AlgoSec vs. Cisco Routers vs. FireMon

It works okay for auditing existing network systems but seems to have trouble with cloud configurations.

Incentivized

Cisco Routers, particularly ASRs, are well suited at the edge or perimeter of your network topology since they're capable of aggregating large data and performing fast packet processing. To be even more specific, they are great at handling full internet BGP route tables and aggregating multiple WAN connections. Some scenarios where they may be less appropriate might be for much smaller sites running less critical services that may not need "state of the art" enterprise routers.

Incentivized

FireMon is best used in a large environment (for example, I have >100
firewalls in my environment). It's best used when trying to improve
security posture and showing changes in firewall security over time. It
might not be the best choice for smaller environments or those that aren't concerned about security management.

Incentivized

• Firewall policy overview and optimisation by rule reordering and suggestions to delete unused rules
• Network map overview and implement topology changes based on source destination and port
• Pci audit results and recommendations for a better score
• Discover application based flows through auto-discovery and make changes to those flow.

Incentivized

• Helps to separate routing information for different networks for different customers.
• Helps peers with service providers and Customer Networks and starts the exchange of information between them.
• Helps facilitate internet connectivity for enterprise networks.
• Helps transferring Internet or Private Data from one place to another.

Incentivized

• Give good real time reporting for anyone making a change to any of our firewalls
• Provides good reporting tools that are out of box
• Provide good customization tools that is specific to our needs
• Upgrades are a simple process and support does relatively well with assisting us.

Incentivized

• AlgoSec need to work on their support in India.
• Insufficient documentation.
• It should support other platforms like GCP, Alibaba, etc.

Incentivized

• It will be helpful if configuration can be done using a http GUI
• Graphical Visualizing provisioned VPN services will helps in troubleshooting
• Software upgrade process should have an automated way, that helps in managing large no of devices in the network

Incentivized

• Some features could be added to the existing functionality which include NAT rules usage
• Rule expiration normalization from firewalls rather than entering them in rule documentation
• .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased

Incentivized

We are extremely likely to renew, as we have been very happy with our Cisco Routers for over 10 years. Their uptime as well as stable nature makes them ideal for us, as we are an industry that cannot afford downtime. We trust our partner to recommend our next model Cisco, when the time comes.

Incentivized

The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.

Incentivized

It worked great for on-site systems but does not scale effectively.

Incentivized

The best thing about Cisco products is their presence in community. When you have a problem you can do quick search and find whoever else had the same question and expert answer for that question. Other thing is there are Cisco certified people we can find very easily if want some help with comissioning these products

Incentivized

It save me time and I'm able to have the review - review the rule independently with using my time.

Incentivized

FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.

Incentivized

I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.

Incentivized

Cisco support is very good. Of course, sometime you will run into support guy that isn't up to the task. Buf overall, the support system is well structure. You know if this support isn't able to help, you can esclate the situation to find another help. Also, their documentation is well developed and can be very useful.

Incentivized

FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.

Incentivized

Implementation is fairly simple. Most issues can be resolved by referencing manuals.

Incentivized

User friendliness of Algosec is great!

Incentivized

Other vendors definitely bring some great features. We've gone from Fortinet to HPE, to Ruckus. Each product has benefits to consider. For us, Cisco is a trusted brand that's used about thousands of customers and many fortune companies. While some of the newer or smaller players have great features, Cisco has most of the same plus time in the trenches.

Incentivized

I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them

Incentivized

Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.

Incentivized

• Algosec has helped customers across the globe optimize their firewall policies and bring the best performance off their devices
• AlgoSec supports a wide range of devices and is constantly working to include support for many others
• The support and professional services team at AlgoSec is very knowledgeable and supportive.

Incentivized

• Network management has become easy and fast with cloud based portal.
• Network policies could be rolled out quickly across the devices.
• Improvement in Network security.
• Stable internet connection has lead to less downtime and more productivity.
• Stable internet connection in each location within the organization.

Incentivized

• FireMon's Compliance Reporting provided an immediate and tangible benefit
• FireMon helps identify egregious or erroneous rules quickly across multiple platforms
• FireMon took our audit process from an Excel spreadsheet into a far more advanced process with readily available context for reviewers

Incentivized