Cisco Defense Orchestrator Reviews

Name: Cisco Defense Orchestrator
Brand: Cisco
Rating: 4.1 (15 reviews)

Vendor: Cisco

4.1 out of 5

15 reviews
100% willing to recommend

What is Cisco Defense Orchestrator?

Cisco Defense Orchestrator (CDO) is a cloud-based management solution designed to ensure streamlined and consistent security policies across the Cisco security portfolio. Specifically tailored to manage all Cisco Secure Firewall form factors (running either ASA or Firepower Threat Defense (FTD) software), CDO offers real-time visibility and troubleshooting capabilities, effectively enhancing overall network security.

CDO addresses the challenges of migration, supporting transitions from on-premises to cloud environments and facilitating the shift from ASA to FTD configurations. As organizations embark on their cloud adoption journey, CDO simplifies provisioning workflows for remote branches, reduces operational expenditures related to inventory management, and offers scalability for multi-cloud deployments.

Get the Cisco Defense Orchestrator Buyer's Guide and find out what your peers are saying about Cisco Defense Orchestrator, AlgoSec, Tufin Orchestration Suite and more!

Cisco Defense Orchestrator is the #14 ranked solution in top Firewall Security Management solutions. PeerSpot users give Cisco Defense Orchestrator an average rating of 8.2 out of 10. Cisco Defense Orchestrator is most commonly compared to AlgoSec: Cisco Defense Orchestrator vs AlgoSec. Cisco Defense Orchestrator is popular among the large enterprise segment, accounting for 84% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 52% of all views.

Buyer's Guide

Cisco Defense Orchestrator

February 2025

Get the report

Helped 838,713 peers since 2012

Featured reviews

Todd Ellis

CTO at SECURE NETWORKERS LLC

Some of the issues we've had aren't really a CDO problem. For example, we had some MX devices that were blocking Windows Update from happening. We found out it was a Meraki issue, but it would have been nice if it had been flagged for us: "Hey, these updates are failing because the MX is blocking it." It wasn't a huge problem, but there was a loss of our time as well as the fact that the updates didn't get pushed out. You could look at that as a security issue but, at the same time, when updates won't run for any reason on certain machines, you freak out a little bit. We thought it was a licensing issue with Microsoft or it could have been Dell EMC. But we were wasting time making all these phone calls and having people remotely troubleshoot it. The troubleshooters were saying, "Man, this looks like a network issue." They tethered a phone and joined it to the wireless on the phone to see if it would update and, boom, it started working. The weird thing was that when we switched it back over to the network, the Meraki was letting it through at that point. It would have been nice if CDO had let us know that that was an issue. There are probably some things that it could do as far as some of the analytics are concerned, things I know it would be capable of: "Hey, why are all these requests coming in? The reason is that a firmware update needs to happen on the Meraki. It's a known issue." That would be helpful.

Read full review

Francisco Delos Santos

Security Engineer at Metrobank

Our primary use case for Cisco Defense Orchestrator is the automation of playbooks. We primarily use it for this purpose to streamline processes The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks. Since the system is automated,…

Read full review

Jairo Mendes

Network and Security Specialist at CONNECTED TECHNOLOGY

The most valuable feature is the restore history. For any changes that you have backed up, if something goes wrong, then the system will automatically prevent the system from crashing or from loss of the client's connection. When you start programming any ASA or device connected to CDO, if you make a mistake, you have the option to restore the previous configuration. You will not lose connection with the device and the client will continue working without problems. We use a lot of image upgrades. We take some 20 devices and then we update everything at once, including the policies. We apply policies for groups. For certain groups, like anti-viruses, we send out policies and apply them to every single device. It's really easy and simple. The solution’s security features for storing firewall configurations in the cloud are pretty secure. I don't see any problems with it. They have two-factor authentication. From what I see, it's working properly. I don't feel there is any gap there.

Read full review

Cisco Defense Orchestrator mindshare

As of February 2025, the mindshare of Cisco Defense Orchestrator in the Firewall Security Management category stands at 1.1%, up from 1.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewall Security Management

PeerAnalyst reports

Type	Title	Date
Category	Firewall Security Management	Feb 23, 2025	Download
Product	Reviews, tips, and advice from real users	Feb 23, 2025	Download
Comparison	Cisco Defense Orchestrator vs AlgoSec	Feb 23, 2025	Download
Comparison	Cisco Defense Orchestrator vs Tufin Orchestration Suite	Feb 23, 2025	Download
Comparison	Cisco Defense Orchestrator vs Palo Alto Networks Panorama	Feb 23, 2025	Download

Title	Rating	Mindshare	Recommending
AlgoSec	4.5	22.1%	96%	182 interviews Add to research
Tufin Orchestration Suite	4.0	21.8%	91%	183 interviews Add to research

Valuable Features

Cisco Defense Orchestrator's most valuable features include the ability to push policies to multiple devices simultaneously, centralized control for secure transactions, automated bulk operations for time-saving, and detailed visibility into network operations. Advanced features like image upgrades, history restoration, and security through encryption and two-factor authentication enhance the user experience. Users benefit from efficiency, automation in threat prevention, and a comprehensive view of rules and network topology.

