Cisco Defense Orchestrator Reviews

Name: Cisco Defense Orchestrator
Brand: Cisco
Rating: 4.1 (15 reviews)

Vendor: Cisco

4.1 out of 5

15 reviews
100% willing to recommend

What is Cisco Defense Orchestrator?

Cisco Defense Orchestrator (CDO) is a cloud-based management solution designed to ensure streamlined and consistent security policies across the Cisco security portfolio. Specifically tailored to manage all Cisco Secure Firewall form factors (running either ASA or Firepower Threat Defense (FTD) software), CDO offers real-time visibility and troubleshooting capabilities, effectively enhancing overall network security.

CDO addresses the challenges of migration, supporting transitions from on-premises to cloud environments and facilitating the shift from ASA to FTD configurations. As organizations embark on their cloud adoption journey, CDO simplifies provisioning workflows for remote branches, reduces operational expenditures related to inventory management, and offers scalability for multi-cloud deployments.

Get the Cisco Defense Orchestrator Buyer's Guide and find out what your peers are saying about Cisco Defense Orchestrator, AlgoSec, Tufin Orchestration Suite and more!

Cisco Defense Orchestrator is the #14 ranked solution in top Firewall Security Management solutions. PeerSpot users give Cisco Defense Orchestrator an average rating of 8.2 out of 10. Cisco Defense Orchestrator is most commonly compared to AlgoSec: Cisco Defense Orchestrator vs AlgoSec. Cisco Defense Orchestrator is popular among the large enterprise segment, accounting for 84% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 51% of all views.

Buyer's Guide

Cisco Defense Orchestrator

March 2025

Get the report

Helped 839,319 peers since 2012

Featured Cisco Defense Orchestrator reviews

Todd Ellis

CTO at SECURE NETWORKERS LLC

Some of the issues we've had aren't really a CDO problem. For example, we had some MX devices that were blocking Windows Update from happening. We found out it was a Meraki issue, but it would have been nice if it had been flagged for us: "Hey, these updates are failing because the MX is blocking it." It wasn't a huge problem, but there was a loss of our time as well as the fact that the updates didn't get pushed out. You could look at that as a security issue but, at the same time, when updates won't run for any reason on certain machines, you freak out a little bit. We thought it was a licensing issue with Microsoft or it could have been Dell EMC. But we were wasting time making all these phone calls and having people remotely troubleshoot it. The troubleshooters were saying, "Man, this looks like a network issue." They tethered a phone and joined it to the wireless on the phone to see if it would update and, boom, it started working. The weird thing was that when we switched it back over to the network, the Meraki was letting it through at that point. It would have been nice if CDO had let us know that that was an issue. There are probably some things that it could do as far as some of the analytics are concerned, things I know it would be capable of: "Hey, why are all these requests coming in? The reason is that a firmware update needs to happen on the Meraki. It's a known issue." That would be helpful.

Read full review

Francisco Delos Santos

Security Engineer at Metrobank

Our primary use case for Cisco Defense Orchestrator is the automation of playbooks. We primarily use it for this purpose to streamline processes The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks. Since the system is automated,…

Read full review

Jairo Mendes

Network and Security Specialist at CONNECTED TECHNOLOGY

The most valuable feature is the restore history. For any changes that you have backed up, if something goes wrong, then the system will automatically prevent the system from crashing or from loss of the client's connection. When you start programming any ASA or device connected to CDO, if you make a mistake, you have the option to restore the previous configuration. You will not lose connection with the device and the client will continue working without problems. We use a lot of image upgrades. We take some 20 devices and then we update everything at once, including the policies. We apply policies for groups. For certain groups, like anti-viruses, we send out policies and apply them to every single device. It's really easy and simple. The solution’s security features for storing firewall configurations in the cloud are pretty secure. I don't see any problems with it. They have two-factor authentication. From what I see, it's working properly. I don't feel there is any gap there.

Read full review

Cisco Defense Orchestrator mindshare

As of March 2025, the mindshare of Cisco Defense Orchestrator in the Firewall Security Management category stands at 1.1%, down from 1.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewall Security Management

PeerAnalyst reports based on Cisco Defense Orchestrator reviews

Type	Title	Date
Category	Firewall Security Management	Mar 3, 2025	Download
Product	Reviews, tips, and advice from real users	Mar 3, 2025	Download
Comparison	Cisco Defense Orchestrator vs AlgoSec	Mar 3, 2025	Download
Comparison	Cisco Defense Orchestrator vs Tufin Orchestration Suite	Mar 3, 2025	Download
Comparison	Cisco Defense Orchestrator vs Palo Alto Networks Panorama	Mar 3, 2025	Download

Title	Rating	Mindshare	Recommending
AlgoSec	4.5	22.3%	96%	182 interviews Add to research
Tufin Orchestration Suite	4.0	22.0%	91%	183 interviews Add to research

Valuable Features

Cisco Defense Orchestrator's most valuable features include the ability to push policies to multiple devices simultaneously, centralized control for secure transactions, automated bulk operations for time-saving, and detailed visibility into network operations. Advanced features like image upgrades, history restoration, and security through encryption and two-factor authentication enhance the user experience. Users benefit from efficiency, automation in threat prevention, and a comprehensive view of rules and network topology.

