We performed a comparison between Cisco Secure Firewall and Forcepoint Next Generation Firewall based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We are a visual effects company, and there have been a number of high profile security issues in our industry. This has brought us to a higher standard of security, which our clients are very keen on these days."
"We purchased Fortinet because of the pricing, its functionality, because it met our requirements, and the total cost of ownership over five years was quite reasonable. In the market, Fortinet is rated quite well."
"It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly."
"The signature database and zero-day detection are Fortinet FortiGate's most valuable features."
"Virtual Domains (VDOMs) are a feature that we found valuable."
"We can detect any attack of viruses or malware at the first point of contact."
"This is a quality product with ok support, and it is better than the competition we've tried."
"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."
"We find all of its features very useful. Its main features are policies and access lists. We use both of them, and we also use routing."
"The architecture of FTD is great because it has an in-depth coverage and because it uses the AVC, (Application, Visibility, and Control) and also rate limits. Also, the architecture of fast paths is great."
"Once you add Firepower onto to it and you start enabling some of its features, you get some IDS/IPS involved with it and you can even do web filtering."
"We definitely feel more secure. We have more control over things going in and out of our network."
"An eight because it's a good security solution. It's more mature than its competitors."
"This solution has good security, and it's a good product. You can trust Cisco, and there's support as well, which is really good."
"Logging is great. It will show when it reaches its capacity before it is too late, unless you have bursts of traffic."
"I like its integration with the AnyConnect client. I also like how modular it is. For example, I can easily integrate the Umbrella add-on into it. We are planning on adding Umbrella. We haven't added it yet, but we have researched."
"Next Generation Firewall's best feature is that it can be managed on one platform."
"It is a scalable solution."
"The initial setup is very easy."
"The blocking, based on the signal provided, is the solution's most valuable aspect."
"The most valuable feature is controlling the traffic and the logging. They have real-time logins for traffic logs. Troubleshooting was very easy for me."
"Forcepoint is a good, stable solution."
"I found the initial setup process to be very simple and straightforward."
"I have found that Forcepoint Next Generation Firewall is easy to use, highly secure, and the main VPN tunnel is created automatically which is a benefit."
"The cloud management and automation capability could be improved."
"The logging details need to be improved."
"It is stable, but its stability can be improved."
"FortiGate support could do some improvements on their IPv6 configuration. Right now it's still in the very early stage for utilizing in an enterprise level network environment."
"To the best of my knowledge, Fortinet does not have a CASB solution and Fortinet does not have a Zero trust solution."
"We would like to see better pricing."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"Technical support is good but the response time could be faster."
"In a future release, it would be ideal if they could offer an open interface to other security products so that we could easily connect to our own open industry standard."
"The most valuable features of the product are the VPN and the NextGen firewall features such as application control, URL filtering, etc."
"We wanted to integrate Firepower with our solution, but it didn't have the capability to accommodate our bandwidth since they only had two 10 gig interfaces on the box. We run way more than that through our network because we are a service provider, providing Internet to our customers."
"I was just trying to learn how this product actually operates and one thing that I see from internal processing is it does fire-walling and then sends it to the IPS model and any other model that needs to be performed. For example, content checking or filtering will be done in a field processing manner. That is something that causes delays in the network, from a security perspective. That is something that can be improved upon. Palo Alto already has implemented this as a pilot passed processing. So they put the same stream of data across multiple modules at the same time and see if it is giving a positive result by using an XR function. So, something similar can be done in the Cisco Firepower. Instead of single processing or in a sequential manner, they can do something similar to pile processing. Internal function that is something that they can improve upon."
"Cisco wasn't first-to-market with NGFWs... they should look at what other vendors are doing and try not only to be on the same wavelength but a little bit better."
"The management of the firewalls could be improved because there are a lot of bugs."
"The Sandbox and the Web Censoring in this solution need to be improved."
"One feature I would like to see, that Firepower doesn't have, is email security. Perhaps in the future, Cisco will integrate Cisco Umbrella with Firepower. I don't see why we should have to pay for two separate products when both could be integrated in one box."
"The solution needs to add an antivirus profile and anti-spyware profile, not just policies and VPN."
"This solution would be improved with the inclusion of custom reporting."
"The endpoint protection capabilities of the product are an area of concern where improvements are required."
"Forcepoint is a little difficult to configure compared to its competitors."
"Something that I've noticed that Forcepoint lacks, is the training that they offer to their end-customers"
"If I want to allow access to Facebook, yet not allow the user to access videos, then I am not able to do it with this product."
"Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices."
"Next Generation Firewall's configuration could be improved."
More Forcepoint Next Generation Firewall Pricing and Cost Advice →
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Forcepoint Next Generation Firewall is ranked 25th in Firewalls with 40 reviews. Cisco Secure Firewall is rated 8.2, while Forcepoint Next Generation Firewall is rated 7.6. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Forcepoint Next Generation Firewall writes "Provides decent protection for the LAN but complicated interface". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Forcepoint Next Generation Firewall is most compared with Palo Alto Networks Advanced Threat Prevention, Check Point NGFW, Sophos XG, Netgate pfSense and Darktrace. See our Cisco Secure Firewall vs. Forcepoint Next Generation Firewall report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.