"The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks."
"The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks."
"Cisco Defense Orchestrator has useful guides for the steps that need to follow by users."

Room for Improvement

Cisco Defense Orchestrator has issues with user interface clarity, as distinguishing between configurations is difficult. It requires better integration with third-party devices and improved navigation for seamless changes. Reporting lacks daily monitoring capabilities, impacting logging and auditing. Bulk changes and configuration adjustments are cumbersome compared to alternatives. Limited cloud-only deployment and lack of custom dashboard options hinder flexibility. Cisco Defense Orchestrator should enhance user-friendliness and third-party compatibility for an optimized experience.

"Cisco Defense Orchestrator should be made more user-friendly overall. Currently, to use it effectively, one must be specific with the rule set that needs to be set up."
"Cisco Defense Orchestrator should be made more user-friendly overall."
"Cisco Defense Orchestrator can improve by providing more support for third-party security components."

ROI

Cisco Defense Orchestrator saves significant time by enhancing operations and reducing IT issues. Users see immediate value, with a drastic drop in IT tickets and increased productivity. Security and device management improvements lead to cost savings by consolidating teams. ASA upgrades and fast recovery from firewall issues contribute to time efficiency. Users appreciate easier updates, mass firewall changes, and automatic configuration backups for critical sites, aligning with cost and time savings that justify its expense.

Pricing

Cisco Defense Orchestrator offers flexible pricing that varies by device, with annual costs starting around $100 for ASA 5506 and increasing for larger models. Enterprise agreements can provide bundled benefits, while high-availability setups require only single licenses per pair. Although initial setup might involve resource time, additional costs may be limited. Its integration with existing Cisco infrastructure justifies costs for many users, but it may seem expensive when mixed with other non-Cisco products.

"I work with a lot of clients, and the price or value of the Cisco Defense Orchestrator can vary from one client to another. If you have a lot of Cisco solutions, the price of the Cisco Defense Orchestrator is justified. Whereas if you have some security components from other vendors, such as Check Point or Palo Alto. This solution would be a pretty expensive proposition considering that they don't integrate with them well."
"If you compare to what is available on the market, they are in the same range with respect to pricing."
"It is covered under the CIsco Enterprise License Agreement (ELA). So, it is licensed and ours."

Popular Use Cases

Cisco Defense Orchestrator is used primarily for centralized management of firewalls and security policy streamlining. Users deploy it to manage numerous ASA devices, centralize configuration and updates, and optimize network operations. CDO aids in automation, backup, and configuration management. It's deployed for policy integration and managing multiple devices simultaneously, leveraging cloud environments like AWS and Azure. Users take advantage of CDO's ability to enhance network security through firewall administration and intrusion prevention.

Service and Support

Cisco Defense Orchestrator customer service is responsive and attentive, consistently addressing customer issues promptly. Customers acknowledge fast issue resolution, positive experiences with the team, and willingness to implement feedback. They appreciate the helpful and knowledgeable support, except in cases requiring escalation due to complex problems. Users emphasize the need for improved user account control to reduce reliance on support. Interaction with Cisco staff is effective, but some still prefer direct problem-solving for simpler issues.

Deployment

Users experienced a generally straightforward initial setup with Cisco Defense Orchestrator, though some encountered issues requiring Cisco support. Deployment took as little as one hour to several weeks, depending on the number of devices and infrastructure complexity. Quick value was apparent, with ease in managing firewalls and configurations. A few needed guidance from Cisco staff or product managers. Single individuals could often handle deployment and maintenance, but larger setups required more personnel.

Scalability

Cisco Defense Orchestrator is described as flexible and easily scalable across various network sizes. Companies report managing numerous firewalls, from a few to hundreds, without issues. There is an expectation of seamless expansion, including integrating additional networking products. Users appreciate its adaptability with cloud configurations, and some have highlighted its ability to handle a wide range of devices. Scalability considerations include licensing changes with larger user counts.

Stability

Stability of Cisco Defense Orchestrator seems excellent, with users reporting no outages or interruptions. Continuous improvements are made without affecting reliability, as enhancements do not cause issues common in other software. Multiple users highlight the absence of connectivity problems, with features performing as expected. Despite the short period of use for some, satisfaction with the consistency and performance is evident. The dependency on Cisco cloud mentioned by users doesn't appear to impact functionality negatively.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cisco Defense Orchestrator Buyer's Guide for additional reliable information.