Average Ratings 1 Rating

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Snort stands as the leading Open Source Intrusion Prevention System (IPS) globally. This IPS utilizes a collection of rules designed to identify harmful network behavior, matching incoming packets against these criteria to issue alerts to users. Additionally, Snort can be configured to operate inline, effectively blocking these malicious packets. Its functionality is versatile, serving three main purposes: it can act as a packet sniffer similar to tcpdump, function as a packet logger that assists in troubleshooting network traffic, or serve as a comprehensive network intrusion prevention system. Available for download and suitable for both personal and commercial use, Snort requires configuration upon installation. After this setup, users gain access to two distinct sets of Snort rules: the "Community Ruleset" and the "Snort Subscriber Ruleset." The latter, created, tested, and validated by Cisco Talos, offers subscribers real-time updates of the ruleset as they become available to Cisco clients. In this way, users can stay ahead of emerging threats and ensure their network remains secure.

Description

Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Elastic Observability Yes 
NXLog Yes 
Dropzone AI No 
EndaceProbe Yes 
IronNet Collective Defense Platform No 
Joe Sandbox Yes 
LimaCharlie No 
Malcolm No 
Observe No 
Onum No 
Palo Alto ATP Yes 
Panaseer Yes 
Picus Yes 
Project Ares Yes 
Security Onion No 
Tenzir No 
ThreatQ Yes 
Wraith No 
cPacket No 

Integrations

Elastic Observability Yes 
NXLog Yes 
Dropzone AI Yes 
EndaceProbe No 
IronNet Collective Defense Platform Yes 
Joe Sandbox No 
LimaCharlie Yes 
Malcolm Yes 
Observe Yes 
Onum Yes 
Palo Alto ATP No 
Panaseer No 
Picus No 
Project Ares No 
Security Onion Yes 
Tenzir Yes 
ThreatQ No 
Wraith Yes 
cPacket Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.snort.org

Vendor Details

Company Name

The Zeek Project

Founded

1994

Country

United States

Website

zeek.org

Product Features

Network Monitoring

Bandwidth Monitoring No 
Baseline Manager No 
Diagnostic Tools No 
IP Address Monitoring No 
Internet Usage Monitoring No 
Real Time Analytics No 
Resource Management No 
SLA Monitoring No 
Server Monitoring No 
Uptime Monitoring No 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Alternatives

Alternatives

Snort Reviews

Snort

Snort Social
CloudShark Reviews

CloudShark

QA Cafe