Cisco Security Cloud Control vs. FireMon

Use case would be if you wanted most of the functionality of the FMC on prem but had no datacenter, cloud presence in AWS, or a cloud presence in Azure for an FMCv. You gain an always up FMC to manage the firewalls due to resiliency of the cloud FMC. You get almost all the functionality of an FMC on prem.

Incentivized

FireMon is best used in a large environment (for example, I have >100
firewalls in my environment). It's best used when trying to improve
security posture and showing changes in firewall security over time. It
might not be the best choice for smaller environments or those that aren't concerned about security management.

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• PCI Reporting - After identifying which firewalls and rulesets are in scope, producing a report artifact to satisfy PCI requirements on Firewall reviews is literally a two-click operation.
• Storing Rule Metadata - FireMon stores metadata (prefilled fields, standard fields, and custom fields) for each rule in each policy which is valuable for context during firewall reviews in particular
• API - FireMon exposes most if not all of its functionality via REST API

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

• Some features could be added to the existing functionality which include NAT rules usage
• Rule expiration normalization from firewalls rather than entering them in rule documentation
• .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

Once all the customization has been completed, the business is starting to see the return on investment. The visibility it provides into the network gear that is owned by other IT groups is immeasurable and has allowed us to apply standards across the board. The only thing I have concern with is their support documentation.

Incentivized

It save me time and I'm able to have the review - review the rule independently with using my time.

Incentivized

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.

Incentivized

I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.

Incentivized

FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.

Incentivized

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

Implementation is fairly simple. Most issues can be resolved by referencing manuals.

Incentivized

McAfee ePolicy Orchestrator is a simple, flexible, and easy-to-implement configuration solution, however, with Cisco Defense Orchestrator there is an implementation in the cloud and the ease of managing all devices from a single console regardless of location, in addition to its analysis of security policies security help us to know if the ones that are being used are fulfilling their function or if changes are required to make infrastructure more secure, that is why we chose this Cisco software.

I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them

Incentivized

Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized

• It helps us save us time in determining what change was made and by whom.
• Real time alerting is a great convenience in helping us know if something went wrong, we can immediately review the last report to determine what has changed.
• Allows us to determine what rules are not used and if said rules are still required.

Incentivized