Likelihood to Recommend I think it is well suited for smaller companies or (as in our case) extension to a central system with higher performance. My personal guess is, that it can be quite annoying with those delays in bigger environments, when 20 or more devices needed to be managed. From the point of security, support and updates it works quite good and seem to have no downsides.
Read full review Generally speaking, our customers have standard requirements and the WatchGuard Network Security Firebox is there to ensure they stay protected. We've never had a successful breach on a customer's on-premise setup with a WatchGuard Network Security Firebox installed. 3rd parties (like CCTV, Printers, Login Systems, etc.) do not know which port their devices work over, so we have to identify that with them and there are often delays when this occurs.
Read full review Pros My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office. Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions. Read full review Incoming Torrent attempts were blocked, but outgoing (by a user) were permitted. Similarly, other direct attempts were summarily blocked. provides full administrative support for analysis of usage and scope. strong Wi-Fi support and security - area wi-fi maps They think of all the things secure and I don't have to worry about it. I have not identified anything else that needs improvement - I am well satisfied. Read full review Cons ACLS in gui are PIA cant see object details Objects in ACLs dont show IP addresses Have to renames every object to name+ip to make acl GUI useable Speed to data can use improvement. Health warnings should allow you to resolve you have to dig n search in some cases. Read full review Bridging ports, after the firewall is setup, isn't as easy as it could be. Cloud integration for management requires recreating the entire device. It should just convert the current config. Adding a Proxy policy should be on a different page from the other policy creation page. Read full review Likelihood to Renew It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall
Read full review I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions
Read full review Usability Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.
Read full review Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.
Read full review Reliability and Availability Has not let me down yet.
Read full review Applications errors should always be expected in any kind of technology. What matters most is the way you find to resolve it.
Read full review Performance Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.
Read full review WatchGuard works seemlessly and so in the background you don't realize it's there until you need it!
Read full review Support Rating I have had troubles with Firepower Management Center and the FTD's in the past. Sticking to a Gold Star image and upgrading when the "bugs" are fixed is great. That still doesn't mean you are left vulnerable though. The extra features are just not enabled yet. Great product and calling support is readily available for any issue.
Read full review We have only had to contact them once during the initial set up to help bring the internet back on line. After that for the most part our systems have been automated, and could easily be checked form their online FAQ and Knowledge base that they provide. Everything else is easily handled from their browser based interface
Read full review In-Person Training We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.
Read full review Online Training Online training is good for learning how to use the product. It does not teach security strategy because that is not its intent.
Read full review Implementation Rating Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.
Read full review I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.
Read full review Alternatives Considered Cisco Meraki MX is much more simple to configure it if you compare to Cisco Firepower 1000, but it is more limited to pur some complex configurations. The Cisco Firepower 1000 Series is typically deployed as a physical appliance, while the Meraki MX can be deployed as a physical or virtual appliance.The Firepower 1000 Series has a more complex user interface, with a steeper learning curve, but offers more customization and configuration options. The Meraki MX has a simpler, more intuitive interface,
Read full review At 3 of my locations I use both a Sonic Wall and a watch guard. In my experience, the sonic wall has a much better interface. I feel it was much easier for someone that has never accessed a fire wall to be able to make changes and learn very quickly. I feel the Watchguard has better built in applications and the VPN was easier to use and access.
Read full review Scalability We scaled it exactly as we needed it to be! Easy, money-saving, and we didn't end up with features or options that we'd never use or worry about.
Read full review Return on Investment We have seen improved throughput on our internet. It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment. This will allow us to move forward with a more stable and configurable environment with security available we didn't have before. Read full review The VPNs are very easy to configure, less time to loose at new implementation. The traffic monitor can be improved, I can't see the ISO layers to do a faster diagnosis. Having an ADDS authentication is a plus, can use it with rules and vpn for remote access. Very useful. The dimension feature can be developed as a website + database for NGINX, Apache2, IIS, etc., I feel traped on that linux vm only. Most of the customers doesn't like to pay for a solution like this. They will accept only after beign attacked. WatchGuard can improve the sales with a demo (hacking, active security, etc.). Read full review ScreenShots WatchGuard Network Security Screenshots