Cisco Secure Firewall vs. Zabbix

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Cisco Secure Firewall
Score 8.0 out of 10
N/A
Cisco Secure Firewall (formerly Cisco Firepower NGFW) is a firewall product that integrates with other Cisco security offerings. It provides Advanced Malware protection, including sandboxing environments and DDoS mitigation. Cisco also offers a Next Generation Intrusion Prevention System, which provides security across cloud environments using techniques like internal network segmentation. The firewall can be managed locally, remotely, and via the cloud. The product is scalable to the scope of…N/A
Zabbix
Score 8.8 out of 10
N/A
Zabbix is an open-source network performance monitoring software. It includes prebuilt official and community-developed templates for integrating with networks, applications, and endpoints, and can automate some monitoring processes.N/A
Pricing
Cisco Secure FirewallZabbix
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Cisco Secure FirewallZabbix
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details——
More Pricing Information
Features
Cisco Secure FirewallZabbix
Firewall
Comparison of Firewall features of Product A and Product B
Cisco Secure Firewall
7.7
74 Ratings
10% below category average
Zabbix
-
Ratings
Identification Technologies7.966 Ratings00 Ratings
Visualization Tools6.768 Ratings00 Ratings
Content Inspection7.767 Ratings00 Ratings
Policy-based Controls8.371 Ratings00 Ratings
Active Directory and LDAP7.961 Ratings00 Ratings
Firewall Management Console7.670 Ratings00 Ratings
Reporting and Logging7.270 Ratings00 Ratings
VPN7.961 Ratings00 Ratings
High Availability8.167 Ratings00 Ratings
Stateful Inspection8.165 Ratings00 Ratings
Proxy Server7.039 Ratings00 Ratings
Best Alternatives
Cisco Secure FirewallZabbix
Small Businesses
pfSense
pfSense
Score 9.6 out of 10
Pulseway
Pulseway
Score 9.5 out of 10
Medium-sized Companies
pfSense
pfSense
Score 9.6 out of 10
Icinga
Icinga
Score 7.7 out of 10
Enterprises
Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto Networks Next-Generation Firewalls - PA Series
Score 9.5 out of 10
Splunk Infrastructure Monitoring
Splunk Infrastructure Monitoring
Score 8.9 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Cisco Secure FirewallZabbix
Likelihood to Recommend
7.9
(79 ratings)
8.6
(28 ratings)
Likelihood to Renew
6.8
(2 ratings)
9.0
(3 ratings)
Usability
9.0
(2 ratings)
8.5
(4 ratings)
Availability
9.3
(2 ratings)
-
(0 ratings)
Performance
5.0
(1 ratings)
-
(0 ratings)
Support Rating
7.4
(31 ratings)
5.0
(5 ratings)
Implementation Rating
8.0
(1 ratings)
8.0
(2 ratings)
Product Scalability
5.0
(1 ratings)
-
(0 ratings)
User Testimonials
Cisco Secure FirewallZabbix
Likelihood to Recommend
Cisco
Well, I mean it is really meant for the edge. I think maybe some of the smaller models you could maybe use at your, if you have remote workers where you wanted to protect their environment more than in their home network or whatever, but for us, we've always use the enterprise versions.
Read full review
Zabbix
Zabbix is great for monitoring your servers and seeing alerts when the system uses too much CPU or memory. This allowed the system Engineer to be proactive and add resources to these systems to avoid interrupting the services. Especially servers running operations applications and services. This is one of the best usages for Zabbix.
Read full review
Pros
Cisco
  • It's been a big change for us because like I said, we've been using it about a year, I think. And we went from ASAs to this, so it was a big changeover from being able to do everything in CLI honestly, it's a bit clunky and more time consuming to have to configure things through the Gooey, which has been a pain point for us. But we've tried to automate as much as we can. What it does well is the analysis. The event, not event viewer, but unified event, that's what it is. Handy tool. Also the tunnel troubleshooting the site to site tunnel monitoring or troubleshooting, I can't remember what it's called. It's pretty good too. It's nice how it has some predefined commands in there. I'd say those are probably the things we like about it the most.
Read full review
Zabbix
  • Collecting hardware data - CPU, Memory, Network, and Disk Metrics are collected and reported on.
  • Flexible design - It is very easy to build out even very large environments via the templating system. You can also start where you are - network monitoring, server monitoring, etc. and then build it out from there as time and resources permit.
  • Provides a "plugin architecture" (via XML templates) to allow end users to extend it to monitor all kinds of equipment, software, or other metrics that are not already added into the software already.
  • Very complete documentation. Almost every aspect of Zabbix has been documented and reported on.
  • Cost - Zabbix is FOSS software and always free. Support is reasonably priced and readily available.
Read full review
Cons
Cisco
  • Sometimes it's the limitation of the throughput or limitation of the firewall. One DDoS attack they have the bandwidth capacity is very little. And then once there is DDoS attack. Many not only the firewall can protect that they need to take action further at the Upstreaming Provider, that side with the bigger pipe bandwidth for protecting the attack. Not only the firewall can prevent,. Yes. So sometimes firewalls still have the limitation and then need to do any additional monitoring or something. But we can do that with the ideas and IPS, but required to have the bigger pipe to protect DDos Attack, for example the bandwidth from the upstream network as well. I mean when many DDos Attack comes with big bandwidth, not only firewall can protect, but also the blackholing the traffic from upstream providers who has bigger bandwidth DDos mitigation services.
