We performed a comparison between Cisco Secure Firewall, Fortinet FortiGate, and Meraki MX based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."To be honest, all of the features that are provided, all the other vendor will also have. One feature we did find valuable was the CLI, it is more accurate. Additionally, I was happy with the customization, dashboards, access lists and interface."
"VPN, firewall, and IDS/IPS allow us to deliver services to meet client needs across various industry verticals."
"The Firepower+ISE+AMP for endpoint integration is something that really stands it out with other vendor solutions. They have something called pxGrid and i think it is already endorsed by IETF. This allows all devices on the network to communicate."
"The Inline Mode configuration works really well, and ASA works very impressively."
"Application inspection, network segmentation, and encrypted traffic detection or encrypted traffic analysis (ETA) are valuable for our customers."
"The solution offers very easy configurations."
"The architecture of FTD is great because it has an in-depth coverage and because it uses the AVC, (Application, Visibility, and Control) and also rate limits. Also, the architecture of fast paths is great."
"We use the solution for deep packet inspection, Internet Edge functionality, IDS, and IDP."
"All of the features of Fortinet FortiGate are useful and the security protection is good."
"LinkGreat firewall capabilities"
"FortiGate firewalls are user-friendly, and I like the security profiling features."
"Its performance in fulfilling our requirements has been satisfactory."
"Their interface is very easy to use, it is without bugs."
"Fortinet FortiGate is stable. It's used across all the countries, this is the way most multinationals run their system."
"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution."
"The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations. Additionally, the Security Fabric tool is very good."
"We work also with domain control (DC) from Microsoft or Amazon. We use a whole virtual appliance with Meraki."
"In a week, we can make new policy and view what all our users did."
"The technical support people from Meraki are brilliant."
"Traffic Shaping: The device lets you decide how you want to use your internet services. Due to the fact that Meraki can accept dual WAN, you can decide the way you balance the data traffic."
"Its ease of configuration and management is very useful for us and for other companies that don't have an onsite IT person. It is easy to configure and easy to manage. It is easy to configure the VPN with the Auto VPN feature."
"It has the most advanced security features, for example, layer 3 and layer 7 firewall capabilities and the end team and IPS protection. It also has IPS, and it has very good functioning of cloning services. You don't actually have to touch the device. If you have multiple companies in different countries, you don't really require this device to be touched. You can get it delivered directly to any office of a country, and then you can simply put your configuration over the cloud. It's very simplified and easy to manage. It gives a very good granular visibility about your network. Earlier, a lot of things were lacking in the network. We were unable to identify where the problem was, but after implementing Meraki MX, we are able to dig down and identify where is the problem. We can easily and quickly identify the sources and the root causes of the issues."
"Ease of management is the best thing about the solution."
"The most valuable feature is that we didn't have any problems with Meraki MX."
"HTTPs inspection and higher throughput/spec would be good."
"We would like to see MS Word BPM as a feature."
"In general, they can make it easier to manage the solutions. They can make it easier in terms of administration and provide a single tool for different firewalling solutions. They have different tools to manage different firewalls, such as Firepower or ASA. Sometimes, both are on the same thing. You have ASA with Firepower modules, so you manage some of the things via HTML, and then you manage some of the things via another management tool. It's not seamless."
"The relatively new Firepower Threat Defense image (mix of ASA and Sourcefire network security) fills a lot of gaps and features that were missing on ASA."
"I have worked with the new FTD models and they have more features than the ASA line."
"The ability to integrate (as options) all-in-one features -- like anti-spam, anti-virus, etc."
"As it’s a GenX firewall, expertise for both implementation and troubleshooting the pain points can be a challenge. This could be a concern when companies are thinking about buying this product."
"It will be nice if they had what you traditionally would use a web application scanner for. If the solution could take a deeper look into HTTP and HTTPS traffic, that would be nice."
"The firewall engine is not so strong as of now, in my opinion... My second concern is that, while they have Zero-day vulnerability and anti-malware features, the threat engine needs to be strengthened, its efficiency can be increased."
"There are some cloud-based features that could be much more flexible than they currently are."
"I would like to see improvements with the antivirus and IPS as they are not working properly all the time."
"It is very expensive, and their support is not very good. I hope that their technical support will be better in the future."
"I don't like that anything more than very basic reporting is not included."
"The command line is complicated, and the interface could be better."
"The renewal price and the availability could be improved."
"It needs more available central management."
"The product doesn't support route summarization and BGP dynamic routing protocol."
"The product is quite complex to set up."
"You cannot use switching behaviors as you see on the Meraki switch."
"The problem is that the two licenses do not currently integrate. We have to create separate companies and do an interconnection."
"They need to improve the link between Meraki and Active Directory."
"The configuration options for firewall and IPS have limitations."
"Meraki tech support staff have a lot more visibility into your network than you do, which is frustrating at times. I understand the approach is to keep the dashboard easier to understand. This will frustrate more advanced users at times."
"As far as what needs to be improved — nothing really comes to mind. It does what we need it to do."
