Cisco Secure Firewall vs. Trellix Network Security

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Cisco Secure Firewall
Score 8.1 out of 10
N/A
Cisco Secure Firewall delivers comprehensive threat protection for modern, distributed networks. Built to support hybrid workforces and multicloud environments, it enables Zero Trust access, application visibility, and secure remote connectivity. With integration across the Cisco Secure portfolio, including SecureX and Talos threat intelligence, the firewall powers organizations to detect and stop more sophisticated threats. Centralized management simplifies policy enforcement, orchestration,…N/A
Trellix Network Security
Score 8.6 out of 10
Enterprise companies (1,001+ employees)
Trellix Network Security (formerly FireEye Network Security and Forensics products) combines network traffic analysis and network forensics for attack analysis .
$0
per appliance/ per mbps
Pricing
Cisco Secure FirewallTrellix Network Security
Editions & Modules
No answers on this topic
SmartVision
$0
per appliance/ per mbps
Offerings
Pricing Offerings
Cisco Secure FirewallTrellix Network Security
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeOptional
Additional Details
More Pricing Information
Community Pulse
Cisco Secure FirewallTrellix Network Security
Considered Both Products
Cisco Secure Firewall
Chose Cisco Secure Firewall
on par with other firewalls vendors I've used over the years
Chose Cisco Secure Firewall
It has great features, and compared to competitors, the cost of deployment is manageable too.
Chose Cisco Secure Firewall
While Cisco Secure Firewall is pricey, it delivers and does not compromise on capabilities. It is the best for network protection. Worthy every dollar.
Chose Cisco Secure Firewall
Cisco is more secure than FortiGate.
Chose Cisco Secure Firewall
The administraion interface of the Cisco secure firewall is a lot more easy to learn than the Palo Alto solution. Also, the dashboard panels offers by Cisco seems a lot more useful and details than the Palo Alto solution.
Chose Cisco Secure Firewall
Having worked in the Fortinet and Sonicwall space, I have found that the Cisco Secure Firewall platform is the easiest to work with. The platform is easily customizable and overall very clean. Cisco has kept the platform feeling fresh with regular updates.
Chose Cisco Secure Firewall
We use it because it's the best firewall on the market now. And are the best protection and hardware.
Chose Cisco Secure Firewall
Cisco has a more seamless integration with its firewall management center compared to palo alto's panorama which tends to become out of sync with their firewalls. This can cause config differences, duplicate rules, or just the inability to deploy polices due to inconsistencies. …
Chose Cisco Secure Firewall
Well FWs are branch security things and major things so really not much similar device at Cisco portfolio.
Chose Cisco Secure Firewall
Cisco Nexus Series Switches
Chose Cisco Secure Firewall
They are peer competitors, with Palo Alto offering some advantages over the Cisco products in the way of licensing simplicity and costs. The Palo Alto also supports the abilty to do "to the box" filtering and policy enforcement where Cisco requires special rules that are …
Chose Cisco Secure Firewall
Palo Alto Networks Next-Generation Firewalls - PA Series and VMware SD-WAN
Chose Cisco Secure Firewall
I personally didn't evaluate any other products. We were already working with Cisco, so just keep upgrading.
Chose Cisco Secure Firewall
I've used Ubiquiti products, SonicWall products, the various older Cisco and Meraki. Cisco is definitely more of an enterprise level and overall it has probably better overall options and integrations and functionality and we've continued to choose to use it because it works …
Chose Cisco Secure Firewall
We utilize these two products together to provide enhanced user experience and security.
Chose Cisco Secure Firewall
Cisco Secure Firewall works better with the Cisco ecosystem when we can utilize it and feels beefy enough when we utilize it in the data center. The Fortinet we have found are great, small cost boxes for remote offices with a better UI then Cisco Secure Firewalls. The feature …
Chose Cisco Secure Firewall
Cisco Secure Firewall outperforms and the feature set are much better.
Chose Cisco Secure Firewall
I'm still evaluating new data center build out with Palo Alto, Cisco Secure Firewall or other.
Trellix Network Security
