Cisco Routers vs. Trellix Network Security

We will recommend theCisco Routers if there is requirement of high availability and more reliability. Also it is best for implementing and achieving state of the art technologies in both enterprise and service provider environment. The integrated management and monitoring solutions it comes with makes the routers attractive for all network operations. We don't recommend the Cisco Routers if cost is a concern since all these next generation features are very expensive.

Incentivized

It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.

Incentivized

• Helps to separate routing information for different networks for different customers.
• Helps peers with service providers and Customer Networks and starts the exchange of information between them.
• Helps facilitate internet connectivity for enterprise networks.
• Helps transferring Internet or Private Data from one place to another.

Incentivized

• Advanced detection of targeted attacks.
• Mandiant team effort is a big plus.
• Inline mitigation capabilities particularly well.
• Different deployment models for specific needs.
• License and information sharing selection 1 way or 2 way mode.
• Frequent updates.
• Low false positive rates.
• FireEye sandboxing is immune to sandboxing attacks.
• Central management (CMS) capabilities for managing several NX's.
• Extra IPS/IDS functionality in the product.
• Smartvision specific to lateral movement detection.
• Upgrades and updates with zero down time.
• Local FireEye support is superb.
• Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
• SSL inspection support.
• No need to maintain, build or updates the images. It's highly automatic.

Incentivized

• I have had the opportunity to work with different vendors of routers and simply from my point of view they are the best equipment in the market. Perhaps the unfavorable point is the costs compared to other manufacturers, but they are still the best option

Incentivized

• Very first detected APT sample can pass the NX even it's inline blocking mode.
• Performance optimization for busy networks is cumbersome.
• CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
• Constant limitations of tcpdump/ packet capture for 10G interfaces.
• IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
• It's not a full NDR solution or a UBA solution.
• Lack of device or user mapping.
• Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
• You cannot make manual submission to NX (needs AX).
• You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).

Incentivized

We are extremely likely to renew, as we have been very happy with our Cisco Routers for over 10 years. Their uptime as well as stable nature makes them ideal for us, as we are an industry that cannot afford downtime. We trust our partner to recommend our next model Cisco, when the time comes.

Incentivized

The best thing about Cisco products is their presence in community. When you have a problem you can do quick search and find whoever else had the same question and expert answer for that question. Other thing is there are Cisco certified people we can find very easily if want some help with comissioning these products

Incentivized

Cisco support is very good. Of course, sometime you will run into support guy that isn't up to the task. Buf overall, the support system is well structure. You know if this support isn't able to help, you can esclate the situation to find another help. Also, their documentation is well developed and can be very useful.

Incentivized

Cisco Routers are the most reliable and stable internet edge routers ive used. They' have also always offered high performance for the most demanding traffic workloads. Lastly, from all of the various vendors I've used, Cisco routsrs have the best TAC support.

Incentivized

FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.

Incentivized

• Network management has become easy and fast with cloud based portal.
• Network policies could be rolled out quickly across the devices.
• Improvement in Network security.
• Stable internet connection has lead to less downtime and more productivity.
• Stable internet connection in each location within the organization.

Incentivized

• As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
• Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
• APTs in our region successfully detected and mitigated by the NX.
• For the ROI, in a six month period FireEye is paying off its [investment].
• One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.

Incentivized