Item: Cisco Firepower 1000 Series
Rating: 10
Author: João Mauricio

Use Cases and Deployment Scope

It has been used by our organization as a network edge security platform. It also has the purpose of offering protection and visibility of layer 7 traffic. We have rules and acls in place to provide greater protection for the internal network and to prevent attacks by external attackers. In total there are two Firepower 1150 appliances and the second is to have a redundancy only where it is on standby. Along with the appliances, malware protection licenses and url filters were purchased.

Pros and Cons

Full network protection with ngfw licenses
Ssl vpn allowing the home office and access to network folders.
Protection against ransomware.
Web content filter and proxy for certain users and times.

Firewall is overloaded a lot when activating all licenses available at certain times.
Lack of documentation in Portuguese.

Return on Investment

We have seen a reduction in attempts by hackers to attack.
Complete protection in a single appliance.

Simplified Administration

The equipment has great management and interface and it ends up being easy to create the rules and apply the settings. We had many valuable management operation tips through the Cisco community. The GUI interface helps to select the categories of sites to be blocked and to set up a site-to-site vpn.

Performance

The performance when not activated all the features and licenses is excellent, however when activating everything we feel that there was a reduction in performance. Features like ssl decription use a lot of cpu and memory. In general everything is ok and firepower works well.

Support Rating

The guarantee is very important and fundamental in technology equipment. And in that, Cisco is one step ahead as it has excellent technical support and a very good SLA level. When we used it, we were served quickly and optimally. For hardware failures, Cisco sends new equipment to the address.

Other Software Used

KanbanFlow, Odoo, Cisco Aironet and Catalyst Access Points

Likelihood to Recommend

The firewall not only offers protection to our network, but also the possibility of making a home office and connecting with an ipsec or ssl vpn from home. The network is protected against malware, hackers and data attacks. URL filtering features help reduce viruses and protect against inappropriate websites. It is recommended for smaller scenarios and with few users. For scenarios with a higher density of people, the Firepower 2100 line is better.

Cisco Firepower is an authentic respected NGFW.

Software Version

Overall Satisfaction with Cisco Firepower 1000 Series