TrustRadius: an HG Insights company

Cisco Adaptive Security Appliance (ASA) Software vs. Cisco Application Centric Infrastructure (Cisco ACI)

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Adaptive Security Appliance (ASA) Software

    Score9 out of 10
    N/ACisco Adaptive Security Appliance (ASA) software is the core OS for the ASA suite. It provides firewall functionality, as well as integration with context-specific Cisco security modules. It is scaled for enterprise-level traffic and connections.N/A

    Cisco ACI

    Score8.5 out of 10
    N/ACisco Application Centric Infrastructure (ACI) is network virtualization technology.N/A
    Pricing
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Considered Both Products
    Cisco
    Chose Cisco Adaptive Security Appliance (ASA) Software
    Our Palo Altos and Cisco ASAs are pretty comparable. They both seem to work well when used in an HA pair. They can both do IP/Port based ACLs. But the Palos also have APP-ID which helps to make sure that the traffic passing through your firewall is the type of traffic …
    Incentivized
    Cisco
    Chose Cisco ACI
    As a Cisco house, we did not evaluate any other products.
    Incentivized
    Chose Cisco ACI
    Lower cost than FabricPath, maybe a little bit cheaper than Arista when we looked into it. I wasn't involved in the initial purchasing of ACI, and was kind of against it at first, but the product has evolved a lot over the last few years and I now believe that it can …
    Incentivized
    Key User Insights
    Would buy again
    87%
    Would buy again
    40 Answers
    96%
    Would buy again
    113 Answers
    Delivers good value for the price
    95%
    Delivers good value for the price
    42 Answers
    98%
    Delivers good value for the price
    96 Answers
    Happy with the feature set
    91%
    Happy with the feature set
    42 Answers
    97%
    Happy with the feature set
    115 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    36 Answers
    94%
    Lived up to sales and marketing promises
    82 Answers
    Implementation went as expected
    98%
    Implementation went as expected
    41 Answers
    89%
    Implementation went as expected
    93 Answers
    Features
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Firewall
    Comparison of Firewall features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Application Centric Infrastructure (Cisco ACI)
    Feature
    Cisco Adaptive Security Appliance (ASA) Software
    8.9
    50 Ratings
    4% above category average
    Cisco Application Centric Infrastructure (Cisco ACI)
    -
    Ratings
    Identification Technologies7.932 Ratings00 Ratings
    Visualization Tools7.931 Ratings00 Ratings
    Content Inspection8.433 Ratings00 Ratings
    Policy-based Controls8.446 Ratings00 Ratings
    Active Directory and LDAP8.448 Ratings00 Ratings
    Firewall Management Console9.049 Ratings00 Ratings
    Reporting and Logging8.949 Ratings00 Ratings
    VPN10.049 Ratings00 Ratings
    High Availability9.649 Ratings00 Ratings
    Stateful Inspection10.046 Ratings00 Ratings
    Proxy Server9.032 Ratings00 Ratings
    Best Alternatives
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Small Businesses
    SonicWall NSA Series
    Score8.4 out of 10
    No answers on this topic
    Medium-sized Companies
    Barracuda CloudGen Firewall
    Score9.6 out of 10
    IBM Cloud Internet Services
    Score9.8 out of 10
    Enterprises
    F5 BIG-IP Advanced Firewall Manager (AFM)
    Score8.8 out of 10
    IBM Cloud Internet Services
    Score9.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Likelihood to Recommend
    9.0
    (88 ratings)
    8.5
    (131 ratings)
    Likelihood to Renew
    7.1
    (4 ratings)
    9.7
    (10 ratings)
    Usability
    -
    (0 ratings)
    5.1
    (8 ratings)
    Availability
    7.5
    (2 ratings)
    9.1
    (2 ratings)
    Performance
    -
    (0 ratings)
    9.1
    (9 ratings)
    Support Rating
    8.7
    (8 ratings)
    7.5
    (11 ratings)
    In-Person Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    8.0
    (2 ratings)
    6.0
    (5 ratings)
    Ease of integration
    6.5
    (2 ratings)
    -
    (0 ratings)
    Product Scalability
    -
    (0 ratings)
    8.6
    (9 ratings)
    Vendor post-sale
    -
    (0 ratings)
    5.5
    (1 ratings)
    User Testimonials
    Cisco Adaptive Security Appliance (ASA) SoftwareCisco ACI
    Likelihood to Recommend
    Cisco
    Cisco ASA's are great for internal network connected access between a firewall and the central management server. And, for complex networks where high security requirements with overly strict compliance are necessary. For networks with limited connectivity to the core or for poor network connectivity these are not the best solution. There are other more stand-alone firewall's that do this better. These firewall's are a little more complex to set up to start with so significant knowledge of these devices is required to set them up and ensure they are best practice installed.
    Incentivized
    Read full review
    Cisco
    The ACI solution is perfectly fit for a large or multi-site data center environment. It permits simplifying deployment, management, automation, and security. ACI is especially valuable when strong scalability, automation, security, and segmentation are required. However, ACI is less suitable for a small environment due to its complexity and high cost.
    Incentivized
    Read full review
    Pros
    Cisco
    • ASA is our VPN concentrator. The client and server are very stable and very easy to use
    • ASA also offers Intrusion Prevention, to an extent. This is also very useful for an improved security posture for a small company
    • ASA allowed us to scale very quickly. We could onboard clients, partners, and consultants and give them a great onboarding experience as well
    • Administrative costs with ASA are low. It's very easy to administer.
    Incentivized
    Read full review
    Cisco
    • Cisco ACI, The object model is very complicated. It's something difficult to understand and also because there is a user interface, there's a web user interface, but it's not optimal to use it because if you want to deploy a large amount of VLAN or a large amount of tenants, it's quite difficult to do it or it's quite challenging. Maybe if you want to configure a large amount of ports using the web interface, it's not appropriate because it takes a lot of time. It also provides APIs to do that, but as I say, the object model is very difficult to understand and there is very little documentation about automation of the ACI and maybe there is but it's not so easy to find.
    Incentivized
    Read full review
    Cons
    Cisco
