The menus just aren't as intuitive as I'd like.
Software Version
Firepower 1010
Overall Satisfaction with Cisco Secure Firewall
We utilize Cisco Secure Firewall as edge firewalls in our data centers as well as at edge firewalls at offices. We migrated naturally to the Firepower from ASA at end of life. We utilize them to inspect north/south traffic and to act as remote access VPNs into the data center. We don't utilize customized inspection policies. We mostly rely on default policies and we don't integrate with other Cisco products. The firewalls platform felt underdeveloped when we first converted a few years ago (2022), but since then they have been running fine.
Pros
- Remote Access VPN
- Small Firmware updates
- Policy sharing
Cons
- More notification of where we could improve our security posture
- Ease of configuration. A lot of jumping between menus right now.
- quick migration from ASA
We turned on IDS/IPS and inspection policies using default profiles, but haven't done a lot of tuning. They haven't disrupted the business, but we don't have a lot of time to dive into the reporting for me to comment on the business impact.
We utilize VPN (both P2P and remote access) via FMC. Remote access works well with users. P2P building is easy as well. We don't use the log management or analytics at this point.
Cisco Secure Firewall works better with the Cisco ecosystem when we can utilize it and feels beefy enough when we utilize it in the data center. The Fortinet we have found are great, small cost boxes for remote offices with a better UI then Cisco Secure Firewalls. The feature set included with the firewalls feels similar from a security point of view.
Do you think Cisco Secure Firewall delivers good value for the price?
Yes
Are you happy with Cisco Secure Firewall's feature set?
Yes
Did Cisco Secure Firewall live up to sales and marketing promises?
I wasn't involved with the selection/purchase process
Did implementation of Cisco Secure Firewall go as expected?
Yes
Would you buy Cisco Secure Firewall again?
Yes
Comments
Please log in to join the conversation