Cisco Firepower 4100 Series vs. Cisco Secure Firewall

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

The software offers advanced firewall solutions from Web threats management to behavioural analytics and comprehensive application security. Cisco Secure firewall software is incredibly easy to deploy and implement. Customer support services providers are concise and very responsive. Integration and customization of the software are exceptional. The product boasts impressive capabilities, enabling it to stop threats and manage all security flaws in real time.

Incentivized

• Policy management in the GUI. I'm old-school, and still create ACLs in the CLI, but using the GUI for this is very nice.
• Event monitoring and reporting is great, and you can get very granular when it comes to what information you are viewing.
• I really like the troubleshooting features that are built in, especially the packet tracer and the ability to generate and download a troubleshooting package to review or send to TAC.

• It's good at segregating networks and ensuring that you only give the access that you need to give. Especially with medical devices, you want to only give the access that they need and keep them in their own separate areas so that they can't just communicate with the rest of the network. It's also good at the border for keeping attackers out of the network.

Incentivized

• When deployed as Firepower Threat Defense, configurations cannot be made within the device itself.
• Troubleshooting can be difficult if the Cisco Firepower 4100 Series firewall is managed by the Cisco Firepower Management Center.
• There are two operating systems in Cisco Firepower 4100 Series, firmware upgrade process will take a long time.

• I have one argument, failover scenario. It's not quite easy. Failover scenario of firewalls. It's sometimes not quite easy to know the issue. But if we open a tech case, a technical case to Cisco, Cisco will help us, it's a little bit con, but we are happy with this product.

Incentivized

It works really well. We can do most anything we want or need to with it, and you don’t have to have a doctorate or multiple certs to necessarily figure it out. The thing that would probably have to happen to make us switch would be if we just got priced out - Cisco’s more powerful and higher bandwidth models cost a pretty penny.

Incentivized

It not easy to understand the different features it offers. Sometimes you need to spend a couple of minutes to implement a change or even open a ticket with cisco tac to figure it out. Once support is on the phone with you they know how to resolve problems. But it's not an intuitive tool

Incentivized

The platform is powerful and feature-rich, especially when paired with tools like Firepower Management Center (FMC) and SecureX. The policy structure is logical, and the visibility into traffic flows, threat activity, and rule hits is quite strong once you're familiar with the interface

Incentivized

As for the availability, in general we did not experience any issues with it, neither in situations where there's only one physical device implemented nor when there's and High Availability pair. Failover works like a charm, no complaints here, it works as it should and so far it has been highly reliable.

Incentivized

no slowing down, vpn is working fast

Incentivized

Our experience with Cisco TAC support for Cisco Secure Firewall has been very good. The support engineers are knowledgeable about the product and have many tools available to them to work "under the hood" of the firewalls or management center. When we've had equipment failures, the RMA process has been simple and straightforward.

Incentivized

very good

Incentivized

was a good training but questions was answered not so good. Training was "Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention (SFWIPF)".

Incentivized

Our initial implementation was aided by Cisco's professional services and was excellent. The engineer was very knowledgeable and helped us work through issues while building out our new internet security edge Part of this involved tools to migrate the firewall configuration from old to new.

Incentivized

We switch to Palo Alto due the amount of tickets open with Cisco Firepower 4100 Series. It was taking a great amount of time for our engineers to fix problems. But it was a great tool when it was working as we were expecting. The fact it has a lot of instability on the releases was the deciding factor.

Incentivized

Cisco Secure Firewall works better with the Cisco ecosystem when we can utilize it and feels beefy enough when we utilize it in the data center. The Fortinet we have found are great, small cost boxes for remote offices with a better UI then Cisco Secure Firewalls. The feature set included with the firewalls feels similar from a security point of view.

Incentivized

you can choose up to 50 devices i think thats enough for our organization

Incentivized

• Quickly respond to incidents using vpn remote access
• VPN L2L used to establish connections with global providers
• Up to 2000+ vpn access without having performance issues
• Granular access with policy groups based on the AD user

Incentivized

• Cisco Secure Firewall gives details on the possible intrusions attempts that are occurring on the network, which gives stakeholders confidence that the network is being protected.
• Cisco's reputation as a longstanding network leader provides the trust that is needed in keeping networks secure.
• The wide variety of tools and features that Cisco Secure Firewall provides allows business owners to plan for changes that can occur in the network as Cisco is able to adapt to the different needs.

Incentivized