What users are saying about
Top Rated
187 Ratings
Top Rated
187 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.4 out of 100
12 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.5 out of 100

Likelihood to Recommend

Cisco ASA

CISCO ASA is suitable for every organization from MID range to HIGH RANGE. However, for small customers, they can buy Cisco product but support cost will be the challenge. However nowadays one tool is never enough, but Cisco gives us a unified way of managing infra with there different solutions. I agree they are more stable products comparing any products which are available in the Market.
Jitu Mani Das | TrustRadius Reviewer

Palo Alto Networks Threat Protection

Palo Alto NTP is an appropriate suite of protection for any enterprise environment or anyone that truly needs some serious perimeter protection in a one-stop, all-in-one unit. There are no modules or add-ons or clunky interfaces to deal with it; everything works out of one management plane, licensing, implementation, monitoring. updating, etc. As a network admin, that is immensely valuable to me. Additionally, I get real-time reporting on all the stuff NTP is catching, and it is nothing to shirk at. The real value in NTP comes in only after you begin doing SSL-decryption, however, to truly inspect the traffic. Short of that, you are just seeing a bunch of encrypted data and the NTP suite of tools isn't going to avail you. NTP plus decryption, though, is invaluable!
Derek Benson | TrustRadius Reviewer

Feature Rating Comparison

Firewall

Cisco ASA
8.3
Palo Alto Networks Threat Protection
Identification Technologies
Cisco ASA
7.7
Palo Alto Networks Threat Protection
Visualization Tools
Cisco ASA
6.9
Palo Alto Networks Threat Protection
Content Inspection
Cisco ASA
8.1
Palo Alto Networks Threat Protection
Policy-based Controls
Cisco ASA
8.9
Palo Alto Networks Threat Protection
Active Directory and LDAP
Cisco ASA
9.1
Palo Alto Networks Threat Protection
Firewall Management Console
Cisco ASA
7.3
Palo Alto Networks Threat Protection
Reporting and Logging
Cisco ASA
7.7
Palo Alto Networks Threat Protection
VPN
Cisco ASA
8.8
Palo Alto Networks Threat Protection
High Availability
Cisco ASA
9.4
Palo Alto Networks Threat Protection
Stateful Inspection
Cisco ASA
9.3
Palo Alto Networks Threat Protection
Proxy Server
Cisco ASA
7.9
Palo Alto Networks Threat Protection

Pros

Cisco ASA

  • Consistent commands. A lot of the general commands used on other Cisco switches and routers also work here, making it easy script common tasks and changes across multiple devices without having to switch command structure.
  • Processing power. The ASA is incredibly fast and doesn't introduce much if any latency.
Brian Taylor | TrustRadius Reviewer

Palo Alto Networks Threat Protection

  • Data filtering.
  • URL categorization.
  • File blocking.
Anonymous | TrustRadius Reviewer

Cons

Cisco ASA

  • The gui interface is good, but often lacks the ability to perform full tasks without command line.
  • Integration with other products can be complicated and you may need to find the custom commands from the 3rd party or support to make it work.
  • A lot of their advanced features are present, but aren't fully integrated yet.
Anonymous | TrustRadius Reviewer

Palo Alto Networks Threat Protection

  • Visibility into signatures and how they function/what triggers them would be very beneficial.
  • Lacking customizability compared to other tools.
  • Inability to write custom signatures easily and for traffic with small (less than 8 bit) signatures.
Alex Waitkus, CISSP-ISSAP, OSCP | TrustRadius Reviewer

Likelihood to Renew

Cisco ASA

Cisco ASA 9.0
Based on 1 answer
I am committed to low-OpEx usage model, know most (nearly all) hw and sw features and have a good customer base to continue to use Cisco ASA.
Sergei Chernooki | TrustRadius Reviewer

Palo Alto Networks Threat Protection

No score
No answers yet
No answers on this topic

Support Rating

Cisco ASA

Cisco ASA 8.4
Based on 12 answers
The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.
Fraser Clark | TrustRadius Reviewer

Palo Alto Networks Threat Protection

No score
No answers yet
No answers on this topic

Alternatives Considered

Cisco ASA

Cisco made sense from the standpoint that my engineers already knew it and there was little learning curve. Personally, I prefer a purpose-built hardware solution. Untangle is not ready for the enterprise as a whole but works great to do web/application filtering . Checkpoint and Palo are VERY high cost and have few support options
Larry Chisholm | TrustRadius Reviewer

Palo Alto Networks Threat Protection

We ended up with Palo Alto and NTP for a multitude of reasons, including price point, the clean interface, great reporting, and ease of management. NTP specifically covered all our bases and then some over the competition.
Derek Benson | TrustRadius Reviewer

Return on Investment

Cisco ASA

  • We've gotten every penny's worth of use with our Cisco ASA firewalls - they were a few thousand dollars to purchase, even in HA, and have been in production for over 5 years
  • I'm glad that when the Cisco ASA IKE buffer overflow vulnerability was released, Cisco provided a code update, even though the 8.2-series code was EOL. This saved us and many companies from scrambling and spending big $ and time to put a workaround in.
Anonymous | TrustRadius Reviewer

Palo Alto Networks Threat Protection

  • Threat Protection adds a positive multi layered defense.
  • Reduces time to review and triage unwanted network connections by implementing Geo Blocking.
  • Ease of deploying a single Security Group Profile across multiple existing or new rules reduces management time.
Anonymous | TrustRadius Reviewer

Pricing Details

Cisco ASA

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Palo Alto Networks Threat Protection

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

Cisco ASA
8.2
Palo Alto Networks Threat Protection
9.5

Likelihood to Renew

Cisco ASA
9.0
Palo Alto Networks Threat Protection

Support Rating

Cisco ASA
8.4
Palo Alto Networks Threat Protection

Add comparison