Cisco Defense Orchestrator Reviews

Name: Cisco Defense Orchestrator
Brand: Cisco
Rating: 4 (14 reviews)

Vendor: Cisco

4.1 out of 5

14 reviews
100% willing to recommend

What is Cisco Defense Orchestrator?UNIXBusinessApplication
Price:

Cisco Defense Orchestrator (CDO) is a cloud-based management solution designed to ensure streamlined and consistent security policies across the Cisco security portfolio. Specifically tailored to manage all Cisco Secure Firewall form factors (running either ASA or Firepower Threat Defense (FTD) software), CDO offers real-time visibility and troubleshooting capabilities, effectively enhancing overall network security.

CDO addresses the challenges of migration, supporting transitions from on-premises to cloud environments and facilitating the shift from ASA to FTD configurations. As organizations embark on their cloud adoption journey, CDO simplifies provisioning workflows for remote branches, reduces operational expenditures related to inventory management, and offers scalability for multi-cloud deployments.

Get the Cisco Defense Orchestrator Buyer's Guide and find out what your peers are saying about Cisco Defense Orchestrator, AlgoSec, Tufin Orchestration Suite and more!

Cisco Defense Orchestrator is the #14 ranked solution in top Firewall Security Management solutions. PeerSpot users give Cisco Defense Orchestrator an average rating of 8.2 out of 10. Cisco Defense Orchestrator is most commonly compared to AlgoSec: Cisco Defense Orchestrator vs AlgoSec. Cisco Defense Orchestrator is popular among the large enterprise segment, accounting for 84% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 44% of all views.

Buyer's Guide

Cisco Defense Orchestrator

April 2024

Get the report

Helped 769,236 peers since 2012

Featured reviews

Todd Ellis

CTO at Secure Networkers

Jul 10, 2019

Some of the issues we've had aren't really a CDO problem. For example, we had some MX devices that were blocking Windows Update from happening. We found out it was a Meraki issue, but it would have been nice if it had been flagged for us: "Hey, these updates are failing because the MX is blocking it." It wasn't a huge problem, but there was a loss of our time as well as the fact that the updates didn't get pushed out. You could look at that as a security issue but, at the same time, when updates won't run for any reason on certain machines, you freak out a little bit. We thought it was a licensing issue with Microsoft or it could have been Dell EMC. But we were wasting time making all these phone calls and having people remotely troubleshoot it. The troubleshooters were saying, "Man, this looks like a network issue." They tethered a phone and joined it to the wireless on the phone to see if it would update and, boom, it started working. The weird thing was that when we switched it back over to the network, the Meraki was letting it through at that point. It would have been nice if CDO had let us know that that was an issue. There are probably some things that it could do as far as some of the analytics are concerned, things I know it would be capable of: "Hey, why are all these requests coming in? The reason is that a firmware update needs to happen on the Meraki. It's a known issue." That would be helpful.

Read full review

Richard Barton

Network and Data Centre Platform Manager at a manufacturing company with 1,001-5,000 employees

Jul 24, 2019

The most valuable feature is being able to do centralized upgrades on the ASAs. We can literally go in and tick a bunch of ASAs - we have them grouped within their business uses. We can select all of those ASAs, and say, "Upgrade these ASAs at this scheduled time." It will copy down the ASA image, ASDM image, and then do the upgrade and failovers, and then put it all back into service as required at a scheduled time. It automates that process for us. We use the command-line tool quite a lot to push out bulk commands and changes to ASAs. That saves us a considerable amount of time. We have firewalls that are used for guest WiFi access. We try and maintain them as a standard policy. We can do that centrally and push that out. As for its security features around storing our firewall configurations in the cloud, I take it that it's secure, from conversations I had at the time. It's all encrypted on REST and in transit. That goes through our security team, who respond with that information. It doesn't concern me particularly because I know it's all encrypted. We also use two-factor authentication to be able to log in to the solution as well. Obviously, you need the user name and password, and you need the multifactor authentication key. That's built-in, we use the one that's provided by CDO, which is OneProtect. That works for rules. Everybody has their own login and I've got a full, change-management log view, so I can see who's done what changes. The other advantage we get from that is, if somebody makes a change and there happens to be an out-of-hours issue, the users can log back in and they can look at the changes that were made on that firewall, and they can roll it back by clicking a button.

Read full review

Jairo Mendes

Network and Security Specialist at CONNECTED TECHNOLOGY

Jan 7, 2020

The most valuable feature is the restore history. For any changes that you have backed up, if something goes wrong, then the system will automatically prevent the system from crashing or from loss of the client's connection. When you start programming any ASA or device connected to CDO, if you make a mistake, you have the option to restore the previous configuration. You will not lose connection with the device and the client will continue working without problems. We use a lot of image upgrades. We take some 20 devices and then we update everything at once, including the policies. We apply policies for groups. For certain groups, like anti-viruses, we send out policies and apply them to every single device. It's really easy and simple. The solution’s security features for storing firewall configurations in the cloud are pretty secure. I don't see any problems with it. They have two-factor authentication. From what I see, it's working properly. I don't feel there is any gap there.

Read full review

Cisco Defense Orchestrator market share

As of April 2024, the market share of Cisco Defense Orchestrator in the Firewall Security Management category stands at 1.2%, marking a decrease of 16.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewall Security Management

Key learnings from peers

Valuable Features

"Cisco Defense Orchestrator has useful guides for the steps that need to follow by users."
"The most valuable feature is the Intrusion prevention."
"With Cisco Defense Orchestrator, we can manage the complete Cisco Security solution. It provides a simple and centralized way to manage all products."

Room for Improvement

"Cisco Defense Orchestrator can improve by providing more support for third-party security components."
"They need to work on the user interface. It needs to be improved to make it more user-friendly."
"They can centralize all products and provide a correlation about an incident and the response.They can also provide an on-premises solution. Currently, Cisco Defense Orchestrator is just for cloud deployments, not for on-premises deployments. Customers have to manage it on the cloud. We are based in Vietnam, and most of the customers here prefer to have on-premises deployments. Customers, especially from banking and government sectors, do not prefer to do anything on the cloud. Some of the small enterprises use the cloud."

Pricing

"I work with a lot of clients, and the price or value of the Cisco Defense Orchestrator can vary from one client to another. If you have a lot of Cisco solutions, the price of the Cisco Defense Orchestrator is justified. Whereas if you have some security components from other vendors, such as Check Point or Palo Alto. This solution would be a pretty expensive proposition considering that they don't integrate with them well."
"If you compare to what is available on the market, they are in the same range with respect to pricing."
"It is covered under the CIsco Enterprise License Agreement (ELA). So, it is licensed and ours."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Cisco Defense Orchestrator Buyer's Guide for additional reliable information.