TrustRadius: an HG Insights company

Cisco Software-Defined Access (SD-Access) vs. FireMon

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco SD-Access

    Score9 out of 10
    N/ACisco's Software-Defined Access (SD-Access) provides automated end-to-end segmentation to separate user, device and application traffic without redesigning the network. Cisco SD-Access automates user access policy so organizations can make sure the right policies are established for any user or device with any application across the network.N/A

    FireMon

    Score7.9 out of 10
    Enterprise companies (1,001+ employees)
    FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to automate policy changes, meet compliance standards, to minimize policy-related risk. Since creating their policy management solution in 2004, FireMon states they've helped…N/A
    Pricing
    Cisco SD-AccessFireMon
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco SD-AccessFireMon
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco SD-AccessFireMon
    Considered Both Products
    Cisco
    No answer on this topic
    FireMon
    No answer on this topic
    Key User Insights
    Would buy again
    75%
    Would buy again
    6 Answers
    94%
    Would buy again
    16 Answers
    Delivers good value for the price
    86%
    Delivers good value for the price
    6 Answers
    100%
    Delivers good value for the price
    13 Answers
    Happy with the feature set
    88%
    Happy with the feature set
    7 Answers
    94%
    Happy with the feature set
    16 Answers
    Lived up to sales and marketing promises
    75%
    Lived up to sales and marketing promises
    6 Answers
    100%
    Lived up to sales and marketing promises
    5 Answers
    Implementation went as expected
    50%
    Implementation went as expected
    4 Answers
    100%
    Implementation went as expected
    15 Answers
    Best Alternatives
    Cisco SD-AccessFireMon
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Cisco ACI
    Score8.5 out of 10
    Cisco Identity Services Engine (ISE)
    Score9 out of 10
    Enterprises
    Cisco ACI
    Score8.5 out of 10
    Cisco IOS Security
    Score9.6 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco SD-AccessFireMon
    Likelihood to Recommend
    7.3
    (8 ratings)
    7.9
    (69 ratings)
    Likelihood to Renew
    1.0
    (1 ratings)
    6.8
    (7 ratings)
    Usability
    -
    (0 ratings)
    7.3
    (3 ratings)
    Availability
    -
    (0 ratings)
    7.3
    (1 ratings)
    Performance
    -
    (0 ratings)
    9.1
    (1 ratings)
    Support Rating
    6.2
    (8 ratings)
    7.7
    (17 ratings)
    In-Person Training
    6.4
    (1 ratings)
    -
    (0 ratings)
    Online Training
    7.3
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    2.7
    (1 ratings)
    9.1
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    7.9
    (48 ratings)
    User Testimonials
    Cisco SD-AccessFireMon
    Likelihood to Recommend
    Cisco
    It's well suited in our corporate offices, where all our business users resides and where we can control all their accesses. What doesn't really fit well is when we have our branch fronts, where all the software domain access features aren't utilized to its fullest, due to the fact that customers and users don't really need to have all the security features that SDA provides.
    Incentivized
    Read full review
    FireMon
    FireMon is best used in a large environment (for example, I have >100
    firewalls in my environment). It's best used when trying to improve
    security posture and showing changes in firewall security over time. It
    might not be the best choice for smaller environments or those that aren't concerned about security management.
    Incentivized
    Read full review
    Pros
    Cisco
    • Automation, pushing template-based configuration to multiple devices in one push saves time and manpower.
    • Assurance [helps trace] issues related to devices, clients, and provide the troubleshoot as [the] best practices.
    • Segmentation, with the use of the SGT tags, we are able to achieve segmentation and micro-segmentation securely.
    Incentivized
    Read full review
    FireMon
    • Give good real time reporting for anyone making a change to any of our firewalls
    • Provides good reporting tools that are out of box
    • Provide good customization tools that is specific to our needs
    • Upgrades are a simple process and support does relatively well with assisting us.
    Incentivized
    Read full review
    Cons
    Cisco
    • Documentation: Working in this solution I realized there were missing information details about the fusion device support for nexus.
    • Fusion router: This roll in the fabric should be already integrated in the solution, right now it is configured manually.
    • Bugs: Unfortunately the solution still present a lot of bugs, mainly in the controller.
    Incentivized
    Read full review
    FireMon
    • Some features could be added to the existing functionality which include NAT rules usage
    • Rule expiration normalization from firewalls rather than entering them in rule documentation
    • .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    No answers on this topic
    FireMon
    The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.
    Incentivized
    Read full review
    Usability
    Cisco
    It is difficult to start using the product due to its unfamiliar name and acronyms. ,The task should be accomplished in a specific order to ensure success
    Incentivized
    Read full review
    FireMon
    It save me time and I'm able to have the review - review the rule independently with using my time.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    No answers on this topic
    FireMon
    FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.
    Incentivized
    Read full review
    Performance
    Cisco
    No answers on this topic
    FireMon
    I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.
    Incentivized
    Read full review
    Support Rating
    Cisco
    As far as my experience with SD-Access -I'd say things that can be improved are - better functionality with ISE, ease to understand licensing and better documentation for configuration (add-ons, etc), and licensing.
    Incentivized
    Read full review
    FireMon
    FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
    Incentivized
    Read full review
    Online Training
    Cisco
    I rated the training an 8 because overall, it was well-structured, and the instructor was highly knowledgeable on the subject matter. The content was relevant, and I appreciated the clear explanations of complex topics. However, I felt that some sections were covered too quickly, making it difficult to fully absorb the information before moving on. Additionally, I would have liked more time dedicated to Q&A, as there were moments when I had questions but didn’t get the opportunity to ask them due to time constraints. Adding more interactive discussions or hands-on exercises could further enhance the learning experience and make it even more engaging
    Incentivized
    Read full review
    FireMon
    No answers on this topic
    Implementation Rating
    Cisco
    At the beginning, we had to open a TAC case for every single step during the implementation phase.
    Incentivized
    Read full review
    FireMon
    Implementation is fairly simple. Most issues can be resolved by referencing manuals.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    Automation, pushing template-based configuration to multiple devices in one push saves time and manpower. Assurance helps trace issues related to devices, clients, and provide the troubleshoot as the best practices. Segmentation, with the use of the SGT tags, we are able to achieve segmentation and micro-segmentation securely.
    Incentivized
    Read full review
    FireMon
    I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them
    Incentivized
    Read full review
    Scalability
    Cisco
    No answers on this topic
    FireMon
    Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • Integration with other platforms in a single platform is a great advantage for the user.
    • Saves time in configuring devices on the network
    Incentivized
    Read full review
    FireMon
    • FireMon's Compliance Reporting provided an immediate and tangible benefit
    • FireMon helps identify egregious or erroneous rules quickly across multiple platforms
    • FireMon took our audit process from an Excel spreadsheet into a far more advanced process with readily available context for reviewers
    Incentivized
    Read full review
    ScreenShots