Top Rated
188 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.4 out of 100
12 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.4 out of 100

Likelihood to Recommend

Cisco ASA

CISCO ASA is suitable for every organization from MID range to HIGH RANGE. However, for small customers, they can buy Cisco product but support cost will be the challenge. However nowadays one tool is never enough, but Cisco gives us a unified way of managing infra with there different solutions. I agree they are more stable products comparing any products which are available in the Market.
Jitu Mani Das | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

Overall website access control via the application or specific URL works well and is pretty easy to configure out of the box assuming you purchased the license. For organizations that have a wide variety of specific user needs for one-off websites, it works fantastic in conjunction with using an active directory group to manage this. Utilizing URL Categories is a very simple and easy way to provide a wider net when specific website control is not such a factor. If URL by category is not granular enough, you also have the option to utilize access permissions or restrictions based on external dynamic lists
Anonymous | TrustRadius Reviewer

Feature Rating Comparison

Firewall

Cisco ASA
8.3
Palo Alto Networks URL Filtering PAN-DB
Identification Technologies
Cisco ASA
7.7
Palo Alto Networks URL Filtering PAN-DB
Visualization Tools
Cisco ASA
6.9
Palo Alto Networks URL Filtering PAN-DB
Content Inspection
Cisco ASA
8.1
Palo Alto Networks URL Filtering PAN-DB
Policy-based Controls
Cisco ASA
8.8
Palo Alto Networks URL Filtering PAN-DB
Active Directory and LDAP
Cisco ASA
9.1
Palo Alto Networks URL Filtering PAN-DB
Firewall Management Console
Cisco ASA
7.3
Palo Alto Networks URL Filtering PAN-DB
Reporting and Logging
Cisco ASA
7.9
Palo Alto Networks URL Filtering PAN-DB
VPN
Cisco ASA
8.9
Palo Alto Networks URL Filtering PAN-DB
High Availability
Cisco ASA
9.5
Palo Alto Networks URL Filtering PAN-DB
Stateful Inspection
Cisco ASA
9.3
Palo Alto Networks URL Filtering PAN-DB
Proxy Server
Cisco ASA
7.9
Palo Alto Networks URL Filtering PAN-DB

Pros

Cisco ASA

  • Consistent commands. A lot of the general commands used on other Cisco switches and routers also work here, making it easy script common tasks and changes across multiple devices without having to switch command structure.
  • Processing power. The ASA is incredibly fast and doesn't introduce much if any latency.
Brian Taylor | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

  • Granular filtering with specific categories
  • Constantly updated
  • Alerts you when new categories are added
Kaitlyn Wright | TrustRadius Reviewer

Cons

Cisco ASA

  • The gui interface is good, but often lacks the ability to perform full tasks without command line.
  • Integration with other products can be complicated and you may need to find the custom commands from the 3rd party or support to make it work.
  • A lot of their advanced features are present, but aren't fully integrated yet.
Anonymous | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

  • The top down URL filtering match can sometimes be tricky as the user may match something higher in the list and not receive all the permissions you intended.
  • The reporting feature for specific URL's could be more easily configured.
  • There is an additional cost for the URL filtering license.
Anonymous | TrustRadius Reviewer

Likelihood to Renew

Cisco ASA

Cisco ASA 9.0
Based on 1 answer
I am committed to low-OpEx usage model, know most (nearly all) hw and sw features and have a good customer base to continue to use Cisco ASA.
Sergei Chernooki | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

No score
No answers yet
No answers on this topic

Support Rating

Cisco ASA

Cisco ASA 8.4
Based on 12 answers
The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.
Fraser Clark | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

Palo Alto Networks URL Filtering PAN-DB 9.0
Based on 2 answers
Palo support is excellent, and I have never had to wait when contacting them for support. One of the best support teams in the business, in my opinion.
Anonymous | TrustRadius Reviewer

Alternatives Considered

Cisco ASA

Cisco made sense from the standpoint that my engineers already knew it and there was little learning curve. Personally, I prefer a purpose-built hardware solution. Untangle is not ready for the enterprise as a whole but works great to do web/application filtering . Checkpoint and Palo are VERY high cost and have few support options
Larry Chisholm | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

Kaitlyn Wright | TrustRadius Reviewer

Return on Investment

Cisco ASA

  • We've gotten every penny's worth of use with our Cisco ASA firewalls - they were a few thousand dollars to purchase, even in HA, and have been in production for over 5 years
  • I'm glad that when the Cisco ASA IKE buffer overflow vulnerability was released, Cisco provided a code update, even though the 8.2-series code was EOL. This saved us and many companies from scrambling and spending big $ and time to put a workaround in.
Anonymous | TrustRadius Reviewer

Palo Alto Networks URL Filtering PAN-DB

  • Ease of user access via active directory groups has been a big time saver and reduced management overhead of having a myriad of specific rules for one off user access requests.
  • You can customize the user response pages, so for instance if a user gets a deny response page, we can provide them our direct contact info on how to request a change in the URL filtering policy thus reducing the need for help desk tickets that sit in a queue for any duration.
  • The request a category change feature at Palo works well and always happens within 24 hours. Meaning if a new site is incorrectly categorized into something you are blocking via URL filtering, you can quickly request a re-categorization and be up and running without making any policy changes to your organization's firewall.
Anonymous | TrustRadius Reviewer

Pricing Details

Cisco ASA

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Palo Alto Networks URL Filtering PAN-DB

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

Cisco ASA
8.2
Palo Alto Networks URL Filtering PAN-DB
8.0

Likelihood to Renew

Cisco ASA
9.0
Palo Alto Networks URL Filtering PAN-DB

Support Rating

Cisco ASA
8.4
Palo Alto Networks URL Filtering PAN-DB
9.0

Add comparison