Cisco Routers vs. FireMon

We will recommend theCisco Routers if there is requirement of high availability and more reliability. Also it is best for implementing and achieving state of the art technologies in both enterprise and service provider environment. The integrated management and monitoring solutions it comes with makes the routers attractive for all network operations. We don't recommend the Cisco Routers if cost is a concern since all these next generation features are very expensive.

Incentivized

FireMon is best used in a large environment (for example, I have >100
firewalls in my environment). It's best used when trying to improve
security posture and showing changes in firewall security over time. It
might not be the best choice for smaller environments or those that aren't concerned about security management.

Incentivized

• Helps to separate routing information for different networks for different customers.
• Helps peers with service providers and Customer Networks and starts the exchange of information between them.
• Helps facilitate internet connectivity for enterprise networks.
• Helps transferring Internet or Private Data from one place to another.

Incentivized

• PCI Reporting - After identifying which firewalls and rulesets are in scope, producing a report artifact to satisfy PCI requirements on Firewall reviews is literally a two-click operation.
• Storing Rule Metadata - FireMon stores metadata (prefilled fields, standard fields, and custom fields) for each rule in each policy which is valuable for context during firewall reviews in particular
• API - FireMon exposes most if not all of its functionality via REST API

Incentivized

• I have had the opportunity to work with different vendors of routers and simply from my point of view they are the best equipment in the market. Perhaps the unfavorable point is the costs compared to other manufacturers, but they are still the best option

Incentivized

• Some features could be added to the existing functionality which include NAT rules usage
• Rule expiration normalization from firewalls rather than entering them in rule documentation
• .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased

Incentivized

We are extremely likely to renew, as we have been very happy with our Cisco Routers for over 10 years. Their uptime as well as stable nature makes them ideal for us, as we are an industry that cannot afford downtime. We trust our partner to recommend our next model Cisco, when the time comes.

Incentivized

Once all the customization has been completed, the business is starting to see the return on investment. The visibility it provides into the network gear that is owned by other IT groups is immeasurable and has allowed us to apply standards across the board. The only thing I have concern with is their support documentation.

Incentivized

The best thing about Cisco products is their presence in community. When you have a problem you can do quick search and find whoever else had the same question and expert answer for that question. Other thing is there are Cisco certified people we can find very easily if want some help with comissioning these products

Incentivized

It save me time and I'm able to have the review - review the rule independently with using my time.

Incentivized

FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.

Incentivized

I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.

Incentivized

Cisco support is very good. Of course, sometime you will run into support guy that isn't up to the task. Buf overall, the support system is well structure. You know if this support isn't able to help, you can esclate the situation to find another help. Also, their documentation is well developed and can be very useful.

Incentivized

FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.

Incentivized

Implementation is fairly simple. Most issues can be resolved by referencing manuals.

Incentivized

Cisco Routers are the most reliable and stable internet edge routers ive used. They' have also always offered high performance for the most demanding traffic workloads. Lastly, from all of the various vendors I've used, Cisco routsrs have the best TAC support.

Incentivized

I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them

Incentivized

Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.

Incentivized

• Network management has become easy and fast with cloud based portal.
• Network policies could be rolled out quickly across the devices.
• Improvement in Network security.
• Stable internet connection has lead to less downtime and more productivity.
• Stable internet connection in each location within the organization.

Incentivized

• It helps us save us time in determining what change was made and by whom.
• Real time alerting is a great convenience in helping us know if something went wrong, we can immediately review the last report to determine what has changed.
• Allows us to determine what rules are not used and if said rules are still required.

Incentivized