Cisco Secure Firewall Reviews

We have two deployment models for the use case: one is a perimeter firewall and one is a data center firewall. If you have a perimeter, you will position Cisco Secure Firewall as a perimeter firewall; it fits more in data as a data center firewall because in a data center firewall, you are inspecting incoming traffic and you need a very good IPS, so Cisco Secure Firewall is very effective as a data center firewall.

The best feature in Cisco Secure Firewall is the stability; we have a stable product with no lagging or crashing, unlike others. Additionally, the IPS is the next-generation IPS from Cisco, which has many features and many signatures with updated signatures for my IPS.

I switched to Cisco Secure Firewall to get very good IPS signatures and next-generation IPS; that is a market leader from Cisco.

The stability is very good. I do not experience any downtime, crashes, or performance issues; that is the best feature from Cisco Secure Firewall.

Most of the time, Cisco provides features on some versions and the updated versions will move them; for example, we can do firewall policies based on users, which is from Active Directory. It should be from Cisco ISE, so it is a very bad drawback from Cisco Secure Firewall. Not all customers have Cisco ISE, and we need to integrate to make a policy on users, not just by IP, but with users also. We had integration before with LDAP and Active Directory, but on some versions, Cisco requires us to do it through Cisco ISE.

I have five years of experience with Cisco Secure Firewall overall.

The stability is very good. I do not experience any downtime, crashes, or performance issues; that is the best feature from Cisco Secure Firewall.

Cisco Secure Firewall is providing scalability. I rate the scalability as a number 10.

Positive

I rate the technical support a number 10.

Compared to Fortinet, we have a complex configuration, but we still have a stable product rather than Fortinet's product.

Cisco Secure Firewall requires maintenance. Maintaining it is slightly complex; it is not easy or very easy.

I am a customer. It was purchased through a partner. I was satisfied with my experience with the partner.

I have seen a return on investment of 50.

The pricing for Cisco Secure Firewall is very good, and we got many discounts from them.

Cisco Secure Firewall is deployed on-premises. We have a team of four users using the solution. I rate this review a 10.

My main use case for Cisco Secure Firewall is to protect corporate internet access from malicious people.

I can provide a specific example of how I use Cisco Secure Firewall to protect my corporate internet system from malicious activity: I block malicious sites and create rules to detect them.

I also use it to provide remote access for vendors and IT support people.

The best features Cisco Secure Firewall offers in my experience are its GUI, clear definition, and process to create rules.

The GUI is clear and I am able to follow the description of processes such as backup, creation of rules, and other management processes.

This has helped my team feel more confident that we are protected from malicious intruders, and I have noticed specific positive outcomes and changes since using Cisco Secure Firewall.

I believe Cisco Secure Firewall can be improved, particularly regarding the specifications such as the memory that is used on entry-level firewalls, because sometimes when doing an upgrade or changing configuration, issues arise.

On the performance side, I notice that the upgrade to a different version is slow, so hopefully improved CPU and RAM will help performance.

I have been using Cisco Secure Firewall for three years.

Cisco Secure Firewall is stable in my experience.

The hardware is working and we have not encountered the firewall failing because of a firmware upgrade.

We have not needed the scalability feature of Cisco Secure Firewall as of now.

I have not needed to reach out to Cisco support for any issues.

I have not switched from another vendor or used another firewall vendor prior to Cisco.

Before choosing Cisco Secure Firewall, we did not evaluate other options.

I would advise others looking into using Cisco Secure Firewall that it is easy to use and manage, easy to create rules, and upgrade the firmware, and it is reliable; I have not encountered any failure on my Cisco firewall so far. I rate this product an 8 out of 10.

Our main use case for Cisco Secure Firewall is to have the different clients secured in their own VLAN and subnet, ensuring effective segregation of our network.

We do not have an internet connection with Cisco Secure Firewall; basically, it is all on-premise. We have different use cases and those need to stay separated, so they do not interfere with each other.

My main usage for Cisco Secure Firewall is that I work in a train company where we are basically managing the network for the different use cases of the train. Those need to get separated, so the phone does not interfere with the cameras, for example, and we only allow the designated ports to the other.

What I appreciate most about Cisco Secure Firewall is that it has been working since we bought it without any failure, highlighting its reliability and performance.

