Azure Bastion is a managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses.
$0.19
per hour
FireMon
Score 7.9 out of 10
Enterprise companies (1,001+ employees)
FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to automate policy changes, meet compliance standards, to minimize policy-related risk. Since creating their policy management solution in 2004, FireMon states they've helped…
N/A
WatchGuard Network Security
Score 8.8 out of 10
N/A
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
It is the best suited to access your Azure VM's fast, secure and with a reliable connection. It may be less suitable then and RDP connection in case you need more customization with your networking especcially with your subnets. Also copy paste feature can be a limitation.
FireMon is best used in a large environment (for example, I have >100 firewalls in my environment). It's best used when trying to improve security posture and showing changes in firewall security over time. It might not be the best choice for smaller environments or those that aren't concerned about security management.
It's well suited for businesses that want better features than a standard router, but are willing to pay the extra price for the product and someone to configure, set up and maintain the router. It's probably less desirable for home users or very small home offices or unqualified network users.
The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.
We have been renewing and purchasing new equipment for the last 20 years. This is because the equipment is easy to use and manage and also quite affordable. Compared to other products, Watchguard just works and has not had the issues with device security seen in other products. They have been a reliable partner.
Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.
FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.
Availability has always been a strong point of this product, it is rare that watchguard does not have a solution for customers' network monitoring needs.
I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.
The performance of WatchGuard Network Security is very good, in the years that we have used the solution we have only had a single error and Watchguard itself was able to solve it. Furthermore, when purchasing any product, the partner always evaluates the capacity of the solution to recommend the most appropriate product for our needs.
FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
We have only had to contact them once during the initial set up to help bring the internet back on line. After that for the most part our systems have been automated, and could easily be checked form their online FAQ and Knowledge base that they provide. Everything else is easily handled from their browser based interface
We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.
WatchGuard Network Security offers varied methods of implementation. Their devices are very easy to set up manually, and for a more automated setup where many devices need to be deployed, they have different offerings like RapidDeploy (prepopulate a config for a specific device in the portal), registering the device's serial number to manage it through cloud services on first boot (including the option to populate a USB stick with basic interface setup if required) and the ability to run your own Management Server and register to be deployed serial numbers, so the device connects to your own hosted management server on first boot.
Bastion is like one of the best feature of Azure portal as it enables a very easy browser based connection to your VM's in your Azure subscription. It is easier and faster to use RDP .
I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them
I was not involved with the decision making for WatchGuard versus another product. However, I know WatchGuard is significantly less expensive than other brands. My overall preference would be Ubiquiti due to their continuous improvement of the product with tons of great features. I know WatchGuard is making great advances, but the progress seems slower in comparison.
Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.
This product is very scalable since previously everything related to Watchguard was on premises but that has now changed with the inclusion of watchguard cloud. Now the product has evolved to have full control of firewalls at the cloud level.
