Overall Satisfaction with Cisco ASA 5500-X with FirePOWER Services
The main problem with Cisco ASA was not security on application level and malware attack so Cisco introduced FirePOWER Services to cover all the parameters for a secure organization. The Cisco ASA with FirePOWER Services and Advanced Malware Protection (AMP) provide a security solution that helps you to find the threats and enforce the policies before an attack takes place. We have replaced single Cisco ASA with Cisco ASA with FirePOWER Services.
- Access Control Policy - means which traffic you want to permitted or denied in a network.
- Advanced intrusion detection and prevention.
- File control to secure your network.
- Advanced Malware protection.
- Application programming interfaces for securing your organization.
- Good performance.
- Support cloud features.
- Very expensive services.
- Cisco SFR ASDN slowness.
- Not a complicated in implement in existing network.
- Very expensive support.
- But technical support is really awesome.
- Sandboxing
We have implemented sandboxing for scanning the packet deeply. We were facing virus issues for some time so we chose this and are really happy now.
Cisco ASA FirePOWER provides us lots of features like sandboxing and advanced malware protection which provides us more security. But lots of options are missing and more complicated in Sophos XG Firewall. You will face lots of issues during implementation in existing network. CLI commands very difficult and not easy to remember during troubleshooting.