Cisco/SourceFire

Competitive Overview – Nov 2014

What products compete against us Customer Requirement

   

IPS IPS with some FW capability Immediate need to on-box SSL processing or a single manager



NGFW Complete security protection Proposed products by Cisco

Sourcefire NGIPS Sourcefire NGIPS Cisco ASA CX Cisco ASA CX Sourcefire NGIPS + Sourcefire NGFW + Sourcefire AMP   

NGFW focused projects, FW integration Cisco data center designs Where features like ‘clustering’ matters

Cisco ASA with FirePOWER Services   

IPS is a separate project Not changing / consolidating firewalls Customer requires separate solution

Sourcefire FirePOWER Appliances Page 2 | © 2014 Palo Alto Networks. Proprietary and Confidential

Cisco/Sourcefire Strengths

1.

2.

3.

4.

5.

Able to influence accounts significantly Broader product portfolio Sourcefire has a very strong IPS/cyber reputation Sourcefire integration with Cisco creates credibility in security space and has a potential upside SNORT has a very loyal following Page 3 | © 2014 Palo Alto Networks. Proprietary and Confidential

Cisco/Sourcefire Weaknesses

1.

2.

3.

4.

ASA+IPS multi-scan architecture is fundamentally flawed No on-box SSL decryption on Firepower services solution Lacking ease of use and management Separate reporting interfaces 5.

6.

Lack of application visibility on all ports The ASA has only one slot for additional 7.

functionality The Cisco Security portfolio is in transition Adding FirePower to ASA requires additional hardware Page 4 | © 2014 Palo Alto Networks. Proprietary and Confidential

Cisco/Sourcefire positioning against us

1.

2.

3.

4.

5.

6.

Cisco will use recent third party test results against us You do not get fired for buying Cisco Cisco has superior networking capabilities Cisco does everything Palo Alto Networks does For existing cisco customers, “it is on the roadmap” For new customers “we already do what PAN does” Cisco offers an enterprise security license Bundle their offerings with security products Palo Alto Networks lacks a broad suite of products to solve major enterprise problems Palo Alto Networks is a pointed product Palo Alto Networks does not provide datacenter security solutions Cisco looks at the security “end to end” (Cisco ISE – Authentication Server plus other stuff) Page 5 | © 2014 Palo Alto Networks. Proprietary and Confidential