Item: Cisco Secure Firewall
Rating: 8
Author: Verified User

Overall Satisfaction with Cisco Secure Firewall

Use Cases and Deployment Scope

We are selling, implementing and using Cisco Secure Firewallls for Segmentation, Visibility and of course Controlling Access to all kinds of device and user based communication within datacenter, campus and to the internet.
Also we leverage the central configuration and operational aspects and the integration with Cisco ISE for identity based controls.

Pros and Cons

Pros

Remote Access VPN
Layer 3/4 Firewalling
Live Log / Unified Eventing
Upgrading

Cons

SD-WAN / WAN-Fabric connectivity
onboarding of remote locations, especially in HA
Application detection and enforcement
end-to-end visibility via multiple firewalls
intelligent, automated alerting
network posture management
routing protocol wizards, routing integration (ACI)
language support (e.g.) German for IPS and AI-recommendations

Return on Investment

adoption phase and time to value is normally very short
ressources and learning material and community is comprehensive and supporting operations
change management is faster

Security and Performance

yes, good performance can be confirmed. internet security (transparent proxy) is fitting in some smaller cases despite using multiple security features like AMP and IPS does not seem to strengthen the security posture or true negative hit rate of the firepower. Firepower is still a firewall, not an extensive security stack.

Support Rating

TAC is basically very good. very dependent on the timezone you get.
Community and free ressources are great.

Cisco Security Ecosystem

yes, all strong implemented and fulfilled by Cisco Secure Firewall

Key Insights

Do you think Cisco Secure Firewall delivers good value for the price?

Yes

Are you happy with Cisco Secure Firewall's feature set?

Yes

Did Cisco Secure Firewall live up to sales and marketing promises?

Yes

Did implementation of Cisco Secure Firewall go as expected?

Yes

Would you buy Cisco Secure Firewall again?

Yes

Likelihood to Recommend

well suited for Remote Access and Site-to-Site VPN, throughput, efficiency, Layer3/4, user based ACLs

less appropriate for application only ware controls/ACLs, Malware detection, SD-WAN, networks with high count of VRFs and VLANs and ACEs in 10Ks, Automated Security responses

Cisco Secure Firewall Feature Ratings

Comments

Please log in to join the conversation

Cisco Secure Firewall - a state of the art firewall providing what its meant for ad a bit more

Software Version