What users are saying about
57 Ratings
57 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.6 out of 100
17 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.2 out of 100

Likelihood to Recommend

FireMon

You might be able to get away without using a solution like this in a smaller environment, but as you grow you will find it far more difficult to go back and remediate as we did. FireMon is best suited for an environment that has strict requirements for reporting and auditing, such as the financial sector, but really wouldn't be suitable for a small office or an industry that does not have these requirements.
Howard Wall profile photo

Palo Alto Panorama

We have multiple internal and external firewalls at our headquarters as well as firewalls at our remote locations. Users are always needing to access services and systems at our headquarters and when they tell us they don't have access we can use Panorama to view the traffic and see where they are getting denied. Without Panorama we would need to log into each firewall and see if they are getting denied with Panorama we get an overview of was is happening and it's amazing.
No photo available

Feature Rating Comparison

Firewall Security Management

FireMon
8.3
Palo Alto Panorama
8.8
Policy planning and rule management
FireMon
8.7
Palo Alto Panorama
9.0
Automated Policy Orchestration
FireMon
9.1
Palo Alto Panorama
9.0
Device Discovery
FireMon
7.1
Palo Alto Panorama
9.3
Policy Compliance Auditing
FireMon
8.5
Palo Alto Panorama
8.7
Attack Path Simulation Testing
FireMon
7.7
Palo Alto Panorama
8.5
Anomalous Event or Behavior Deviation
FireMon
9.1
Palo Alto Panorama
9.0
Firewall Rule Cleanup
FireMon
8.2
Palo Alto Panorama
7.7
Vulnerability Scans
FireMon
Palo Alto Panorama
9.0

Pros

FireMon

  • Built-in compliance and security reporting - By scheduling reports, we automate the information gathered and get it to the correct department for remediation, freeing up resources for other tasks.
  • Ping Path Analysts - this plays a big help in our environment. With over 300 IT personnel, communication is sometimes lost. Changes to architecture happen frequently with our dynamic and worldwide presence, including cloud. It is important to get it right the first time, in a secure and efficient manner.
  • Security Manager - Organization, optimization, and metrics that can easily be tracked and help make future decisions on the appropriate coarse of action. For example, I've taken multiple firewalls which had high CPU and memory utilization, reprioritized the policies, and cut those metrics in half.
Robert Bollinger profile photo

Palo Alto Panorama

  • Being able to create common rules that can be maintained on multiple firewalls is very beneficial to our management of the different functional needs of the firewalls.
  • Using templates to manage regional requirements is helpful for rolling out changes in the networking side, from user managemnet globally to SEIM/Syslog collection regionally, being able to stack templates helps deliver the necessary changes across multiple firewalls.
  • Panorama's Dashboard and ACC provides useful information that can be set to see All firewalls, or just certain groups of firewalls. Since each group of firewalls has different applications running through them, being able to isolate one group at a time helps identify if there are errant devices causing unexpected traffic, and what type of traffic it is.
Bruce Bennett profile photo

Cons

FireMon

  • More granular documentation - A flexible tool is great, but with flexibility comes gaps in documentation. Nothing serious, but I have found myself asking questions to support on more than one occasion because I couldn't independently find the solution in the default documentation. "How can I generate a query that uses this argument rather than this one..." kinda stuff.
  • More granular ability to "whitelist" specific rules - If security teams had perfect security, the business wouldn't be allowed to operate. That being the case there will always be compromises. Although I may care about a specific control as far as my environment is concerned, I will find myself with a laundry list of rules that will take an extended effort to clean up, or there is no good way around. Being able to acknowledge these and then circle back to them at regular intervals for review would be good - as opposed to having to make sure I filter those specific rules out of larger exports that I may dump into a ticket for remediation.
Daniel James profile photo

Palo Alto Panorama

  • It needs improvement for the threats categorized as "high" severity. There are lot of false positives. Therefore finding real ones is hard in "high" category.
  • The threat/traffic view needs improvement. It needs at least a feature to sort based on columns. Downloading and parsing using Excel takes a lot of time.
No photo available

