TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    FireMon

    Score7.9 out of 10
    Enterprise companies (1,001+ employees)
    FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to automate policy changes, meet compliance standards, to minimize policy-related risk. Since creating their policy management solution in 2004, FireMon states they've helped…N/A

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A
    Pricing
    FireMonSplunk SOAR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    FireMonSplunk SOAR
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Best Alternatives
    FireMonSplunk SOAR
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Cisco Identity Services Engine (ISE)
    Score9 out of 10
    No answers on this topic
    Enterprises
    Cisco IOS Security
    Score9.6 out of 10
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    FireMonSplunk SOAR
    Likelihood to Recommend
    7.9
    (69 ratings)
    8.1
    (40 ratings)
    Likelihood to Renew
    6.8
    (7 ratings)
    7.5
    (3 ratings)
    Usability
    7.3
    (3 ratings)
    8.2
    (1 ratings)
    Availability
    7.3
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.1
    (1 ratings)
    8.2
    (40 ratings)
    Support Rating
    7.7
    (17 ratings)
    8.2
    (1 ratings)
    Online Training
    -
    (0 ratings)
    8.2
    (1 ratings)
    Implementation Rating
    9.1
    (1 ratings)
    8.2
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    7.9
    (48 ratings)
    8.2
    (1 ratings)
    User Testimonials
    FireMonSplunk SOAR
    Likelihood to Recommend
    FireMon
    FireMon is best used in a large environment (for example, I have >100
    firewalls in my environment). It's best used when trying to improve
    security posture and showing changes in firewall security over time. It
    might not be the best choice for smaller environments or those that aren't concerned about security management.
    Incentivized
    Read full review
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Pros
    FireMon
    • Give good real time reporting for anyone making a change to any of our firewalls
    • Provides good reporting tools that are out of box
    • Provide good customization tools that is specific to our needs
    • Upgrades are a simple process and support does relatively well with assisting us.
    Incentivized
    Read full review
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Cons
    FireMon
    • Some features could be added to the existing functionality which include NAT rules usage
    • Rule expiration normalization from firewalls rather than entering them in rule documentation
    • .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased
    Incentivized
    Read full review
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Likelihood to Renew
    FireMon
    The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.
    Incentivized
    Read full review
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Usability
    FireMon
    It save me time and I'm able to have the review - review the rule independently with using my time.
    Incentivized
    Read full review
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Reliability and Availability
    FireMon
    FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.
    Incentivized
    Read full review
    Cisco
    No answers on this topic
    Performance
    FireMon
    I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.
    Incentivized
    Read full review
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Support Rating
    FireMon
    FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
    Incentivized
    Read full review
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    In-Person Training
    FireMon
    No answers on this topic
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Online Training
    FireMon
    No answers on this topic
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Implementation Rating
    FireMon
    Implementation is fairly simple. Most issues can be resolved by referencing manuals.
    Incentivized
    Read full review
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Alternatives Considered
    FireMon
    I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them
    Incentivized
    Read full review
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Scalability
    FireMon
    Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.
    Incentivized
    Read full review
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Return on Investment
    FireMon
    • FireMon's Compliance Reporting provided an immediate and tangible benefit
    • FireMon helps identify egregious or erroneous rules quickly across multiple platforms
    • FireMon took our audit process from an Excel spreadsheet into a far more advanced process with readily available context for reviewers
    Incentivized
    Read full review
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    ScreenShots