Chose Trellix Network Security
FireEye NX is a solid product. It gives you sustainable security throughout the organization. NX detection engines are more capable compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
Features
Cisco Secure FirewallTrellix Network Security
Firewall
Comparison of Firewall features of Product A and Product B
Cisco Secure Firewall
7.9
Ratings
9% below category average
Trellix Network Security
-
Ratings
Identification Technologies8.10 Ratings00 Ratings
Visualization Tools7.00 Ratings00 Ratings
Content Inspection8.20 Ratings00 Ratings
Policy-based Controls8.80 Ratings00 Ratings
Active Directory and LDAP8.70 Ratings00 Ratings
Firewall Management Console8.20 Ratings00 Ratings
Reporting and Logging7.20 Ratings00 Ratings
VPN7.70 Ratings00 Ratings
High Availability8.50 Ratings00 Ratings
Stateful Inspection7.90 Ratings00 Ratings
Proxy Server6.80 Ratings00 Ratings
Best Alternatives
Cisco Secure FirewallTrellix Network Security
Small Businesses
pfSense
pfSense
Score 9.9 out of 10
NinjaOne
NinjaOne
Score 9.0 out of 10
Medium-sized Companies
Quantum Firewalls and Security Gateways
Quantum Firewalls and Security Gateways
Score 9.6 out of 10
Cisco Meraki MX
Cisco Meraki MX
Score 9.1 out of 10
Enterprises
Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series
Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series
Score 10.0 out of 10
Cisco Meraki MX
Cisco Meraki MX
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Cisco Secure FirewallTrellix Network Security
Likelihood to Recommend
8.1
(0 ratings)
9.0
(0 ratings)
Likelihood to Renew
7.2
(0 ratings)
-
(0 ratings)
Usability
9.0
(0 ratings)
-
(0 ratings)
Availability
9.1
(0 ratings)
-
(0 ratings)
Performance
5.0
(0 ratings)
-
(0 ratings)
Support Rating
7.6
(0 ratings)
-
(0 ratings)
Implementation Rating
8.0
(0 ratings)
-
(0 ratings)
Product Scalability
5.0
(0 ratings)
-
(0 ratings)
User Testimonials
Cisco Secure FirewallTrellix Network Security
Likelihood to Recommend
The software offers advanced firewall solutions from Web threats management to behavioural analytics and comprehensive application security. Cisco Secure firewall software is incredibly easy to deploy and implement. Customer support services providers are concise and very responsive. Integration and customization of the software are exceptional. The product boasts impressive capabilities, enabling it to stop threats and manage all security flaws in real time.
Read full review
It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.
Read full review
Pros
  • It's good at segregating networks and ensuring that you only give the access that you need to give. Especially with medical devices, you want to only give the access that they need and keep them in their own separate areas so that they can't just communicate with the rest of the network. It's also good at the border for keeping attackers out of the network.
Read full review
  • Advanced detection of targeted attacks.
  • Mandiant team effort is a big plus.
  • Inline mitigation capabilities particularly well.
  • Different deployment models for specific needs.
  • License and information sharing selection 1 way or 2 way mode.
  • Frequent updates.
  • Low false positive rates.
  • FireEye sandboxing is immune to sandboxing attacks.
  • Central management (CMS) capabilities for managing several NX's.
  • Extra IPS/IDS functionality in the product.
  • Smartvision specific to lateral movement detection.
  • Upgrades and updates with zero down time.
  • Local FireEye support is superb.
  • Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
  • SSL inspection support.
  • No need to maintain, build or updates the images. It's highly automatic.
Read full review
Cons
  • I have one argument, failover scenario. It's not quite easy. Failover scenario of firewalls. It's sometimes not quite easy to know the issue. But if we open a tech case, a technical case to Cisco, Cisco will help us, it's a little bit con, but we are happy with this product.
Read full review
  • Very first detected APT sample can pass the NX even it's inline blocking mode.
  • Performance optimization for busy networks is cumbersome.
  • CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
  • Constant limitations of tcpdump/ packet capture for 10G interfaces.
  • IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
  • It's not a full NDR solution or a UBA solution.
  • Lack of device or user mapping.
  • Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
