Cisco Secure Firewall Management Center (formerly Firepower Management Center) vs FireMon

• It is a great advantage to have a single tool for managing multiple devices.
• The interface is amicable and easy to adapt.
• There is no risk of immediately applying changes to the device and affecting production; one can decide at what time to perform the deployment.

Read full review

• PCI Reporting - After identifying which firewalls and rulesets are in scope, producing a report artifact to satisfy PCI requirements on Firewall reviews is literally a two-click operation.
• Storing Rule Metadata - FireMon stores metadata (prefilled fields, standard fields, and custom fields) for each rule in each policy which is valuable for context during firewall reviews in particular
• API - FireMon exposes most if not all of its functionality via REST API

Read full review

• Licensing is difficult to navigate on purchase
• Renewal licensing and support isn't all that easy to do and has its issues
• The lowest end firewalls on the market seem to be EOL sooner than documented and requires earlier upgrading to ensure FMC itself can be kept current for security reasons. if you buy anything but the cheapest model firewalls this is not a problem
• Implementing some functionality is more complex than it should be and believe Cisco could do better in this regard to the software

Read full review

• Some features could be added to the existing functionality which include NAT rules usage
• Rule expiration normalization from firewalls rather than entering them in rule documentation
• .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased

Read full review

• We lost some features like servers load balancing.
• But, we got NGFW with a very powerful IPS on one box with a single management interface. We also saved money and data center space from buying multiple boxes (one for IPS and the other as Firewall).
• We also saved team time and multiple devices management, and we got the benefits of a single vendor providing support.

Read full review

• The use of FireMon has eliminated the backlog in firewall policy changes, approval, and implementation.
• FireMon has greatly increased the accuracy of changes, and reduced the risk of planned changes (3 incidents in over 27000 change tickets--most with multiple policy changes in each, is a stellar record)

Read full review