and suitable for both personal and commercial use, Snort requires configuration upon installation. After this setup, users gain access to two distinct sets of Snort rules: the "Community Ruleset" and the "Snort Subscriber Ruleset." The latter, created, tested, and validated by Cisco Talos, offers subscribers real-time updates of the ruleset as they become available to Cisco clients. In this way, users can stay ahead of emerging threats and ensure their network remains secure.

Description

The Suricata engine excels in real-time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM), and offline packet capture (pcap) processing. It analyzes network traffic using a robust and comprehensive set of rules and signature languages, complemented by advanced Lua scripting capabilities that allow for the identification of intricate threats. Its compatibility with standard input and output formats such as YAML and JSON simplifies the integration with various tools, including established SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other databases. The development of Suricata is driven by a vibrant community focused on enhancing security, usability, and efficiency. Additionally, the project is managed and endorsed by the Open Information Security Foundation (OISF), a non-profit organization dedicated to fostering the ongoing development and success of Suricata as an open-source initiative. This commitment not only ensures the software's reliability but also actively encourages community contributions and collaboration.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Elastic Observability Yes 
Palo Alto ATP Yes 
AWS Marketplace No 
EndaceProbe Yes 
Joe Sandbox Yes 
Kibana No 
Logstash No 
Malcolm No 
NXLog Yes 
Observe No 
Panaseer Yes 
Picus Yes 
Project Ares Yes 
Security Onion No 
Splunk APM No 
Stamus Networks No 
Tenzir No 
ThreatQ Yes 
Wraith No 

Integrations

Elastic Observability Yes 
Palo Alto ATP Yes 
AWS Marketplace Yes 
EndaceProbe No 
Joe Sandbox No 
Kibana Yes 
Logstash Yes 
Malcolm Yes 
NXLog No 
Observe Yes 
Panaseer No 
Picus No 
Project Ares No 
Security Onion Yes 
Splunk APM Yes 
Stamus Networks Yes 
Tenzir Yes 
ThreatQ No 
Wraith Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.snort.org

Vendor Details

Company Name

Suricata

Website

suricata.io

Alternatives

Alternatives

SafeLine WAF Reviews

SafeLine WAF

Chaitin Tech
Snort Reviews

Snort

Snort Social
Zeek Reviews

Zeek

The Zeek Project