Cisco Firepower 1000 Series vs. F5 BIG-IP Advanced Firewall Manager (AFM)

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Cisco Firepower 1000 Series
Score 7.7 out of 10
N/A
The Cisco Firepower® 1000 Series for small to medium-size businesses and branch offices is a family of four threat-focused Next-Generation Firewall (NGFW) security platforms designed to deliver business resiliency through superior threat defense. The vendor provides that they offers exceptional sustained performance when advanced threat functions are enabled. The 1000 Series’ throughput range addresses use cases from the small office, home office, remote branch office to the Internet edge. The…N/A
F5 BIG-IP Advanced Firewall Manager (AFM)
Score 9.8 out of 10
N/A
F5 Networks offers the F5 BIG-IP Advanced Firewall Manager, a firewall software combining a number of features including DDoS, DNS security, and other protections.N/A
Pricing
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Editions & Modules
Firepower 1000
1,000-5,000
per appliance
No answers on this topic
Offerings
Pricing Offerings
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Top Pros
Top Cons
Features
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Firewall
Comparison of Firewall features of Product A and Product B
Cisco Firepower 1000 Series
8.3
33 Ratings
2% below category average
F5 BIG-IP Advanced Firewall Manager (AFM)
8.6
2 Ratings
1% above category average
Identification Technologies8.031 Ratings8.02 Ratings
Visualization Tools7.130 Ratings7.02 Ratings
Content Inspection8.230 Ratings9.02 Ratings
Policy-based Controls8.633 Ratings8.02 Ratings
Active Directory and LDAP8.629 Ratings10.01 Ratings
Firewall Management Console7.032 Ratings7.02 Ratings
Reporting and Logging8.033 Ratings8.02 Ratings
VPN9.128 Ratings10.01 Ratings
High Availability9.232 Ratings9.02 Ratings
Stateful Inspection8.928 Ratings9.02 Ratings
Proxy Server00 Ratings10.01 Ratings
Best Alternatives
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Small Businesses
pfSense
pfSense
Score 9.2 out of 10
pfSense
pfSense
Score 9.2 out of 10
Medium-sized Companies
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
Enterprises
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Likelihood to Recommend
7.4
(34 ratings)
7.6
(5 ratings)
Likelihood to Renew
7.2
(2 ratings)
-
(0 ratings)
Usability
8.0
(5 ratings)
-
(0 ratings)
Availability
8.4
(2 ratings)
-
(0 ratings)
Performance
8.3
(29 ratings)
-
(0 ratings)
Support Rating
8.5
(34 ratings)
9.0
(1 ratings)
Implementation Rating
9.0
(1 ratings)
-
(0 ratings)
Ease of integration
8.4
(2 ratings)
-
(0 ratings)
User Testimonials
Cisco Firepower 1000 SeriesF5 BIG-IP Advanced Firewall Manager (AFM)
Likelihood to Recommend
Cisco
I think it is well suited for smaller companies or (as in our case) extension to a central system with higher performance. My personal guess is, that it can be quite annoying with those delays in bigger environments, when 20 or more devices needed to be managed. From the point of security, support and updates it works quite good and seem to have no downsides.
Read full review
F5
We were able to eliminate a firewall from our network architecture by integrating the module into our existing F5 BIG-IP Advanced Firewall Manager (AFM). This allowed us to save on tech refresh costs, since the F5 was able to handle the module without much additional strain on the device. However, if a firewall had features that the AFM lacked, then using that firewall in tandem with an F5 would be preferable.
Read full review
Pros
Cisco
  • My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
  • Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.
Read full review
F5
  • Load balancing using pools
  • SSL offloading
  • iRules for threat handling
Read full review
Cons
Cisco
  • ACLS in gui are PIA cant see object details
  • Objects in ACLs dont show IP addresses
  • Have to renames every object to name+ip to make acl GUI useable
  • Speed to data can use improvement.
  • Health warnings should allow you to resolve you have to dig n search in some cases.
Read full review
F5
  • If unsure, can be overly cautious.
  • There are few changes the end user can make.
Read full review
Likelihood to Renew
Cisco
It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall
Read full review
F5
No answers on this topic
Usability
Cisco
Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.
Read full review
F5
No answers on this topic
Reliability and Availability
Cisco
Has not let me down yet.
Read full review
F5
No answers on this topic
Performance
Cisco
Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.
Read full review
F5
No answers on this topic
Support Rating
Cisco
I have had troubles with Firepower Management Center and the FTD's in the past. Sticking to a Gold Star image and upgrading when the "bugs" are fixed is great. That still doesn't mean you are left vulnerable though. The extra features are just not enabled yet. Great product and calling support is readily available for any issue.
Read full review
F5
F5 Advanced Firewall Manager has been a solid, strong solution to both keep our systems safe and being seamless for our end users. Most of the time, the end-user is not impacted and does not even know F5 Advanced Firewall Manager is running which is exactly what we are looking for.
Read full review
Implementation Rating
Cisco
Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.
Read full review
F5
No answers on this topic
Alternatives Considered
Cisco
Cisco Meraki MX is much more simple to configure it if you compare to Cisco Firepower 1000, but it is more limited to pur some complex configurations. The Cisco Firepower 1000 Series is typically deployed as a physical appliance, while the Meraki MX can be deployed as a physical or virtual appliance.The Firepower 1000 Series has a more complex user interface, with a steeper learning curve, but offers more customization and configuration options. The Meraki MX has a simpler, more intuitive interface,
Read full review
F5
Both F5 [BIG-IP Advanced Firewall Manager] and Radware require training as they are not easy to use. But Radware uses some configuration that needs deep learning and proper labs. From an admin's perspective, Configuration and management for F5 [BIG-IP Advanced Firewall Manager are] less. Also, the cost of implementing F5 [BIG-IP Advanced Firewall Manager] is lesser than that of Radware Alteon.
Read full review
Return on Investment
Cisco
  • We have seen improved throughput on our internet.
  • It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
  • This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.
Read full review
F5
  • When we had to decide on whether to buy different hardware our team were all in support of renewal for F5 [BIG-IP Advanced Firewall Manager]
  • F5 [BIG-IP Advanced Firewall Manager] requires proper training on tools and clear concepts of packets, headers, and content to create WAF policies
  • Overall, we are satisfied by the ROI provided by our F5 AFM and GTMs
Read full review
ScreenShots