What users are saying about
18 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
71 Ratings
18 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.9 out of 100

FireMon

<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
71 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.7 out of 100

Likelihood to Recommend

Darktrace

Darktrace would be well suited to any environment really; the only constraint would be the budget. The cost scales on the number of devices to be monitored by the product, so it can be quite expensive in larger environments. Any company that would benefit from having 24/7 monitoring of their network would find that this product would suit that need perfectly. It can also create a number of reports, which is useful if you have any requirement to present periodic figures and statistics for your network. There are also additional features available and in development such as Antigena, which can be configured to allow potential threats to be automatically mitigated; it can block connections to a certain address, using certain ports, or it can enforce "normal behaviour" where it will only allow a machine to communicate in a way that Darktrace has observed before and considers normal. This has huge benefits particularly for 24/7 organisations where you don't have the ability to have someone monitoring the network personally at all times, as it could stop a malware outbreak in its tracks.
Anonymous | TrustRadius Reviewer

FireMon

I would strongly recommend FireMon for any IT/Security department that must maintain and support multiple firewall platforms. FireMon's ability to create a unified interface to view, audit, and even implement rules in a vendor-agnostic manner is excellent.If PCI audits are an issue, and providing firewall reports for PCI is difficult, this is something FireMon solves immediately out of the box.If a business is entirely using a single firewall platform, FireMon still provides benefits, but the recommendation would not be quite as strong depending on the capabilities of the native management platform.
Anonymous | TrustRadius Reviewer

Feature Rating Comparison

Firewall Security Management

Darktrace
FireMon
7.4
Policy planning and rule management
Darktrace
FireMon
8.3
Automated Policy Orchestration
Darktrace
FireMon
7.7
Device Discovery
Darktrace
FireMon
7.3
Policy Compliance Auditing
Darktrace
FireMon
8.1
Attack Path Simulation Testing
Darktrace
FireMon
6.3
Anomalous Event or Behavior Deviation
Darktrace
FireMon
6.8
Vulnerability Scans
Darktrace
FireMon
6.5
Firewall Rule Cleanup
Darktrace
FireMon
8.1

Pros

Darktrace

  • It did an ok job of analyzing and collecting data. It used a span (mirrored) port and then using its own algorithm developed flow records.
  • It did an ok job of segmenting traffic into networks - not always correctly, but ok.
  • It tried to identify devices by type - once again, it did ok, but not that great.
Matthew Frederickson | TrustRadius Reviewer

FireMon

  • FireMon provides a live view in to firewalls across the enterprise in a single tool.
  • Policy Planner is customizable, and can be fit to your company's workflow requirements, to include API for Service Now.
  • FireMon provides policy testing capability, and traffic flow analysis, which is critical for timely troubleshooting.
Ken Sharp | TrustRadius Reviewer

Cons

Darktrace

  • False positives. Darktrace uses "AI" to create its alerts for "unusual" or "malicious" activity. It is very common to see an alert for completely benign and normal device behavior - PC tries to print for the first time in a while, for example.
  • Antigena actions. To some extent, this is a continuation of the previous point. Darktrace can break the network connectivity of the suspected device automatically. The excessive number of false positives makes administrators reluctant to use this feature, though. Also, the default Antigena actions are not relevant to real-world problems as I saw them in my experience with Darktrace.
Anonymous | TrustRadius Reviewer

FireMon

  • When they moved from version 7 to version 8 there were some areas that seemed neglected. The generated reports did not always render properly when viewed as a PDF, though they looked fine in HTML. Another lost function was reporting usage on NAT rules in firewalls.
  • The scheduling function for reports/assessments is not the easiest thing to find or administer. It would be nice to be able to schedule reports directly from the Security Manager without having to go to Administration.
  • I would like to see customizable reports. Right now you must create custom controls and add them to custom assessments.
  • The GUI does not always maintain your filters or settings if you drill down into an object and then return.
  • There are not always enough search filter options and they are sometimes hard to view.
  • Some reports are not very useful. It would be nice to see those re-evaluated or re-worked into a usable report.
Anonymous | TrustRadius Reviewer

