They are both signature based. IPS 4.x is no longer supported by Cisco(no more sig updates), so comparing the two is probably pointless.
You can look at the signatures pretty easily in 5.x. The Cisco documentation about the various settings are not very detailed and some (dare I say many) of the regular expressions are hidden. However, you can look at the signatures and you will probably find them much easier to understand than Snort (mostly because it is a GUI with drop-down boxes, etc).
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...