Likelihood to Recommend
Cisco Defense Orchestrator is an ideal software to easily manage firewalls at the enterprise level, as well as to implement security policies that allow the corporate infrastructure to remain free of threats that can put at risk all the devices that are handled on a daily basis. For example, it is ideal for preventing network intrusions, since it has the ability to block malware and any suspicious activity. In addition, the fact that it is based on a single console provides the benefit of keeping all devices under view and thus preventing any threat in the simplest way.
Read full review
Firemon product is overall good a product. It gives us a summary of who made what change, when it occurred and at what time, in real time. Their Out of box tools do satisfy the common requests for reporting and there options to create customized report allows us for more options as every environment is different. That is why I gave it an 8 rating.
Read full review Pros Single plane of management. VPN monitoring. Remote management via external IP. Cost. Read full review PCI Reporting - After identifying which firewalls and rulesets are in scope, producing a report artifact to satisfy PCI requirements on Firewall reviews is literally a two-click operation. Storing Rule Metadata - FireMon stores metadata (prefilled fields, standard fields, and custom fields) for each rule in each policy which is valuable for context during firewall reviews in particular API - FireMon exposes most if not all of its functionality via REST API Read full review Cons Their costs can be high, so when it comes to small or medium-sized companies they are limited to their acquisition due to their price. That is why plans tailored to these companies can help them to have this protection option. Its configuration can be somewhat confusing, so knowledge and skills are required. Have more configurable templates so that protection is not limited. Its implementation in the cloud is innovative and ideal for those who trust it, however not all companies trust it, so being able to implement this software locally would also be a great option. Read full review Some features could be added to the existing functionality which include NAT rules usage Rule expiration normalization from firewalls rather than entering them in rule documentation .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased Read full review Likelihood to Renew
I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.
Read full review
The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.
Read full review Usability
It save me time and I'm able to have the review - review the rule independently with using my time.
Read full review Reliability and Availability
I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.
Read full review
FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.
Read full review Performance
I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.
Read full review Support Rating
FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
Read full review Implementation Rating
Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.
Read full review
Implementation is fairly simple. Most issues can be resolved by referencing manuals.
Read full review Alternatives Considered
We didn't really look at another product - don't think there is one. Cisco Prime I think was an option, but we didn't like the GUI and didn't consider it.
Read full review
I has worked with
and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them
Read full review Scalability
Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.
Read full review Return on Investment Much faster management. Can access firewall without having to go on site if the VPN tunnel is down. Read full review The use of FireMon has eliminated the backlog in firewall policy changes, approval, and implementation. FireMon has greatly increased the accuracy of changes, and reduced the risk of planned changes (3 incidents in over 27000 change tickets--most with multiple policy changes in each, is a stellar record) Read full review ScreenShots