Read full review
Zabbix
  • Creating an alert & its trigger can be made easier.
  • More VM-based data collection counters should be introduced to have better VM monitoring.
  • The raw counters collection agent in every node is relatively weak. It goes down often, which needs more stability.
Read full review
Likelihood to Renew
Cisco
It works really well. We can do most anything we want or need to with it, and you don’t have to have a doctorate or multiple certs to necessarily figure it out. The thing that would probably have to happen to make us switch would be if we just got priced out - Cisco’s more powerful and higher bandwidth models cost a pretty penny.
Read full review
Zabbix
It is free. It didn't cost anything to implement (other than my time and the cost incurred for it) and it is filling a badly needed gap in our IT infrastructure. Support is available if we have issues and can be done annually or paid for on a per incident basis as needed. Expansion, updates, and all other future lifecycle activities are likewise free of cost, so as long as someone is able to implement/maintain the software (and the OSS project is maintained) then I imagine the company will never leave it.
Read full review
Usability
Cisco
Solution is highly effective, offers a lot of features with constant improvements and additions of new features over time. It's relatively easy to get familiar with the system, especially if transitioning from adaptive security appliances. If this is not the case, as for learnability there's a learning curve but once learned it is relatively easy to remember the details about the system even after a period of non-use
Read full review
Zabbix
I think every organization, especially the IT department, needs a tool like this. I know of another product like Zabbix that gives a similar or the same solution, but its range makes it very useful. You can see almost all the device info in one place: disk usage, disk space, network usage, etc.
Read full review
Reliability and Availability
Cisco
We have had really good success with Cisco Secure Firewall when it comes to availability. Even when we’ve had temporary issues with one appliance or the other, or with the Firewall Management Center, it has stayed up and defended our network diligently. We even had an issue where the licensing got disabled for multiple days, and it kept spinning like a top
Read full review
Zabbix
No answers on this topic
Support Rating
Cisco
Cisco support is not at all suitable for this product, at least. It takes a long for them to help us with our server issues. A lot of the time, the customer support person keeps on redirecting calls to another person. They need to be well versed with the terminologies of the product they are supporting us with. Support needs a lot of improvement. Cisco Fire Linux OS, the operating system behind Cisco Firepower NGFW (formerly Sourcefire), also doesn't receive regular patches. In short, average customer service.
Read full review
Zabbix
The setup is the most time-consuming portion of using zabbix. It takes a lot of effort to shape it into a usable format and even then it can get very messy. It's not exactly intuitive and as mentioned the UI seems a bit antiquated. If I was to roll out a monitoring solution from scratch, I'd probably look for alternatives which are easier to use and maintain.
Read full review
Implementation Rating
Cisco
In the beginning transition from Adaptive Security Appliance to Cisco Secure Firewall did not look like the best choice. Solution was new, there were a lot of bugs and unsupported features and the actual execution in the form of configuration via Firepower Management Center was extremely slow. Compare configuring a feature via CLI on ASA in a manner of seconds (copy/paste) to deployment via FMC to Secure Firewall which took approx. 10 mins (no exaggeration). Today, situation is a bit different, overall solution looks much more stable and faster then it was but there's still room for improvement.
Read full review
Zabbix
We are a mainly Windows environment, so it would be useful if we could have used Active Directory to deploy agents. As of version 4.2, Zabbix has announced a new agent MSI file to allow exactly that. Unfortunately, we didn't have that option. Also, for Linux and MAC deployments, there is no simple way to deploy that. Using remote scripts you may be able to create something, but most places will opt for either SNMP (agentless) or manual installation of agents to add to Zabbix. A way of deploying agents via discovery would go a long way to helping in the adoption of the tool.
Read full review
Alternatives Considered
Cisco
We use the FMC as a virtual machine, it combines administration, monitoring and can be used perfectly for error analysis. There are restrictions due to administration without the FMC, so we decided on the FMC as the central administration.
Read full review
Zabbix
We're using the Solarwinds suite as our global monitoring standard, but it is very complex and its licensing model makes it difficult to monitor a wide range of technologies. So, we're using Zabbix as a complement on our monitoring process. Zabbix is a way more flexible and has free integrations to a wide range of technologies. It is also more 'user friendly' and easy to manage.
Read full review
Return on Investment
Cisco
  • Some patching for zero day exploits have resulted in bugs causing downtime, meaning decision between vuln patching or risk of downtime needs to be discussed.
  • Peace of mind that the device will receive continued upgrades and with a quick turnaround.
  • Ability to use TAC for issues.
  • Ease of hiring candidates with experience in product line.
Read full review
Zabbix
  • Good ROI when trying to get ahead of network related problems instead of waiting for users to complain
  • Good ROI when doing upgrades or exploratory work on a neglected network
  • Good ROI when showing usage trends to management showing higher actual usage versus what was thought to be happening
Read full review
ScreenShots