An example of how Cisco Secure Firewall benefits my organization is that it performs its function very effectively. We use it as a router, and it works really well, ensuring our operations run smoothly.

I think the old interface could be improved, as it is not that good. Cisco Firewall Management Center is much better, but I need to get more experience with that because we do not really have any experience with it. I did not work extensively with it as we are in the migrating phase.

I have been using a Cisco firewall, specifically the ASA, for ten years and now we are migrating to Cisco Secure Firewall, which represents our ongoing commitment to network security.

I assess the stability and reliability of Cisco Secure Firewall as performing really well. We have had one small issue, but it happened over ten years, and with the new one, we have had no issues.

I believe Cisco Secure Firewall can scale and grow with the needs of my organization because we bought the biggest model, so we do not really need to scale anywhere. We roughly calculated this and it should last the next nine to ten years, so if we buy a new one, it will probably have more performance, but the next ten years are secure.

I have used customer service for Cisco Secure Firewall. We have a partner between us and Cisco and only the extreme cases get to Cisco. Most of the time our partner, Logicalis, will solve the problem for us because they have experts, so only really problems with the software or these kinds of things get right to Cisco.

Before choosing Cisco Secure Firewall, we have a complete Cisco network, so we tried to keep the network together, completely Cisco. Therefore, there were no other solutions, as we did not use one before and we did not consider different options.

I would describe the experience of deploying Cisco Secure Firewall as very smooth. We used the migration software which just took the complete ASA configuration and put it in Cisco Secure Firewall in Cisco Firewall Management Center, and that was it; it worked.

I have been working with Cisco Secure Firewall for almost nine years, and I want to share my experience with this solution.

I have been working with both the on-premises and cloud versions of Cisco Secure Firewall.

The choice between deployment models depends on the use cases. For on-premises use cases, I deploy an on-premises firewall, but for workloads that are based on the cloud, I use the cloud-based firewall.

Cisco Secure Firewall has very good IDS and IPS capabilities, as well as excellent threat intelligence features, which are some of the best aspects of the product that I appreciate.

It actually helps with integration by allowing me to integrate different solutions within one platform.

I am not currently experiencing many drawbacks with Cisco Secure Firewall. However, since things are migrating to the cloud, the product needs to be more optimized for cloud environments.

Recently, AI-initiated threats have emerged, so Cisco Secure Firewall should have enhanced capabilities to counter AI threats.

I have 22 years of overall experience working in the software field.

The deployment for the product was not quite simple, but it was acceptable. I received support from Cisco during the process, so the overall experience was good.

I would rate the technical support from Cisco at an eight out of ten, with ten being the best.

I was assisted by a third party with the deployment.

I handle both the deployment and operations, so I personally participated in the deployment process.

The price for Cisco Secure Firewall is a bit high compared to other vendors.

Cisco Secure Firewall helps with a Zero Trust security model, and I am implementing a ZTNA access model. I have already implemented Zero Trust. Other vendors besides Cisco also provide ZTNA solutions. Fortinet and Palo Alto are all working with ZTNA and have moved into the ZTNA platform.

I would assess Cisco Secure Firewall's ability to unify different policies across my environment.

Cisco Secure Firewall serves as our primary internet firewall.

I appreciate the ease of use most about Cisco Secure Firewall. The end-to-end visibility offered by Cisco Secure Firewall is excellent, and I have no issues with any of the products. I assess the operational efficiency of Cisco Secure Firewall in my IT environment as positive because I value Cisco products and advocate for them whenever I can.

The only area that can be improved is related to Cisco Secure Firewall Management Center, as certain versions are not always stable, which has been our only issue.

I have been using Cisco Secure Firewall for twenty years.

I assess the stability and reliability of Cisco Secure Firewall as good; it is rock solid for me.

I am uncertain about the specific challenges I face with hybrid distribution, especially regarding hybrid and distributed enterprise networks that Cisco Secure Firewall addresses.

I evaluate customer service and technical support at a ten on a scale of one to ten, with ten being the best.

I have used Cisco Secure Firewall throughout my career.

I would describe my experience with deploying Cisco Secure Firewall as positive because there is extensive documentation and support available, making the deployment very straightforward.

I have never considered anything other than Cisco Secure Firewall; I would never switch.

Our main use cases for Cisco Secure Firewall include firewall, IPS, and URL filtering.

