Cisco Security Cloud Control vs. ServiceNow IT Operations Management

Use case would be if you wanted most of the functionality of the FMC on prem but had no datacenter, cloud presence in AWS, or a cloud presence in Azure for an FMCv. You gain an always up FMC to manage the firewalls due to resiliency of the cloud FMC. You get almost all the functionality of an FMC on prem.

Incentivized

[...] is changing the way our internal support staff (not only in the IT field) work and enhancing the experience for employees seeking IT assistance through ServiceNow IT Operation Management. We have moved the usual and personalized IT tools and functions from [...] service-desk to ServiceNow IT Operations Management. These advancements have sparked innovation in various aspects of our IT support management, such as enhancing accessibility, managing incidents, optimizing IT workflows and procedures, enforcing service level agreements (SLAs), incorporating AI/ML technology, utilizing virtual agents, streamlining automation, and sharing knowledge throughout the support team via data visualization, monitoring, and reporting. In brief, our collaboration with ServiceNow IT Operations Management is enhancing the effectiveness of our internal system and benefiting our shared clients.

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• The centralized dashboard allows us to keep track of production incidents as they come in, and allow us to view and sort them based on severity, making sure it's tracked
• The read/edit access and role granting process is straightforward, meaning that only the right people can change /update the statuses of incidents without unintended consequences
• With AI driven classification, it's easy to track outage impacts

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

• Scan network is limited to their discovery tool, which is costly
• Integration to jamf and ubunto tools
• Agents TCO
• integration to password management tools which are critical for successful scans

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

Initial deployment remains a challenge, requiring extensive planning and skilled resources to map dependencies correctly, including those for integration and automation. The platform is complex to set up, requiring significant technical expertise and configuration (steep learning curve). Service mapping, discovery, and event management require significant planning during implementation.

Incentivized

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

McAfee ePolicy Orchestrator is a simple, flexible, and easy-to-implement configuration solution, however, with Cisco Defense Orchestrator there is an implementation in the cloud and the ease of managing all devices from a single console regardless of location, in addition to its analysis of security policies security help us to know if the ones that are being used are fulfilling their function or if changes are required to make infrastructure more secure, that is why we chose this Cisco software.

Jira is significantly cheaper and faster to deploy than ServiceNow. However, it lacks the "heavy-duty" automated service mapping and complex cloud governance features that come native to ServiceNow ITOM, which is the main reason we recommend this to our customers whenever they come to us for advice. But more often than not, our customers already have ServiceNow, so the threshold for them to "upgrade" their existing platform is easier to overcome.

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized

• Eliminated a lot of manual processes with automation and sharing information across team.
• Cleaned up our CMDB from well below 40% accurate to well over 90%.
• AIOps finding anomalies and tying them to service maps.