CDO - A Great Product!
February 16, 2021

CDO - A Great Product!

Sneha Puri | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco Defense Orchestrator

Cisco Defense Orchestrator is being used by the network team to manage our Cisco firewalls. Due to the vast number of firewalls, we needed a single plane of management. CDO provides that plus a redundant way to manage the firewalls via their external IP. Additionally, it does monitoring for remote access VPNs which is great to have as opposed to having to log into the firewall to figure that.

It does have templates that can be used, but we haven't made use of that just yet.
  • Single plane of management.
  • VPN monitoring.
  • Remote management via external IP.
  • Cost.
  • Better templates like pushing config. when a particular firewall checks in with CDO.
  • Compliance checking for configurations would be great. For example: make sure http is shut and https is open.
  • Much faster management.
  • Can access firewall without having to go on site if the VPN tunnel is down.
We didn't really look at another product - don't think there is one. Cisco Prime I think was an option, but we didn't like the GUI and didn't consider it.

Do you think Cisco Defense Orchestrator delivers good value for the price?


Are you happy with Cisco Defense Orchestrator's feature set?


Did Cisco Defense Orchestrator live up to sales and marketing promises?


Did implementation of Cisco Defense Orchestrator go as expected?


Would you buy Cisco Defense Orchestrator again?


Cisco Identity Services Engine (ISE)
It is a great way to manage a vast number of firewalls. It can also be used to upgrade the firewalls as well. Great for monitoring VPN users. Config. standardization is possible.

Cisco Defense Orchestrator Feature Ratings

Policy planning and rule management
Automated Policy Orchestration
Device Discovery
Policy Compliance Auditing
Attack Path Simulation Testing
Not Rated
Anomalous Event or Behavior Deviation
Not Rated
Vulnerability Scans
Not Rated
Firewall Rule Cleanup