What users are saying about
Top Rated
186 Ratings
Top Rated
186 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.4 out of 100
Top Rated
102 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.3 out of 100

Likelihood to Recommend

Cisco ASA

CISCO ASA is suitable for every organization from MID range to HIGH RANGE. However, for small customers, they can buy Cisco product but support cost will be the challenge. However nowadays one tool is never enough, but Cisco gives us a unified way of managing infra with there different solutions. I agree they are more stable products comparing any products which are available in the Market.
Jitu Mani Das | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

The Palo Alto device is well suited for a direct replacement for any traditional or other firewall. There is little room for error on this device, it will do exactly what you have it configured for. Between security zones, security policies, nat policies, policy based forwarding, and everything in between, you have to keep your head on straight when making big or small changes.
The Palo Alto does have one overall issue our users report more than anything. The Palo Alto is a strict NAT device, so unless you have the ability to 1 to 1 map IP addresses for your users who need something beside strict NAT limitations, the Palo Alto will cause you grief.
Anonymous | TrustRadius Reviewer

Feature Rating Comparison

Firewall

Cisco ASA
8.3
Next-Generation Firewalls - PA Series
9.0
Identification Technologies
Cisco ASA
7.7
Next-Generation Firewalls - PA Series
9.1
Visualization Tools
Cisco ASA
6.9
Next-Generation Firewalls - PA Series
8.3
Content Inspection
Cisco ASA
8.1
Next-Generation Firewalls - PA Series
9.3
Policy-based Controls
Cisco ASA
8.9
Next-Generation Firewalls - PA Series
9.3
Active Directory and LDAP
Cisco ASA
9.1
Next-Generation Firewalls - PA Series
9.0
Firewall Management Console
Cisco ASA
7.3
Next-Generation Firewalls - PA Series
8.8
Reporting and Logging
Cisco ASA
7.7
Next-Generation Firewalls - PA Series
8.7
VPN
Cisco ASA
8.8
Next-Generation Firewalls - PA Series
8.4
High Availability
Cisco ASA
9.4
Next-Generation Firewalls - PA Series
9.6
Stateful Inspection
Cisco ASA
9.3
Next-Generation Firewalls - PA Series
9.5
Proxy Server
Cisco ASA
7.9
Next-Generation Firewalls - PA Series
8.7

Pros

Cisco ASA

  • Consistent commands. A lot of the general commands used on other Cisco switches and routers also work here, making it easy script common tasks and changes across multiple devices without having to switch command structure.
  • Processing power. The ASA is incredibly fast and doesn't introduce much if any latency.
Brian Taylor | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

  • AppID is able to see what the actual internet traffic is. For instance instead of port 443 just being "Internet traffic" we can define access to Facebook-base or all the other facets of facebook.
  • UserID allows us to define policies based on group or user access and integrates with our Active Directory. This helps to configure a least access privilege and if we find misuse of the network we can tighten specific users to a stricter policy.
  • GlobalProtect VPN connection helps our employee's connect from home remotely. This provides a very secure connection with minimal configuration.
  • Wildfire provides very up-to-date information regarding global attack mitigations and stopping techniques.
Christopher St.Amand | TrustRadius Reviewer

Cons

Cisco ASA

  • The gui interface is good, but often lacks the ability to perform full tasks without command line.
  • Integration with other products can be complicated and you may need to find the custom commands from the 3rd party or support to make it work.
  • A lot of their advanced features are present, but aren't fully integrated yet.
Anonymous | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

  • The CLI is a bit confusing, and it's difficult to find what you're looking for. Takes a lot of practice. Definitely not as good as the Cisco CLI.
  • Updating the firmware is often a very dangerous process, especially when jumping minor or major releases. More QA should be done to validate and ensure no issues during upgrades. I'll admit it's gotten better over time, but there is still room for improvement.
Anonymous | TrustRadius Reviewer

Likelihood to Renew

Cisco ASA

Cisco ASA 9.0
Based on 1 answer
I am committed to low-OpEx usage model, know most (nearly all) hw and sw features and have a good customer base to continue to use Cisco ASA.
Sergei Chernooki | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 10.0
Based on 1 answer
The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed
Anonymous | TrustRadius Reviewer

Usability

Cisco ASA

No score
No answers yet
No answers on this topic

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 10.0
Based on 2 answers
In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.
Anonymous | TrustRadius Reviewer

Support Rating

Cisco ASA

Cisco ASA 8.4
Based on 12 answers
The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.
Fraser Clark | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 8.5
Based on 12 answers
We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.
Paul Luchini | TrustRadius Reviewer

Alternatives Considered

Cisco ASA

Cisco made sense from the standpoint that my engineers already knew it and there was little learning curve. Personally, I prefer a purpose-built hardware solution. Untangle is not ready for the enterprise as a whole but works great to do web/application filtering . Checkpoint and Palo are VERY high cost and have few support options
Larry Chisholm | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

I have used Cisco & Sonicwall primarily in most of my 23+ years of network security experience. Over the years all of these platforms have matured, but Palo Alto beats them all in terms of user interface.

The ability to run reports, get access to data immediately, and have the data be extremely accurate and granular is what sets Palo Alto apart from the others. Deployment of the VPN client(s) on multiple platforms is simple to manage and doesn't break other applications like many other VPN client software does. The performance of the firewall from a throughput and monitoring standpoint is second to none.
Anonymous | TrustRadius Reviewer

Return on Investment

Cisco ASA

  • We've gotten every penny's worth of use with our Cisco ASA firewalls - they were a few thousand dollars to purchase, even in HA, and have been in production for over 5 years
  • I'm glad that when the Cisco ASA IKE buffer overflow vulnerability was released, Cisco provided a code update, even though the 8.2-series code was EOL. This saved us and many companies from scrambling and spending big $ and time to put a workaround in.
Anonymous | TrustRadius Reviewer

Next-Generation Firewalls - PA Series

  • Utilizing Panorama to manage all of our Firewalls Policies by creating device groups is a real time saver. We only need to configure policies once and push them to the appropriate firewalls saving a lot of time.
  • Having the added security feature protection is good peace of mind in an ever-increasing threat landscape.
  • Monitoring traffic by IP, URL or username provides excellent insight into our traffic.
Anonymous | TrustRadius Reviewer

Pricing Details

Cisco ASA

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Next-Generation Firewalls - PA Series

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

Cisco ASA
8.2
Next-Generation Firewalls - PA Series
9.6

Likelihood to Renew

Cisco ASA
9.0
Next-Generation Firewalls - PA Series
10.0

Usability

Cisco ASA
Next-Generation Firewalls - PA Series
10.0

Support Rating

Cisco ASA
8.4
Next-Generation Firewalls - PA Series
8.5

Add comparison