Cisco Firepower 1000 Series vs Next-Generation Firewalls - PA Series

• My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
• Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.

Read full review

• AppID is able to see what the actual internet traffic is. For instance instead of port 443 just being "Internet traffic" we can define access to Facebook-base or all the other facets of facebook.
• UserID allows us to define policies based on group or user access and integrates with our Active Directory. This helps to configure a least access privilege and if we find misuse of the network we can tighten specific users to a stricter policy.
• GlobalProtect VPN connection helps our employee's connect from home remotely. This provides a very secure connection with minimal configuration.
• Wildfire provides very up-to-date information regarding global attack mitigations and stopping techniques.

Read full review

• These devices don't always take changes without a reboot, which can be hard in a production device.
• Cisco is no always clear in how to configure things.
• Routing features can be confusing, we even had a consultant a bit confused over setup.

Read full review

• The CLI is a bit confusing, and it's difficult to find what you're looking for. Takes a lot of practice. Definitely not as good as the Cisco CLI.
• Updating the firmware is often a very dangerous process, especially when jumping minor or major releases. More QA should be done to validate and ensure no issues during upgrades. I'll admit it's gotten better over time, but there is still room for improvement.

Read full review

• We have seen improved throughput on our internet.
• It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
• This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.

Read full review

• Utilizing Panorama to manage all of our Firewalls Policies by creating device groups is a real time saver. We only need to configure policies once and push them to the appropriate firewalls saving a lot of time.
• Having the added security feature protection is good peace of mind in an ever-increasing threat landscape.
• Monitoring traffic by IP, URL or username provides excellent insight into our traffic.

Read full review