Cisco Defense Orchestrator vs. ManageEngine Firewall Analyzer

Cisco Defense Orchestrator is an ideal software to easily manage firewalls at the enterprise level, as well as to implement security policies that allow the corporate infrastructure to remain free of threats that can put at risk all the devices that are handled on a daily basis. For example, it is ideal for preventing network intrusions, since it has the ability to block malware and any suspicious activity. In addition, the fact that it is based on a single console provides the benefit of keeping all devices under view and thus preventing any threat in the simplest way.

Offering enhanced network security, performance, and connectivity, it is well as used in a business setting. Features including application control, web content filtering, firewall, IP address, application control, VPN, and good advanced threat protection. With enhanced features and advanced threat protection you get an awesome performance cost effective firewall device.

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• Intrusion Detection System.
• Log analytics.
• Web-traffic reporting.
• Thread management.

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

• Extra Functionality: There are a few features we don't use, either because of the size of our enterprise, or the way we have our firewalls configured. But all the elements to monitor and report on these features are still there, oftentimes meaning it takes longer to get to something we actually do use in the interface.
• Setup Time: The initial setup was very simple, mostly just adding IPs and a syslog server. But for many of the more advanced features, like the NOC view, it can take a lot of tweaking to get right.
• Intuitiveness: The reporting, while detailed and better than reading a raw syslog, can be unintuitive at times. Drilling down can sometimes get one stuck in a weird rabbit hole that isn't entirely relevant, and it's hard to get back to somewhere useful without just starting over.

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

We used the on box management platform. This required API usage for automating things. It was not scalable and a lot of features are not there. There are platforms like manage engine, but they are not Cisco FP native and had limitations as well.

Incentivized

ManageEngine was chosen over the use of AlgoSec as it slotted nicely with other Manage engine services we use for services such as active directory management. Other benefits include how lightweight and easy to install and set up it is. You can install it inside your network and start testing within 20 minutes.

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized

• Saves lot of time
• Help to proactively find issues with configured firewall

Incentivized