Cisco Secure Firewall
February 15, 2024
Cisco Secure Firewall
Score 9 out of 10
Vetted Review
Verified User
Software Version
Firepower 1150
Overall Satisfaction with Cisco Secure Firewall
We use the product for Geosegmentation for countries like China, Brazil, etc. We use basic prefilter policies and snort, currently we are considering integrating automation a bit more. We use ftds in addition to palo alto devices, so interoperability and integration is quite important for us. So far, the solution works for us with no major issues.
- Snort
- Troubleshooting
- Support
- Officially supported automation
- Simplification of Lina and Snort engines
- Global find option
- 3 remote regions geo segmented
- Managing ~20 FTDs with one FMC
- Easy for our local support team to get trained on it and perform operations
In my experience, Cisco Secure Firewall's advanced security features have had a significant positive impact on our business by providing robust protection against a wide range of threats without compromising network performance, like IPS, app control and SSL decryption. These features are important for our workloads, security posture, and general data protection.
Mostly working with logs via Splunk, it's a well designed feature, able to drill down and see various categorizations. It helps identify blocked traffic, anomalous behaviors and helps remediate those and possibly quarantine the offending users. VPN is quite easy to set up and manage, and every new FTD version brings useful features to it.
We use both vendors in our environment, I believe it's positive to go with multi vendor approach. As previously mentioned, the PA has the global find option, which is a big asset when troubleshooting. On the other hand, I feel the FTD's CLI is more intuitive and can help you get the right options quite faster.
Do you think Cisco Secure Firewall delivers good value for the price?
Not sure
Are you happy with Cisco Secure Firewall's feature set?
Yes
Did Cisco Secure Firewall live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of Cisco Secure Firewall go as expected?
I wasn't involved with the implementation phase
Would you buy Cisco Secure Firewall again?
Yes