Products
Power, precision, and flexibility
Personal

$29.99 each

-

One-year subscription

Sign in / Sign up
  • Snort ruleset available immediately upon release – 30 days faster than registered users
  • Coverage in advance of exploit
  • Ability to submit false positives/negatives
  • For use in a home network environment or for educational purposes only.
Business

$399 per sensor

-

One-year subscription

Sign in / Sign up
  • The same Snort ruleset developed for our NGIPS customers, immediately upon release – 30 days faster than registered users
  • Priority response for false positives and rules
  • Snort Subscribers are encouraged to send false positives/negatives reports directly to Talos
  • For use in businesses, non-profit organizations, colleges and universities, government agencies, consultancies, etc. where Snort sensors are in use in a production or lab environment. This subscription type does not include license to redistribute the Snort Subscriber Rule Set except as described in section 2.1 of the Snort Subscriber Rule Set License.

    • Only receipts will be issued for subscription purchases made via credit card on Snort.org. If you need an invoice, please visit: Can I receive an invoice for my Snort.org purchase?

Integrators

Distribute rules

Integrate Snort into your application

-

More Info
  • Now with no minimum or up front fee!
  • Have your logo displayed on Snort.org as an authorized reseller
  • Ability to use our Copyright and logos on your site and offerings

Which Snort subscription is right for me?

Personal

Personal subscriptions are perfect for users who only need to use Snort in one place. This is only for students or home network environment users.

Business

Business subscriptions are perfect for companies, non-profits, universities, government agencies, etc. that need to deploy Snort across a wide variety of devices and need to protect a large network. This includes environments where Snort sensors are used in a production or lab environment.

Integrator

Integrator subscriptions are perfect for anyone looking to integrate Snort into their application or server for commercial resale purposes.

Do you need an invoice?

If you are purchasing as a reseller on behalf of a customer or require an invoice/PO, please contact an authorized Cisco Partner. Search by country and choose any partner in your applicable country to complete your order. Contact your selected partner with reference product code L-FP-VRT-1Y, and let them know how many Snort sensors you want covered.

If you are a Cisco Partner and need to place an order on behalf of an end customer, please visit the Partners page and place your order via the CCW web portal.

By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.
By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.
By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.
By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.

Interested in Snort education?

Sourcefire (now a part of Cisco), the creators of Snort, offers classroom and virtual instructor-led training as well as on-demand and onsite training for Open Source Snort and Rule Writing Best Practices.

ISC2 Trusted CPE Provider

As a “Trusted CPE Provider” for (ISC)2, Cisco offers students holding certifications as a System Security Certified Practitioner (SSCP) or as a Certified Information Systems Security Professional (CISSP) the ability to earn one Continuing Professional Education (CPE) credit for each hour of education completed. To obtain credit for virtual courses students should provide their SSCP or CISSP number.

For information and class schedule for the Securing Cisco Networks with Open Source Snort (SSFSNORT) course, please see our web site: http://www.cisco.com/web/learning/learning_services/courses/security.html. Click "register now" to view regions/time zones. You may register directly from the web site using a credit card, Cisco Learning Credits, or purchase order (must be submitted +21 days before class).

All exams are handled by Pearson VUE. To register for a proctored SSFSNORT exam, please see Pearson VUE's web site: http://home.pearsonvue.com/Home.aspx See "For test takers" > "Test taker home" > key in Cisco Systems in the search field > click on "view exams" in the menu to the right. The name of the SSFSNORT exam is "500-280." Please note that the exam is not considered a certification.