Item: Cisco Firepower 1000 Series
Rating: 8
Author: Verified User

Use Cases and Deployment Scope

It fills in the gap as Cisco Anyconnect remote access solution.

Pros and Cons

Single pane of glass management using FMC
Great as remote access VPN Solution
Saves a lot of headaches with URL and FQDN based policies
It is stable now, and Cisco TAC is great at troubleshooting if any issues occur

Great product but at this price point there is a lot of competition
Some implementations maxed out NGIPS throughput and Strained CPU

Return on Investment

It has always been positive experience in recent times with Firepower 1000 series: Customer satisfaction, lesser management overhead and policy enforcement with ISE integration.

Simplified Administration

Before Firepower 1000 appliance, there were a lot of management overhead and configuration inconsistencies. But now, they are the thing of the past.

Performance

Since version 6.4 it has been finally doing what it is meant to do. We have not seen any application down time because of Cisco Firepower.

There is still room for improvement. It would be great to see some of the features to mix between firepower and SD WAN. Any kind of dynamic tunneling support such as dmvpn will be great since it sits on the edge.

Alternatives Considered

[We've used] checkpoint 2200 and 3200 models. Based on the compromises we had to make by not applying the "Optimised" IPS profile and High CPU problems, I would suggest Firepower 1000 but Meraki MX series can take away the spot light from Firepower 1000.

Other Software Used

Palo Alto Networks Next-Generation Firewalls - PA Series, Fortinet FortiGate

Likelihood to Recommend

If your organisation is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.

Firepower 1000 (Mbps) Series

Software Version

Overall Satisfaction with Cisco Firepower 1000 Series