The feature of Cisco Secure Firewall that I prefer the most is IPS. I appreciate the IPS feature because it's built in and I can control it using the FMC and push out the policy company-wide, making it centrally managed. The IPS benefits my company because that's one of the requirements; we used to have separate IPS. Now it's all integrated, providing ease of use for us. Cisco Secure Firewall has helped my company achieve its goals because it's a next-generation firewall. That's what we need to maintain certain compliance from the security side. Having IPS built in, firewall, URL filtering, everything is centrally managed, so we have more visibility and management.

Compared to the previous generation, the ASA, firewall rules appear differently in the ASDM and the previous generation firewall versus FTD, which I don't prefer as much. The ASA makes it easier to view those policies. There could be some improvement in the way FMC displays the policy.

I have been using Cisco Secure Firewall in my company for the last two years.

I haven't seen any breakdown or instability; the platform has been stable, and we haven't had any issues.

Cisco Secure Firewall scales with the growing needs of my company as we're going to implement clustering. I've used clustering in my past experience; it's very easy and straightforward. We had some minor issues with the clustering. I appreciate the clustering capability, though I haven't implemented it in my current job.

The customer service and technical support have been great; they've always been great.

Positive

I considered other solutions such as Palo Alto before choosing Cisco Secure Firewall. We were using Palo Alto, but we decided to go with Cisco because of its ease of use. We were a Cisco shop, and there's a micro facility where you can migrate all the ASA to the firewall.

The deployment process of Cisco Secure Firewall is simple enough. Out of the box, you perform the initial management configuration, specify the FMC location, join FMC, and then you can manage it from FMC. The process is straightforward and simple.

From my point of view, the biggest return on investment when using Cisco Secure Firewall is the single pane of glass, which is a huge plus for us. Having that visibility, managing all the alerts, IPS alerts, vulnerability management - everything is a huge plus.

My experience with the pricing, setup costs, and licensing is that it's consistent. I don't have much visibility on the licensing side, but I assume it remains the same.

There are differences between Palo Alto and Cisco, particularly on the cloud side. Palo Alto has Prisma Cloud and additional tools. I would say Cisco has room for improvement in that area for the future. We're not heavily in the cloud, so for us, it's not a significant concern.

We haven't used any new features or functionalities in Cisco Secure Firewall recently, but we plan to try file scanning, focusing more on the malware side, AMP and everything. That's something we want to try next.

My impression of the visibility and control capabilities of Cisco Secure Firewall in managing encrypted traffic is limited as we haven't tried SSL encryption yet. That's something we might explore in the future.

Regarding Cisco Secure Firewall's ability to unify policies across my environment, managing via FMC ensures accuracy. Unifying policies is essential for my company because it provides one pane of glass. Software pushes, policy implementation, traffic monitoring, and having all alerts in one place are crucial.

The impact of the cloud-delivered firewall on my company's security posture is significant. Having the same FTD running in the cloud, managed by FMC, is our future direction. We currently implement this with Azure.

Regarding zero trust security model implementation, we are exploring options with SD-WAN, both on-premises and in the cloud with firepower. I'm meeting with a Cisco engineer next week to discuss implementation strategies.

I don't see anything that needs improvement in Cisco Secure Firewall; we've been very satisfied with it. I've been using FTD for almost five to seven years now, including with a previous company, and heavily worked on migration from ASA to FTD.

From one to ten, I would rate Cisco Secure Firewall a ten.

I have worked with other solutions similar to Cisco Secure Firewall, and in the past, I worked with Pulse Secure VPN. My experience with Pulse Secure VPN was also good in the past. In the near past, I replaced a lot of Ivanti VPN with Cisco Secure Firewall. The migration to Cisco Secure Firewall was caused by many security incidents on the side of Ivanti.

From my point of view, the biggest return on investment when using Cisco Secure Firewall is that the end-users have a good experience with the remote access VPN, are happy to use it, and have to use it every day. That is very satisfying for the customer.

The scalability of Cisco Secure Firewall is sufficient to meet the growing needs of my clients.

My experience with the documentation is that sometimes it refers to Cisco ASA instead of Cisco Secure Firewall, and the screenshots are not accurate. That is sometimes confusing for my customers.

The stability and reliability of Cisco Secure Firewall is reliable. The high-availability function of Cisco Secure Firewall helps to minimize downtimes, which is why I find it reliable.

