FireMon is a real-time security policy management solution built for today’s complex multi-vendor, enterprise environments. Supporting the latest firewall and policy enforcement technologies spanning on-premises networks to the cloud, FireMon delivers visibility and control across the entire IT landscape to automate policy changes, meet compliance standards, to minimize policy-related risk. Since creating their policy management solution in 2004, FireMon states they've helped…
N/A
VMware SD-WAN
Score 8.1 out of 10
N/A
VMware SD-WAN (formerly VeloCloud) aims to deliver high-performance, reliable branch access to cloud services, private data centers, and SaaS-based enterprise applications. VeloCloud was acquired by VMware in 2018.
FireMon is best used in a large environment (for example, I have >100 firewalls in my environment). It's best used when trying to improve security posture and showing changes in firewall security over time. It might not be the best choice for smaller environments or those that aren't concerned about security management.
VMware SD WAN is a great solution for tying multiple locations together that are not physically located close. The link aggregation used in the technology allows for quicker failover to redundant connections, which makes the surface traffic seem to be uninterrupted. If planning to connect multiple locations while utilizing the existing internet, Veloclouds SDWAN provides stable and accurate aggregation of connections that provide a good sense of stability for the price.
The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.
VMware SD-WAN has great usability. We have had a positive experience with the solution. It has helped solved a number of issues with our network such as visibility in user usage, application usage, and prioritizing critical application network traffic. VMware SD-WAN user interface is also very easy to understand and configure.
FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.
I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.
FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.
There are still some glitches that need to be worked out. As an example, I rebooted a device at one of our branch locations and it just died. That should never have happened, and I've only seen this happen when a company needs to improve hardware on some of their lower-end models.
I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them
At the time we made our decision to move forward with VeloCloud, Cisco Viptela and Cisco Meraki were the two players we compared against. Cisco's offerings were very customizable when using Viptela, but there was a big learning curve to implement. Meraki at the time was a lot simpler, but we needed the ability to customize some features in order to implement SD-WAN in our environment. VeloCloud was the perfect solution during our POC as it satisfied our needs.
Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.
Ease of deployment: the amount of time saved when adding additional sites to the solution, especially when you have a profile already built and when you add a new VC you just associate that profile with that appliance. Again, in a matter of minutes, you can have a new site up and running.
Since there is not true firewall built-in, you would have to either purchase a third-party firewall or the virtual firewall that is supported by Velocloud.