Likelihood to Renew

Darktrace

No score
No answers yet
No answers on this topic

FireMon

FireMon 9.1
Based on 2 answers
We use the tool frequently and it is integrated into our processes.
Anonymous | TrustRadius Reviewer

Usability

Darktrace

No score
No answers yet
No answers on this topic

FireMon

FireMon 7.3
Based on 2 answers
For the most part, using the tool is straight forward. Some of the menus could use some work on usability.
Anonymous | TrustRadius Reviewer

Support Rating

Darktrace

Darktrace 9.5
Based on 2 answers
Any time I have had any issue with Darktrace, I've been able to contact an engineer through their support desk, and I have always had a very speedy response. Even when the issue has been caused by something outside of the Darktrace devices, they have still been very keen to try to help and identify what the problem was. The customer portal also has a large number of videos and guides that you can use to educate yourself on the product
Anonymous | TrustRadius Reviewer

FireMon

FireMon 7.6
Based on 20 answers
FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
Eric Garcia | TrustRadius Reviewer

Implementation Rating

Darktrace

No score
No answers yet
No answers on this topic

FireMon

FireMon 9.1
Based on 1 answer
Implementation is fairly simple. Most issues can be resolved by referencing manuals.
Anonymous | TrustRadius Reviewer

Alternatives Considered

Darktrace

We have not evaluated others as they seem to be in their own class.
Anonymous | TrustRadius Reviewer

FireMon

We were impressed with FireMon's native cloud support and compliance reporting, in looking at other vendors we were not too impressed by their ability to support cloud-native technologies and their reporting was less than stellar. We did not want a solution that would last only a few years and FireMon was able to provide us with what we needed, and we felt comfortable that they would support the direction we were going. By far they were they were the most engaged with the vetting process.
Howard Wall | TrustRadius Reviewer

Scalability

Darktrace

No score
No answers yet
No answers on this topic

FireMon

FireMon 8.1
Based on 22 answers
As a security professional let me first acknowledge that I know better than to say or document much in a public forum. That being said I have recently had reasons to sit down and future proof our current implementation. We're as virtual as virtual can be - if we acquired 300% of our current device load tomorrow responding to that need (aside from licensing) would just be a matter of spinning up more VM's in house, and cutting the appropriate tickets for where syslog info gets sent.
Daniel James | TrustRadius Reviewer

Return on Investment

Darktrace

  • We had an ROI just during the POC. DarkTrace helped us identify a ransomware attack and we stopped it before it happened.
  • The weekly reports more than pay for itself within the first few months.
  • The powerful search capability helps us solve problems where other solutions fall short.
Anonymous | TrustRadius Reviewer

FireMon

  • Positive - flexibility and use of the product. This enables non-firewall savvy people to gather enough information to make an intelligent, firewall policy request. Automation of reporting frees up a ton of resources by sending the appropriate information to the different teams. Compliance is a huge benefactor of these reports, as we are in one form of an audit every other month
  • Negative - High price tag. Difficult Licensing model. Scalability and stability has been a problem for us. Integration to our ticketing system will cost to much, so this is still an area that I would like to integrate some day.
Robert Bollinger | TrustRadius Reviewer

Pricing Details

Darktrace

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

FireMon

General

Free Trial
Yes
Free/Freemium Version
Premium Consulting/Integration Services
Yes
Entry-level set up fee?
Optional

Rating Summary

Likelihood to Recommend

Darktrace
8.4
FireMon
7.8

Likelihood to Renew

Darktrace
FireMon
9.1

Usability

Darktrace
FireMon
7.3

Support Rating

Darktrace
9.5
FireMon
7.6

Implementation Rating

Darktrace
FireMon
9.1

Scalability

Darktrace
FireMon
8.1

Add comparison