Likelihood to Renew

FireMon

FireMon 9.1
Based on 2 answers
We use the tool frequently and it is integrated into our processes.
No photo available

Palo Alto Panorama

Palo Alto Panorama 9.0
Based on 1 answer
Panorama has given us much more than we expected and the support for the product, by Palo Alto Networks has been great. We would like to see some improvements that I mentioned in another review, like scheduling changes, but overall Panorama has provided a very capable product and we are very happy with it.
Bruce Bennett profile photo

Usability

FireMon

FireMon 8.2
Based on 1 answer
For the most part, using the tool is straight forward. Some of the menus could use some work on usability.
No photo available

Palo Alto Panorama

Palo Alto Panorama 8.0
Based on 1 answer
My biggest issue is not being able to schedule changes or software pushes, other than that the software is very easy to use after using it for a short period of time.
Bruce Bennett profile photo

Support

FireMon

FireMon 7.7
Based on 17 answers
FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
Eric Garcia profile photo

Palo Alto Panorama

Palo Alto Panorama 8.7
Based on 3 answers
They have always been able to resolve our issues promptly. We have only had one critical issue, and it was handled expediently.
No photo available

Implementation

FireMon

FireMon 9.1
Based on 1 answer
Implementation is fairly simple. Most issues can be resolved by referencing manuals.
No photo available

Palo Alto Panorama

No score
No answers yet
No answers on this topic

Alternatives Considered

FireMon

Once I learned how to properly query within FireMon, I found FireMon to be an easier application to use and provided more detailed information than that of the other security products used. My organization invested in FireMon and moved away from using the other two security applications, therefore I was required to begin using FireMon but am glad that this change occurred
Jackie Duarte profile photo

Palo Alto Panorama

We have selected Panorama because it is the one which could only provide us management and control of PA firewalls. It would be very difficult to replace this with another solution due to the features provided and benefits no other vendor can provide under one console with complete satisfaction and stability.
Amit Gumber profile photo

Scalability

FireMon

FireMon 8.2
Based on 13 answers
You can add more data collectors to scale. One issue is that you cannot have multiple data collectors assigned to one device. For example, if you have some heavy hitting firewalls, you can't have two data collectors hooked up to them in a round robin fashion. I have been advised you can accomplish this with a load balancer in front of the data collectors, but I have not looked into it yet.
No photo available

Palo Alto Panorama

No score
No answers yet
No answers on this topic

Return on Investment

FireMon

  • We are managing larger number of client's security devices using FireMon and it reduced our backlog for routine changes.
  • By using FireMon's well-designed UI and great features like traffic analysis, removable rules report and compliance auditing etc, we are able to archive our goals in one central console, it saved manpower and reduced human errors.
No photo available

Palo Alto Panorama

  • At a previous company, I deployed Palo Alto firewalls to a data center, and 12 branch locations. This allowed us to replace MPLS links with IPSec tunnels between the sites. This resulted in significantly more throughput and soft savings of increased productivity. However, the estimated net of $220,000 in hard savings over five years is what is most impressive. I could not have effectively managed all those devices without Palo Alto Panorama.
No photo available

Pricing Details

FireMon

General

Free Trial
Yes
Free/Freemium Version
Premium Consulting/Integration Services
Yes
Entry-level set up fee?
Optional

Palo Alto Panorama

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Likelihood to Recommend

FireMon
7.9
Palo Alto Panorama
9.6

Likelihood to Renew

FireMon
9.1
Palo Alto Panorama
9.0

Usability

FireMon
8.2
Palo Alto Panorama
8.0

Support

FireMon
7.7
Palo Alto Panorama
8.7

Implementation

FireMon
9.1
Palo Alto Panorama

Scalability

FireMon
8.2
Palo Alto Panorama

Add comparison