    • The ASDM software is at times a nightmare to install because of different java versions[.]
    • [The firewall] could do with a power button, just to be able to do a hard reboot when needed[.]
    • It would be nice to manage the firewall via the web on port 443[.]
    Incentivized
    Read full review
    Cisco
    • I think something I've just went to a session with hyper fabric and the ideas that hyper fabric has. Keep it really simple because Cisco ACI is a complex system and adopt some of the ideas behind hyper fabric, bring it to ACI that will be really beneficial. So as I said, automation is a great thing, but it's still, you need to have the background and the really complex stuff that happens behind the scenes to leverage the value of that solution. And by adding more simplicity to it, I think that will be a great thing. And also integrating with other applications in terms of the automation.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    To be honest there has been now great products out in the market compared to Cisco ASA. I beleieve Cisco has to do a lot of improvement in this area. The other defeiniete factors is the cost when it comes to renewals which is always a premium on Cisco products
    Incentivized
    Read full review
    Cisco
    Provided with the intensive fault isolation for the CISCO ACI, we are glad that we have this Data Center Solution in place and we will continue to renew as long as the future needed requirements are meet and more helpful features will be enabled in the future with the integration of security
    Incentivized
    Read full review
    Usability
    Cisco
    No answers on this topic
    Cisco
    You'll need a lot of training and hands on experience to get the most out of the product. There are a lot of very useful features in the ACI product. Often times there are a lot of ways to get to a solution for chalanges in the field. The solutions might be different eacht time. Knowing which one to implement is somtimes a challenge.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    I generally have not noticed the outages, however since it's a machine it can malfunction, we need to implement the firewall infrastructure in such a way that it is highly available with device failure, region failure etc. Else any solution will be having the issues if they are not build with resiliency.
    Incentivized
    Read full review
    Cisco
    It allways works. If there are problems with links going down by accident (say someone accidentally unpatches something they shouldn't have), we rarely miss more then one packet over the link. Also, using VPCs we are able to upgrade the software on the switches without the attached EPs ever noticing.
    Incentivized
    Read full review
    Performance
    Cisco
    No answers on this topic
    Cisco
    Day to day operations on Cisco ACI do not require much human intervention, the platform ticks over without any major faults. Being able to rapidly replicate the communication between two groups of machines across multiple sub networks speeds up new application delivery, and the integration into vmWare allows multiple teams within IT to work together to problem solve rapidly.
    Incentivized
    Read full review
    Support Rating
    Cisco
    The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.
    Incentivized
    Read full review
    Cisco
    Cisco provides users and partners with a multitude of data for you to consume. I think that the stuff in the public domain goes a long way to assisting you find any answers you may need, plus insights and information from areas such as DevNet provide you with access to more than just the traditional release notes and the like
    Incentivized
    Read full review
    In-Person Training
    Cisco
    No answers on this topic
    Cisco
    The Cisco ACI training provided by Cisco was in depth, covered all of our requirements, and allowed us to implement and maintain the platform without issues.
    Incentivized
    Read full review
    Implementation Rating
    Cisco
    It was quite a good one, how ever requires an expertise to deploy hence the SMB segment would be finding it difficult to implement this product. The one good reason is that there are lot of ASA certified engineers in compared to the other certified engineers. Hence this resembles positively on the deployment as you have quite a lot of experienced engineer on your deployment
    Incentivized
    Read full review
    Cisco
    Being involved in the implmentation gives you more overview on how things are supposed to be working and communicating, you can easily performce troubleshooting and understanding the troubleshooting scenario
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    We were using [pfSense] before in our environment but we regularly facing difficulties over it due to software bugs & downtime. After implementing Cisco ASA, it resolved our availability issue & provides us a reliable solution with the best security features & easy to understand GUI.
    Incentivized
    Read full review
    Cisco
    Actually we start our learning in networking career with Cisco. So it is very useful or easier to learn this product. And honestly speaking, I didn't work in any other data center solution other than Cisco. So I cannot compare what it gives us more than other popular stuff. But this is very nice product like from Cisco.
    Incentivized
    Read full review
    Scalability
    Cisco
    No answers on this topic
    Cisco
    Cisco ACI scales well and is suited in scenarios such as multi-cloud or large data centre implementations. It is not suited to smaller deployments as the efficiencies that it provides are not fully realised. It is well suited in large environments that contain both virtual and bare-metal machines allowing a great deal of flexibility. It is also perfect to support multi-tenancy platforms.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • Most network engineers have worked with ASA, so there is no need for re-training when adding or turning over staff
    • Current configs from older devices plug in easily, and are operational on larger devices if an upgrade is required
    • Many support options available
    Incentivized
    Read full review
    Cisco
    • We've definitely spent quite a bit of time relearning how to do things in ACI, but I think the investment has been well worth while considering that we can now deploy tenants and leaves from the ground up in a matter of seconds.
    • We can if we choose to upgrade an entire datacenters worth of switches in a single night. (We've chosen to break it up for availability requirements, but if you didn't require 99.999% uptime like us you may be able to do it)
    Incentivized
    Read full review
    ScreenShots