"At the same time, Perry says a company that standardizes on another product and is unhappy with it will sometimes turn to Snort (rather than Sourcefire). "They'll throw up the Snort open source sensor in parallel so they can defend through that," he says. "That's one time when they might not have gotten approval to buy another product, so they'll run the free open source stuff."
Enterprise threat management
"One of the key improvements in Sourcefire's latest release, Perry says, was the addition of a widget-based dashboard to the interface. Every customer, she says, wanted something different in the interface, so widgets seemed like the perfect answer. "You can decide which widgets are on your dashboard--what you want to see," she says. Another recent addition to the Sourcefire offering, Perry says, was RUA (Real-time User Awareness). "It lets you know who's at the machine that's being attacked or attacking, so you're able to start policing and forcing compliance in the network:"