"The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks."
"The most valuable feature is the automation, as it reduces user intervention and allows us to focus on other tasks."
"Cisco Defense Orchestrator has useful guides for the steps that need to follow by users."

Room for Improvement

Cisco Defense Orchestrator has issues with user interface clarity, as distinguishing between configurations is difficult. It requires better integration with third-party devices and improved navigation for seamless changes. Reporting lacks daily monitoring capabilities, impacting logging and auditing. Bulk changes and configuration adjustments are cumbersome compared to alternatives. Limited cloud-only deployment and lack of custom dashboard options hinder flexibility. Cisco Defense Orchestrator should enhance user-friendliness and third-party compatibility for an optimized experience.

"Cisco Defense Orchestrator should be made more user-friendly overall. Currently, to use it effectively, one must be specific with the rule set that needs to be set up."
"Cisco Defense Orchestrator should be made more user-friendly overall."
"Cisco Defense Orchestrator can improve by providing more support for third-party security components."

ROI

Cisco Defense Orchestrator saves users significant time by streamlining operations, reducing IT tickets, and improving productivity. Users note immediate impact and fewer issues, attributing improved operations and cost savings to having one team member handle tasks previously managed by multiple teams. The system's efficiency in device management and quick recovery from downtime is appreciated. Even without exact monetary quantification, the time and cost benefits are evident, reinforcing its value.

Pricing

Cisco Defense Orchestrator pricing varies significantly, starting at approximately $100 annually for smaller devices like ASA 5506 and increasing for larger models. Organizations appreciate the time savings despite higher costs, supported by its potential to integrate well within Cisco ecosystems through Cisco DNA services. Costs are considered comparable with market alternatives, though potentially expensive if multiple vendors are involved. Typically, high-availability setups require only one license, reducing additional costs. Pricing structures include enterprise agreements for bundled savings.

"I work with a lot of clients, and the price or value of the Cisco Defense Orchestrator can vary from one client to another. If you have a lot of Cisco solutions, the price of the Cisco Defense Orchestrator is justified. Whereas if you have some security components from other vendors, such as Check Point or Palo Alto. This solution would be a pretty expensive proposition considering that they don't integrate with them well."
"If you compare to what is available on the market, they are in the same range with respect to pricing."
"It is covered under the CIsco Enterprise License Agreement (ELA). So, it is licensed and ours."

Popular Use Cases

Cisco Defense Orchestrator is used primarily for centralized management of firewalls and security policy streamlining. Users deploy it to manage numerous ASA devices, centralize configuration and updates, and optimize network operations. CDO aids in automation, backup, and configuration management. It's deployed for policy integration and managing multiple devices simultaneously, leveraging cloud environments like AWS and Azure. Users take advantage of CDO's ability to enhance network security through firewall administration and intrusion prevention.

Service and Support

Cisco Defense Orchestrator's customer service is responsive and attentive, showing interest in resolving issues reported by users. They provide helpful and knowledgeable support, often addressing concerns swiftly. While some users encounter occasional delays or complications at the first tier, technical support is rated positively by many. They effectively incorporate user feedback to improve services and features. Users appreciate the opportunity to communicate directly with Cisco, contributing to productive enhancements for the application.

Deployment

Many users found Cisco Defense Orchestrator's initial setup straightforward and quick, often taking under two hours. Some encountered technical challenges, especially with Secure Device Connector deployment in VMware environments, requiring Cisco's support. However, the process was usually uncomplicated with existing firewall knowledge. Users noted immediate value upon setup, with easy policy and upgrade deployment. Deployment times varied based on infrastructure size, but even larger setups were manageable with minimal personnel.

Scalability

Cisco Defense Orchestrator is described as flexible and easily scalable across various network sizes. Companies report managing numerous firewalls, from a few to hundreds, without issues. There is an expectation of seamless expansion, including integrating additional networking products. Users appreciate its adaptability with cloud configurations, and some have highlighted its ability to handle a wide range of devices. Scalability considerations include licensing changes with larger user counts.

Stability

Stability of Cisco Defense Orchestrator seems excellent, with users reporting no outages or interruptions. Continuous improvements are made without affecting reliability, as enhancements do not cause issues common in other software. Multiple users highlight the absence of connectivity problems, with features performing as expected. Despite the short period of use for some, satisfaction with the consistency and performance is evident. The dependency on Cisco cloud mentioned by users doesn't appear to impact functionality negatively.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cisco Defense Orchestrator Buyer's Guide for additional reliable information.