Item: Cisco Firepower 1000 Series
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

We use the Cisco firepower 1000 for routing, firewall functions, and security intelligence features. We replaced our older ASAs which had been failing with these. They offer better throughput and more security than the old ASAs. We provide website hosting and remote access for clients. Utilizing 2 incoming lines for dedicated fiber line with SLA and standard coble line for browsing. The Cisco with all the additional port offerings allows us to configure everything we need.

Pros and Cons

Routing
Firewall functions
Additional security features

These devices don't always take changes without a reboot, which can be hard in a production device.
Cisco is no always clear in how to configure things.
Routing features can be confusing, we even had a consultant a bit confused over setup.

Return on Investment

We have seen improved throughput on our internet.
It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.

Simplified Administration

We are now fully integrated with the Firepower's; they replaced failing ASAs. We have a high availability setup with failover. These devices simplified our environment, removing older ASAs and F5 equipment that was no longer supported. They will allow us more security in the near future as we turn those features on. Our improved speed and security were badly needed here, we have had multiple threats both inside and out that while the old ASAs were able to help some, these devices are definitely a step up.

Performance

Cisco Firepower has features for threat protection. We have not used all of these yet. They do require additional licenses, which we have purchased. From my experience with advanced features, it is best to monitor them before you turn them loose as that can have some undesirable results. LOL. There certainly are more full-featured appliances but for the price point and the reliability these have you can't beat them.

Support Rating

We have not directly used support for these devices yet, but from past experience, Cicso has always been available and able to help us resolve the few issues we had. During this upgrade, our consult from CDW worked with Cisco on some situations that came up and we were able to move forward at the next meeting but we could have done it in real-time if we wanted.

Alternatives Considered

Cisco ASA

These new Firepower's vs the older ASA are like night and day. The new interface, the additional features for security which were not available in the older ASAs to us. Everything about these new devices is making our job better (won't say easier because IT at this level always has challenges). We are very pleased with these devices.

Other Software Used

F5 BIG-IP, Ruckus ICX Switches (formerly Brocade ICX Switches), VMware vCenter Server

Likelihood to Recommend

This device is great for an SMB to secure its perimeter and allow the function of the business. With all the ports available and all the configurations, we are able to be flexible in our delivery of services to our clients. The security features are a big plus as everyone in today's world is being constantly attacked.

Cisco Firepower's have been a good upgrade to our environment

Software Version

Overall Satisfaction with Cisco Firepower 1000 Series