We performed a comparison between Cisco Secure Firewall, Fortinet FortiGate, and Sophos Cyberoam UTM based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls.
"I like all of the features."
"If configured, Firepower provides us with application visibility and control."
"The high-availability features, the VPN and the IPSec, are our top three features."
"Firepower NGFW has improved my organization in several ways. Before, we were trying to stamp out security threats and issues, it was a one-off type of way to attack it. I spent a lot of manpower trying to track down the individual issues or flare-ups that we would see. With Cisco's Firepower Management, we're able to have that push up to basically one monitor and one UI and be able to track that and stop threats immediately. It also gives us a little more granularity on what those threats might be."
"Firepower has reduced our firewall operational costs by about 25 percent."
"The grouping of the solutions helps save time. If you have a problem and you have a high-level overview of the system, you can easily dig deeper into the problem. For example, I can check to see why ASA isn't working but the reason for the outage is actually because of Duo. I can spend a lot of time working in the wrong direction because I didn't have an overview."
"The dashboard is the most important thing. It provides good visibility and makes management easy. Firepower also provides us with good application visibility and control."
"Stability is perfect. I haven't had any problems."
"The base firewall features are quite valuable to us."
"We are using the FortiGate 100D series. VPN, firewall, anti-malware, OTM, and intrusion prevention are useful features."
"The CLI is robust and powerful, enabling rapid, consistent changes via SSH."
"This version is stable. I don't have any issues with this solution, in our environment, it works well."
"It has improved our security capabilities."
"The pipe filter application is an outstanding feature."
"The web tutor and automatic rules by schedule are good features."
"The most valuable feature is the FortiManager for centralized management."
"Good user interface."
"Its portal is user-friendly. I am able to manage the user data and access control through this device."
"The most valuable feature is the IPSec forwarding."
"Web Filtering and Application Filtering saves a lot of my bandwidth and improves the user's productivity."
"Our customers find it economical and offers good security. These two features are key. Ease of installation and implementation are also key factors."
"The main features I have found best are the load balancer and ease of use."
"The solution is easy to use."
"The interface is user-friendly."
"The operation of the ASA is good but the problem is that whenever you require an upgrade, there are multiple pieces of software that you have to upgrade. Extensive planning is required, because if you upgrade one piece of the software it has to be compatible with the others as well. You always need to check the compatibility metrics."
"With regards to stability, we had a critical bug come out during our evaluation... not good."
"Implementations require the use of a console. It would help if the console was embedded."
"Cisco should work on ASDM. One of the biggest drawbacks of Cisco ASA is ASDM GUI. Cisco should improve the ASDM GUI. The configuration through ASDM is really difficult as compared to CLI. Sometimes when you are doing the configuration in ASDM, it suddenly crashes. It also crashes while pushing a policy. Cisco should really work on this."
"One area that could be improved is its logging functionality. Your logs are usually displayed on the screen, but if you want to go back one or two days, then you need another solution in place because those logs are overwritten within minutes."
"There is huge scope for improvement in URL filtering. The database that they have is not accurate. Their content awareness and categorization for URL filtering are not that great. We faced many challenges with their categorization and content awareness. They should improve these categorization issues."
"One of my colleagues is using the firewall as an IPS, but he is worried about Firepower's performance... With the 10 Gb devices, when it gets to 5 Gbps, the CPU usage goes up a lot and he cannot manage the IPS."
"A memory leakage issue which literally freeze the nodes (we have an HA environment). The issue is still not solved and the only recommendation from Cisco is to reboot the node."
"Due to its higher cost, Fortinet FortiGate can lead to increased operational expenses."
"The firmware needs improvement because there are bugs when a new release comes through. Sometimes, the configuration changes, and it's a bit harder to see where the fail is. The first time that you have the firmware, it tends to have some issues, and it's better to wait a bit to update the equipment."
"The cloud management and automation capability could be improved."
"There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers. Why should you need to make so many extra purchases to enable features? They should have one price for the entire offering."
"There are a lot of bugs I have found in the solution and it is difficult to upgrade. These areas need improvement."
"The UTM filtering needs improvement."
"Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved."
"I would like to see improvements made to the dashboard and UI, as well as to the reporting."
"I would say there's room for improvement in terms of the GUI. Because it is better than some of the other standard firewalls. They have the drag and drop features."
"There are some issues with logs and report limitations."
"Sometimes, during part of the configuration, if you don't have a lot of technical knowledge, then you may struggle a bit to configure it."
"The setup is a bit complex, so we needed help from a consultant."
"The reporting should be improved as well as the backup."
"Network visibility is an area in the solution with shortcomings where improvements can be made."
"In my experience the solution can be easier to configure with more documentation, we need more training."
"On-box sandstorm should be available. As of now, it is from their cloud."
