We performed a comparison between AlgoSec and Cisco Defense Orchestrator based on real PeerSpot user reviews.
Find out in this report how the two Firewall Security Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."R&D patches to address issues that I have encountered have been timely and effective."
"The most valuable feature is the Firewall Analyser, which has a number of fantastic features."
"It has reduced our audit preparation efforts and costs drastically and maintains continuous compliance."
"AlgoSec Firewall Analyser improves the firewall rules dramatically by identifying rules and objects that are not needed and consolidates rules and rule re-ordering."
"We are in the process of implementing FireFlow in our daily operation, which will make our lives even easier. The idea is to search the Firewall Analyzer for the equipment between the source and destination, and then automatically jump off to FireFlow and open a ticket. This will then automatically implement what is needed without the need to go into the Firewall itself. This will save us a lot of time and will help us to onboard junior engineers very quickly, getting them up to speed on our network and daily operation in record time."
"Optimizing the operation making it possible to focus on other improvements."
"I like the auto-mapping features and configuration overview. We use this for many things, but primarily for quick reactions to security events, audit, project management, and quick operational efficiencies."
"Thanks to this visibility, I was able to do my rule optimization."
"We use a lot of image upgrades. We take some 20 devices and then we update everything at once, including the policies. We apply policies for groups. For certain groups, like anti-viruses, we send out policies and apply them to every single device. It's really easy and simple."
"The ability to do operations on multiple firewalls at once is valuable because it saves time and mental effort. The solution's ability to make bulk changes makes it very convenient to manage things at once on multiple targets."
"I like the upgrade feature. That is pretty valuable to me because I have dual ASAs and when I go through CDO it does it for me pretty well. It's all done in the back-end and I don't really have to be involved. I just initiate, pick the image, and I pick when I want it done and it just does it, whether I have a single ASA or have a dual ASA."
"When we're looking to the policies, it identifies the shadow rules. It notifies us about anything that will supersede other rules."
"The bulk changes feature is definitely the most valuable."
"The initial setup was straightforward. We spun up the VM onsite. We generated the key that it needed to talk to the Cloud Orchestrator. After that, as I started adding devices, it was relatively quick and easy."
"Cisco Defense Orchestrator has useful guides for the steps that need to follow by users."
"With Cisco Defense Orchestrator, we can manage the complete Cisco Security solution. It provides a simple and centralized way to manage all products."
"We are running multiple hybrid cloud solutions, working with cloud providers, and looking for API integrations with cloud and related interoperability. Sometimes, when we are trying to delete or disable any rule, it takes more time than expected."
"To secure SaaS traffic there are a few vendors such as Palo Alto and Zscaler, but AlgoSec is not yet able to push rules onto these clouds."
"In the VMware platform, sometimes the application is frozen and we have to reload the machine."
"Further integration with ACI and NSX will be key to our customers' requirements moving forward, as customers adopt new, innovative environments."
"In terms of additional features in the next release, more integration with SD-WAN would be valuable."
"Support can be improved as there are time delays for resolutions."
"Automate the change documentation in MS Word format. Therefore, we can customize it, if needed."
"FireFlow was a bit tricky to configure with its customized flows."
"Cisco Defense Orchestrator can improve by providing more support for third-party security components."
"The dashboard needs to be more customizable to provide better reporting for our network."
"I've found dozens of bugs over the year we've been using it. The more I use it for different things, the more problems I find... Most of the problems have to do with the user interface. A lot of thought and work has gone into the back-end component to make the product do what it's intended to do, but the way it is presented for use hasn't gotten nearly as much thought to make it smart and bug-free."
"It should have more features to manage FirePOWER appliances."
"If I make a change locally to the firewall, CDO gives an alarm or an error message and says there's a change in compliance: "The firewall has this configuration but the last time it was compiled it had that configuration." That view of new changes versus the old could be better... I had to log in manually, locally on the firewall, to check which version, which configuration was actually running. I couldn't see it in CDO."
"CDO doesn't have a report, an official report that I can check daily. It has another module called FTD, but it doesn't have that specifically for ASA. In the reporting, there are a lot of things that aren't there. There is also room for improvement in the daily monitoring."
"The main thing that would useful for us would the logging and monitoring. I have to check it out, to get the beta, because I don't have access to them... I wanted CDO to be a central place so where I could do everything but right now I don't think that's possible. I really don't want to go back and forth between this and FMC. Maybe the logging portion, when I look at it, will give me some similarities."
"We had some MX devices that were blocking Windows Update from happening. We found out it was a Meraki issue, but it would have been nice if it had been flagged for us: "Hey, these updates are failing because the MX is blocking it." It wasn't a huge problem, but there was a loss of our time as well as the fact that the updates didn't get pushed out... It would have been nice if CDO had let us know that that was an issue."
Earn 20 points
AlgoSec is ranked 1st in Firewall Security Management with 173 reviews while Cisco Defense Orchestrator is ranked 14th in Firewall Security Management. AlgoSec is rated 9.0, while Cisco Defense Orchestrator is rated 8.2. The top reviewer of AlgoSec writes "Helps identify risks, reduce attack surfaces, and streamline policy changes". On the other hand, the top reviewer of Cisco Defense Orchestrator writes "Provides visibility into entire infrastructure and bulk changes save time and resources". AlgoSec is most compared with Tufin Orchestration Suite, FireMon Security Manager, Skybox Security Suite, Palo Alto Networks Panorama and VMware NSX, whereas Cisco Defense Orchestrator is most compared with Palo Alto Networks Panorama, Tufin Orchestration Suite and Azure Firewall Manager. See our AlgoSec vs. Cisco Defense Orchestrator report.
See our list of best Firewall Security Management vendors.
We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
