Average Ratings 1 Rating

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Snort stands as the leading Open Source Intrusion Prevention System (IPS) globally. This IPS utilizes a collection of rules designed to identify harmful network behavior, matching incoming packets against these criteria to issue alerts to users. Additionally, Snort can be configured to operate inline, effectively blocking these malicious packets. Its functionality is versatile, serving three main purposes: it can act as a packet sniffer similar to tcpdump, function as a packet logger that assists in troubleshooting network traffic, or serve as a comprehensive network intrusion prevention system. Available for download and suitable for both personal and commercial use, Snort requires configuration upon installation. After this setup, users gain access to two distinct sets of Snort rules: the "Community Ruleset" and the "Snort Subscriber Ruleset." The latter, created, tested, and validated by Cisco Talos, offers subscribers real-time updates of the ruleset as they become available to Cisco clients. In this way, users can stay ahead of emerging threats and ensure their network remains secure.

Description

Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Elastic Observability
NXLog
Cybraics
Dropzone AI
EndaceProbe
IronNet Collective Defense Platform
Joe Sandbox
LimaCharlie
Malcolm
Observe
Onum
Palo Alto ATP
Panaseer
Picus
Security Onion
Tenzir
ThreatQ
Wraith
cPacket

Integrations

Elastic Observability
NXLog
Cybraics
Dropzone AI
EndaceProbe
IronNet Collective Defense Platform
Joe Sandbox
LimaCharlie
Malcolm
Observe
Onum
Palo Alto ATP
Panaseer
Picus
Security Onion
Tenzir
ThreatQ
Wraith
cPacket

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

Free
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.snort.org

Vendor Details

Company Name

The Zeek Project

Founded

1994

Country

United States

Website

zeek.org

Product Features

Network Monitoring

Bandwidth Monitoring
Baseline Manager
Diagnostic Tools
IP Address Monitoring
Internet Usage Monitoring
Real Time Analytics
Resource Management
SLA Monitoring
Server Monitoring
Uptime Monitoring
Web Traffic Reporting

Network Security

Access Control
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Threat Response
VPN
Vulnerability Scanning

Alternatives

Alternatives

Palo Alto ATP Reviews

Palo Alto ATP

Palo Alto
CloudShark Reviews

CloudShark

QA Cafe
Blesk Reviews

Blesk

Prival