My clients have never tried to expand its usage, or there was not a need for it. It is always enough for them because we are good at planning, so they do not need to resize.

My experience with the customer service and technical support of Cisco Secure Firewall is mostly with the partner support and not with the TAC directly.

Negative

In the past, my installations of Cisco Secure Firewall were on-premise.

I would describe the deployment process for Cisco Secure Firewall as straightforward. The deployment process is very easy because Cisco Secure Firewall has a good setup in the Firepower Management Center.

I was not told about a return on investment, but my clients are happy to use the remote access VPN solution.

My experience with the price, the setup costs, and the licensing of Cisco Secure Firewall is that the price and the licenses are fair and competitive in the market.

I have worked with other solutions similar to Cisco Secure Firewall, and in the past, I worked with Pulse Secure VPN. My experience with Pulse Secure VPN was also good in the past. In the near past, I replaced a lot of Ivanti VPN with Cisco Secure Firewall. The migration to Cisco Secure Firewall was caused by many security incidents on the side of Ivanti.

One of the companies I'm working with is in the medical sector and medical vertical.

Some of the most valuable features of the Cisco Secure Firewall are that they are easy to deploy, which is a very important thing to highlight. Everybody says that about cloud, and I agree with that. If you have an account on AWS, for example, you can quickly deploy one of those devices. There are many benefits to that, and they don't require a lot of resources. They won't overwhelm your cloud, and they work very efficiently. I'm impressed with how they work on the cloud. They work as a real firewall. I don't see much difference.

The Cisco Secure Firewall product in general has room for improvement. I had a problem this weekend working with one of them, and I think it's very specific, though I'm going to be more general with my answer. Cisco has the FMC as a centralized tool, but sometimes they have too many dependencies. I faced a problem this weekend because while trying to solve an issue with one of the company's firewall management centers, I couldn't update or install an update on the platform due to a remote site being down. The device got stuck in my queue. I had to cancel my maintenance because of that.

Everyone was expecting me to fix many bugs, but because of one device, I had to cancel everything. Sometimes the ID is nice around Cisco, but another area they need to improve is the capability to manage multiple devices. The FMC manages many devices, but if I put too many, around 300 devices, it becomes very slow, and the system becomes heavy. When you compare that with solutions such as Palo Alto, Palo Alto can manage many more devices on the same type of platform.

Cisco is better at managing things such as RMAs. They do that exceptionally, even with the support. However, when we're talking about the FMC itself, sometimes they have some small issues; the platform is very slow and has too many bugs in the versions. We constantly need to update the platform to maintain stability.

I have at least 3 years of experience with the Cisco Secure Firewall.

If you have a problem and need to delete and re-add the device, it can cause an outage since it deletes all the configurations. There's no file generated for configurations, meaning you must screenshot everything and manually reconfigure that. I mention this because I do this often.

If I were to rate stability on a scale of 1 to 10, I would give it a 6.

As for scalability, I would rate it a 7. It's not that bad, but it could be better. My customer has many Cisco devices on the FMC. Cisco has various versions, from FMC 600 and 1600 to 4600s, but even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow, and it has difficulties managing all the logs and events.

I reach out to support frequently, and I think their support is good. The engineers are very well-trained, and I would give it an 8.

Cisco is always more expensive; it's actually more expensive than other brands. When you compare it to others such as Palo Alto or Fortinet, it's slightly more expensive.

Positive

Regarding the initial setup of the Cisco Secure Firewall, if we're discussing setting it up from scratch, it's not difficult. I think it's acceptable.

On a scale of 1 to 10 for ease of deploying FMC from scratch, I would rate it a 7. There's a wizard for the initial setup; you input the management IP, and that part is easy. Adding it to the FMC is also easy, but then you have to configure extensively from the graphical interface, and that's not very straightforward. You need to manually configure many items. They could allow more setup options in the wizard when connecting to the FMC. You can do things through APIs to facilitate, but if you're doing it manually, it can be challenging.

I would recommend the Cisco Secure Firewall to other businesses, but I suggest comparing it to other platforms. While I've been a Cisco specialist for a long time, experimenting with other platforms is valuable. Consider looking at Palo Alto or Fortinet, and make comparisons and benchmarks. If you have a full Cisco environment, it may be wise to go with Cisco due to benefits from enterprise agreements. But if you're starting anew, check out organizations such as Checkpoint or Palo Alto.