  • You cannot make manual submission to NX (needs AX).
  • You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).
Read full review
Likelihood to Renew
It works really well. We can do most anything we want or need to with it, and you don’t have to have a doctorate or multiple certs to necessarily figure it out. The thing that would probably have to happen to make us switch would be if we just got priced out - Cisco’s more powerful and higher bandwidth models cost a pretty penny.
Read full review
No answers on this topic
Usability
The platform is powerful and feature-rich, especially when paired with tools like Firepower Management Center (FMC) and SecureX. The policy structure is logical, and the visibility into traffic flows, threat activity, and rule hits is quite strong once you're familiar with the interface
Read full review
No answers on this topic
Reliability and Availability
As for the availability, in general we did not experience any issues with it, neither in situations where there's only one physical device implemented nor when there's and High Availability pair. Failover works like a charm, no complaints here, it works as it should and so far it has been highly reliable.
Read full review
No answers on this topic
Performance
no slowing down, vpn is working fast
Read full review
No answers on this topic
Support Rating
Our experience with Cisco TAC support for Cisco Secure Firewall has been very good. The support engineers are knowledgeable about the product and have many tools available to them to work "under the hood" of the firewalls or management center. When we've had equipment failures, the RMA process has been simple and straightforward.
Read full review
No answers on this topic
In-Person Training
very good
Read full review
No answers on this topic
Online Training
was a good training but questions was answered not so good. Training was "Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention (SFWIPF)".
Read full review
No answers on this topic
Implementation Rating
Our initial implementation was aided by Cisco's professional services and was excellent. The engineer was very knowledgeable and helped us work through issues while building out our new internet security edge Part of this involved tools to migrate the firewall configuration from old to new.
Read full review
No answers on this topic
Alternatives Considered
Cisco Secure Firewall works better with the Cisco ecosystem when we can utilize it and feels beefy enough when we utilize it in the data center. The Fortinet we have found are great, small cost boxes for remote offices with a better UI then Cisco Secure Firewalls. The feature set included with the firewalls feels similar from a security point of view.
Read full review
FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.
Read full review
Scalability
you can choose up to 50 devices i think thats enough for our organization
Read full review
No answers on this topic
Return on Investment
  • Cisco Secure Firewall gives details on the possible intrusions attempts that are occurring on the network, which gives stakeholders confidence that the network is being protected.
  • Cisco's reputation as a longstanding network leader provides the trust that is needed in keeping networks secure.
  • The wide variety of tools and features that Cisco Secure Firewall provides allows business owners to plan for changes that can occur in the network as Cisco is able to adapt to the different needs.
Read full review
  • As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
  • Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
  • APTs in our region successfully detected and mitigated by the NX.
  • For the ROI, in a six month period FireEye is paying off its [investment].
  • One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.
Read full review
ScreenShots

Cisco Secure Firewall Screenshots

Screenshot of Cisco Secure 1200 Series Firewall FamilyScreenshot of Cisco Secure 4200 SeriesScreenshot of Cisco Secure 4200 SeriesScreenshot of Cisco Secure Firewall 1200 Stack FamilyScreenshot of Cisco Secure Firewall 200 SeriesScreenshot of Cisco Secure Firewall 200 Series

Trellix Network Security Screenshots

Screenshot of Network Security Dashboard- Summary view of alerts and threats to organizationScreenshot of Alerts dashboard- detailed information around alerts discovered by FireEye Network SecurityScreenshot of Configuration for FireEye Network Security Product.