We performed a comparison between Cisco Secure Firewall vs Juniper SRX based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: The two solutions are very comparable. Each of them have a good set of features, and the solution you choose will ultimately be dependent on your company’s specific preferences and requirements.
"Easy to use support and licensing portal as well as activation process."
"The pipe filter application is an outstanding feature."
"The solution is easy to configure and maintain remotely."
"The Intrusion Prevention System and the web filtering are both working well."
"It is a safe product."
"Allows for firewall rules to be programmed and named in a way that makes it “readable”"
"A strong point of FortiGate is the graphical interface is complete and easy to use."
"Provides good firewall security and has great VPN features."
"VPN and firewall are good features."
"The ASA 55-x range is a solid and reliable firewall. It secures the traffic for normal purposes."
"The most valuable feature is IPS. It's a feature that's very interesting for tackling the most current attacks."
"You can also put everything into a nice, neat, little package, as far as configuration goes. I was formerly a command-line guy with the ASA, and I was a little nervous about dealing with a GUI interface versus a command line, but after I did my first deployment, I got a lot more comfortable with doing it GUI based."
"The user interface is very easy to manage and find rules. You can do object searches, which are very easy. Also, the logging is very simple to use. So, it is a lot easier to troubleshoot and find items inside the firewall."
"I like the way Firepower presents the data. It gives you two classifications for the evidence, something based on the priority of the evidence and another classification based on the impact of the evidence in your environment. This makes it very easy to spot the evidence that is most impactful to my environment. Instead of having to go through all the evidence based on that priority, I can focus on the evidence that has the most impact on my environment."
"We moved from a legacy firewall to the ASA with FirePOWER, increasing our Internet Edge defense dramatically."
"The most valuable feature must be AnyConnect. We have quite a few customers who use it. It is easy to use and the stablest thing that we have. We have experienced some issues on all our VPN clients, but AnyConnect has been the stablest one."
"We did not have problems with scaling, as we have less than 500 users in our organization."
"Juniper is one of the most powerful network security solutions while remaining simple to use, set up, and scale."
"The ports are really versatile for their application and don't always have to be used for the purpose for which they were made."
"The firewall features and the routing capability are the most valuable."
"Security policies in combination with zones: It is very easy to organize the security polices in a logical structure."
"The virtualization feature is the most valuable feature. Sometimes customers are requesting a private connection using mobile data when they are connecting to remote sites."
"It helped us with its routing capabilities which eased the cost, because otherwise I would have had to take a router and firewall, and then integrate it. With this, however, it was an integration of firewall and routing services all together in a single product. That was one thing that I loved about it."
"The high availability of the application is good."
"They should improve high CPU and memory usage that occurs."
"One of the problems I was having was with user mapping, and it is an issue for which I have escalated tickets with Fortinet support."
"The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility."
"The renewal price and the availability could be improved."
"Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards. Fortinet is lacking in features in comparison to competitors."
"There are some problems that support cannot give you a logical reason as to why it happened. For example, I had a case where I was dealing with a WhatsApp application that was giving issues. Technical support gave more than one reason it could be giving issues, but none of them solved the problem. Eventually I solved the problem, but it was far from the solutions that support had given."
"The support structure needs to be improved because every time we contact them, there is a delay in the response."
"Currently, without the additional reporting module, we only have access to basic reporting."
"The product crashes. We have a cluster of firewalls and we regularly get failovers."
"it is not very user-friendly for the administration."
"The usability of Cisco Firepower Threat Defense is an issue. The product is still under development, and the user interface is very difficult to deal with."
"There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products."
"Report generation is an area that should be improved."
"Changes you make in the GUI sometimes do not reflect in the command line and vice versa."
"The operation of the ASA is good but the problem is that whenever you require an upgrade, there are multiple pieces of software that you have to upgrade. Extensive planning is required, because if you upgrade one piece of the software it has to be compatible with the others as well. You always need to check the compatibility metrics."
"Cisco ASA is starting to get old and Firepower is taking over. All the good things happening are with Firepower."
"The GUI needs to be easier and more helpful for users who don't have security experience."
"In comparison to other enterprise-level firewalls, such as Cisco FTD, Cisco has improved significantly. In the past, I believed that Juniper SRX was superior, but after seeing the advancements in the FTD platform, Cisco has better functionality. I have not recently explored Juniper SRX's next-generation firewall capabilities as we only use basic firewall filtering in our enterprise network."
"It could improve areas which need high performance."
"The pricing strategy of the vendor could improve."
"We'd like to improve the stability and the kill rate."
"The capacity can be limiting. We have outgrown its capacity. You can only scale up to a certain extent, depending on the device purchased."
"The visibility/reporting could be better. To see something, you have to export the log to a syslog and then process with another product."
"The training videos that are available need to be improved, and made more educative."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Juniper SRX Series Firewall is ranked 18th in Firewalls with 86 reviews. Cisco Secure Firewall is rated 8.2, while Juniper SRX Series Firewall is rated 7.8. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Juniper SRX Series Firewall writes "Highly scalable, user-friendly UI, and easy to maintain". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Check Point NGFW, whereas Juniper SRX Series Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Palo Alto Networks NG Firewalls, Check Point NGFW and Meraki MX. See our Cisco Secure Firewall vs. Juniper SRX Series Firewall report.
See our list of best Firewalls vendors and best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.