Cisco ASA 5500-X with FirePOWER Services vs. Cisco Meraki MX

This firewall is best suited for the network edge/perimeter deployment. The next gen features works very well and the remote access VPN is also very much suitable for the organizations which have a huge user base working remotely. The Remote Access VPN is very much customizable and the authentication integration option like LDAP and RADIUS provides and addon.

Incentivized

Cisco Meraki MX is great for a short term deployment. An all in one model can combine a cellular router, wireless access point, 10 port switch (with POE). Having a cellular model means seamless failover with a wired link. An included SFP slot on the MX68 series would be beneficial. Maybe in a newer model.

Incentivized

• The Cisco ASA with FirePOWER Services model works perfectly for network edge protection scenarios.
• It allows for the creation and connection of sites through site-to-site VPN configuration.
• It enables remote connection and home office with remote SSL or IPSEC VPN.
• It has layer 7 traffic protection and visibility.
• It has anti-malware protection from start to finish.
• The configuration is easy to perform.

Incentivized

• It provides a really good single pane of glass so you can really easily identify end to end, what is going on in your environment.
• It provides the ability for someone that doesn't necessarily need a really deep level of knowledge to be able to operate and maintain it. I think that's probably a big selling point, but I think definitely for the people that I'm selling the products who just having a dashboard and being able to log onto it and see if things are good or bad is quite key. So it does that really well.

Incentivized

• URL Filtering feature could be easier to utilize for beginners
• I'd like to see a visual of VPN networks setup and show the functioning or malfunctioning status to assist in making troubleshooting easier
• Recommendations on ACLs for beginners based on their account creation date

Incentivized

• Sometimes can be difficult to find a specific device or options in the dashboard if you can multiple networks in your organization
• No option to open a CLI session
• It can improve in the way to troubleshoot a VPN L2L connection to see all the sent messages in case there is a issue with in the negotiation.

Incentivized

Ever since we installed Cisco ASA 5500-X with FirePOWER Services we have never had to deal with an attack. We can see in the logs almost every day hackers attempting to break into our networks and failing. We also have the ability to blacklist every IP address that attempts to break into our firewalls

Incentivized

As we have it in place now, we will continue to keep it at our remote sites. Future expansion is something we are reviewing, and may well start with some of the larger switches as they seem to offer good performance and management at a reasonable price. Wireless is also something we're investing in and their devices are great for that.

Incentivized

Cisco firepower provides automatation for an organisations security operations to detect and stop the most advanced threats fast. It also assists in preventing attacks in using intelligence and innovative solutions.

Incentivized

The Cisco Meraki MX series is very easy to use. Setting up user VPN access, site to site VPN to tie multiple locations together and managing all your devices. You can even download the latest firmware and install without ever leaving the dashboard. Meraki is the very definition of easy to use

Incentivized

We have never had an outage caused by firewall failure. We have had a few outages caused by the internet failing or cloud applications going offline but never a firewall breaking down. When making changes we have a very strong change control, major software updates are always carried out out of working hours. At places where we have two firewalls in HA, we are able to do upgrades in working ours and the users will never know that an upgrade is taking place, that how great these firewalls are

Incentivized

The Cisco ASA 5500X with Firepower performance needs consideration before deploying. Although the solution is Pay as you grow, adding additional features to the system has a negative impact on overall throughput. I would more like now only to deploy the Cisco FPR units as they have better performance and will last the test of time.

Incentivized

I would recommend the purchase of the Smartnet 24x7 service in the case of a unit and the Smartnet 8x5NBD in the case of only one appliance installed on site. This service is important to always have the latest firmware updates, corrective updates and especially the hardware warranty and maintenance service in case of problems. The service is done by phone or on the official Cisco website and I can say that it is very good and efficient.

Incentivized

I haven't ever had a bad experience with Meraki support. On the few occasions where I wasn't understanding the UI or needed some clarification about what a setting actually would do, I contacted them and they were very quickly able to provide help. Returns are simple and fast, too. We had to return a defective device one time and they shipped the replacement before we had even un-racked the one that was faulty. Unlike many other vendors, they didn't ask use to a do long list of scripted diagnostics, they just took my word for it that the device was broken and sent out a replacement immediately

Incentivized

We implemented a centralized management of all our Cisco ASA 5500-x with FirePOWER Services so that we can have a holistic view of all our sites in London and other European countries. This also helps when making changes, instead of login on to each firewall we can use Firepower Management Center (FMC) to central deploy changes across all devices

Incentivized

Good product and simple to use.

Incentivized

Previous],] I was using the [pfSense] in my organization but when i switched to [Cisco ASA 5500-X with FirePOWER Services] I realized there are lots of issue and missing security features in [pfSense]. The deployment and configuration is very easy as compare to [pfSense]. I highly recommend this product to everyone.

Incentivized

Compared to the regular Cisco devices, the greatest thing will always be the ease of configuration that the Cisco Meraki MX gives by having a dashboard to eliminate a command line that can be difficult for some beginners, it is easier to identify if you make mistakes and fix them since everything is saved and visually you can see something that is not so good.

Incentivized

Scalability is pretty decent. We run into some issues with the more hubs we create. We've had to tune out the deployment between whether something's a hub or a spoke regionally. So as long as not everything is a hub in this environment and you're creating spokes that talk directly to hubs, that takes a lot of the CPU utilization off of anything that's deemed a hub.

Incentivized

• Working of remote workforce made easy
• Security was enhanced on the data traffic shared with the vendors due to the use of VPNs
• Inbound attacks were mostly blocked on the edge and saved a lot of resources (which could had been used in case of attacks getting successful on the application servers)

Incentivized

• I'm going to say positive impact. The biggest thing is especially coming from having a third party taking care of our network to us doing it ourselves. The ease of this with the overall high level visual that we can get as to how our day is starting and running reports to see how many outages have we had, what areas have they actually been in running these reports and being able to gather if it's a certain service provider that's causing an issue in a general area, maybe we need to switch service providers for ISP. So it's been great in that mannerism for us. Ease of manage, I mean, we have a limited number of staff, we have a lot of different offices across the country. And then this is relatively new for us because we did have a previous provider doing all of this for us.

Incentivized