If that's not a blocker or a big deal, I would provide that advice. I rate the Cisco Secure Firewall a seven out of ten.

My main use cases for Cisco Secure Firewall include firewall protection and managing the ingress and egress of a fabric and cloud, involving private cloud tasks, inter-domain, and inter-tenant processes, as well as handling whatever comes in and exits the fabric.

The features from the Firewall have benefited my organization by providing more integration with the Firewall Management Center and other Cisco tools such as ACI, APEX, ISE, and several others such as PXGrid, helping to create an ecosystem of Cisco solutions.

The feature I appreciate the most about Cisco Secure Firewall is its speed, especially for a 40-gig network. 

Improving Cisco Secure Firewall could involve adding more functionality on the box without needing an FMC, as some features become less effective without it. I find it hard to think of anything else to add since there are so many features now that it's challenging to use and understand them all.

I have been using Cisco Secure Firewall since it came out, which was just a year or two ago.

Regarding the stability and reliability of Cisco Secure Firewall, the only issues I encounter are with the Secure Firewalls we have in HA. Sometimes, if they are reloaded improperly, junior staff may fail to see the HA pair, requiring physical resetting of the ports to link them together. Beyond that, I have never had a problem with a Cisco Firewall, FMC, or any of their next-generation firewalls, which speaks for itself.

I would evaluate customer service and technical support for Cisco Secure Firewall as excellent, as my Cisco team for the Army has been exceptional. I don't know how you can get better, and I don't have any complaints after ten years with the same team from Cisco.

Positive

I haven't really seen ROI on Cisco Secure Firewall yet, as we are not in a business that focuses on that. We just need the security functionality.

My experience with pricing, setup costs, and licensing for Cisco Secure Firewall is pretty good. There are a lot of in-place contracts for us that provide the benefit of discounts.

Before selecting Cisco Secure Firewall, I considered other solutions such as Palo Alto. That was about it. I was mainly looking at layer seven firewalls. 

When comparing Cisco Secure Firewall to Palo Alto, what stood out positively was the FMC, which you can buy as either a physical or virtual appliance, allowing for the tying of all your firewalls to it, whereas Palo Alto lacks such functionality or the availability to do deeper analysis such as snort, making it clear that Cisco Secure Firewall wasn't really a competition.

My advice for organizations considering Cisco Secure Firewall is to take advantage of Cisco's C-Pot program, where you can actually use their equipment in a practical setting. This allows for firsthand comparisons with other vendors, giving you clear insights into how everything works, making it worthwhile to get demo gear from our Cisco team to test before making any purchases.

I rate Cisco Secure Firewall a nine out of ten. 

It's not perfect, as nothing truly is, however, I don't know of anything that compares to it, with Palo Alto being the closest option, though their layer seven firewalls are not as effective as those of Cisco Secure Firewall.

My main use cases for Cisco Secure Firewall include serving as a perimeter firewall between the data center and users, and as the firewall between the internet and users.

An example of how Cisco Secure Firewall benefits my organization is that we use it with Azure, along with Azure firewall and FTD, and it works very well.

Cisco Secure Firewall is highly performant and easy to manage. 

Cisco Secure Firewall handles this adequately, but a simpler licensing model would be beneficial, especially when using the firewall in the cloud, since on-premises performance is limited by the hardware being used.

I have been using Cisco Secure Firewall for approximately fifteen years, starting from Cisco PIX.

Cisco Secure Firewall has demonstrated good reliability and stability. Although we did not invest heavily, which results in limited performance due to our license being restricted to one gigabit, that is our constraint rather than a Cisco limitation. I have not experienced any crashes or downtime with Cisco Secure Firewall, and everything has operated smoothly.

Cisco Secure Firewall can scale with the growing needs of my organization.

I have not needed to use customer service.

Negative

Deploying Cisco Secure Firewall is very straightforward and uncomplicated, as the systems are simple to deploy and the graphic interface is user-friendly.

My experience with the pricing, setup cost, and licensing for Cisco Secure Firewall is positive.

Before choosing Cisco Secure Firewall, I considered some competitors, as we have other firewalls from different vendors. It is beneficial to use firewalls from different vendors because if someone can overcome one firewall, there is the other firewall for protection.

I selected Cisco Secure Firewall because it works well in the Azure environment.