Cisco ASA NGFW Initial Setup

Security Officer at a government
We found the initial setup to be pretty straightforward the way we did it. We ended up doing one-on-one replacement. But as the environment grew and the needs grew, we ended up branching it off into different segmentations. Going from two devices to five devices took us a little over a year. That was all at one location though. We branched it off, each one handling a different environment. For the first one, since it was new to us and there were some features we weren't familiar with, we had a partner help us out. Including configuring, install, bringing it into production, and going through a learning process — in monitoring mode — it took us about two to three days. Then, we went straight into protective mode. Within three years we had a Sourcefire ruleset on all that configured and deployed. It was done in parallel with our existing infrastructure and it was done in-line. That way, the existing one did all the work while this one just learned and we watched what kind of traffic was flowing through and what we needed to allow in to build a ruleset. It took three of us to do the implementation. And now, we normally have two people maintain the firewalls, a primary and a secondary. View full review »
Senior Network Engineer at Orvis Company, Inc
I wasn't around for the initial setup, I was just starting. We were moving from Check Point to the ASA. It took about six months for them to engineer it and put it in place. The implementation strategy was to try to determine all the rules in the Check Point and duplicate all those rules in the FirePOWER. We had to roll back twice before it finally took. That wasn't anything to do with the FirePOWER or the ASA. It had more had to do with the person who had to put the rules in and understanding what was actually needed and how they should be put in. View full review »
Network & Security Administrator at Diamond Bank Plc
I will say Cisco ASA has a complex setup just based on the security policy we have to enforce (asked by the chief, the CIO). For me, it's not complex. Cisco ASA is not difficult because I am in it for a year so it's easy for me to understand. I have no problem on the technical side. I always manage to do what I'm asked to do on security-side enforcement. I have no problem with that. It's normal for me. It was 2 years ago that we were trying to deploy our facility equipment. We took advantage to deploy the Cisco ASA firewall (model 5515X). For now, it's the only one. Since then, we're using it in an upcoming project. I will have to deploy some Fortigate and Cisco ISL as well. View full review »
Find out what your peers are saying about Cisco, Fortinet, Juniper and others in Firewalls. Updated: March 2020.
406,860 professionals have used our research since 2012.
Beka Gurushidze
System Administrator at ISET
We announced the tender and bought this product with the installation plus setup included in the price. I was not involved in the installation or in the setup. The company just asked a consultant to do it. The whole process, after we announced the tender, took about one to two weeks. The consultant company installed the software. They also helped us to optimize other parts of the network such as the routers and switches. The setup of the Cisco ASA NGFW was complex, not only for us as a firewall. We have now submitted another tender for a device router with two-node switchless support. We updated almost everything on the Cisco ASA NGFW with the core and distribution level software upgrades. View full review »
Amit Gumber
Senior Manager at HCL Technologies
The initial setup is quite straightforward. It's quite simple, without any complexities. Whenever we find any issue during the primary phase, we reach out to the Cisco technical support team for assistance and within a short period of time we get support from them. The most recent deployment we did took about three weeks. In terms of deployment plan, we go with a pre-production consultation. We create a virtual model, taking into account all the rules, all the cabling, and how it should work in the environment. Once everything on the checklist and the prerequisites are in place, then we migrate the existing devices into production. View full review »
Mustafa Ahmed
Network Security Engineer at qicard
I wasn't part of the company at the time of the initial setup, and I am just performing additional tasks. We have a staff of a maximum of three or four persons so once the deployment is live it doesn't need much effort. I'm not sure if the company has plans to increase usage and grow our responsibilities. It's not not for me to decide. I think the company is growing and traffic is increasing. But my superior is the person responsible for determining when it is time to scale. View full review »
IT Manager, Infrastructure, Solution Architecture at ADCI Group
The initial setup of this solution is straightforward. The deployment does not take much time. It is just a matter of installing the firewall and configuring the basic system to get it up and running. That's it. There are, of course, different models of deployment, like deploying customers, that have to be considered. However, for the most part, deployment time is not an issue at all. View full review »
Ahmed Nagm
The initial setup was straightforward, though I find as we proceed we need an extra feature or two to enable all the functionalities and protection of the tool. It's an ongoing process. We have to be quick and agile to provide client support. View full review »
Heritier Daya
Network Administrator at a financial services firm with 1,001-5,000 employees
The initial setup of this solution was a bit complex because it was a new technology for us. We did find documentation on the vendor's website, and it also helped that we found some videos on how to do the configuration. Our initial deployment took approximately three months because we were learning from scratch. We still had some service requests open because we could not fine-tune the solution, and ultimately it took a full year to fully deploy. This solution is managed by the qualified people in our network engineering team. View full review »
Senior Network Administrator at a construction company with 1,001-5,000 employees
The initial setup was complex because we had to migrate old ASA firewalls. The ACLs, or rather the policies, are very different now, and way more elaborate, so that that took some tweaking, and some consulting and some time. Deployment took two months. We had to make sure that our old ACL base settings from the ASAs were correctly translated and implemented into the new FTD setups. View full review »
Nadika Perera
CEO at Synergy IT
The initial setup is a little difficult compared to other firewalls but once you get it right, especially the assistant control list, it's fine. It's a little difficult compared to other firewalls. The deployment took us about three days because we did some testing and we also did certain attacks and checked some hackers which is why it took some time. We wanted to make sure that it was at least 99.99% protected. View full review »
Information Technology Manager at a financial services firm with 10,001+ employees
The third-party did all of the setup. I told him what I wanted and he set everything up and got the tunnels for us as well. View full review »
Hassan Javaid
Senior Executive Technical Support at AITSL
The initial setup was completely straightforward. However, we have to rely on Cisco ASDM to access the firewall interface. This needs improvement. Because we have a web-based interface, and it is a lot more user-friendly. Deployment takes two or three days. We are continuously deploying the solution to our plants over time. View full review »
Solutions Architect at a manufacturing company with 10,001+ employees
The initial setup of this solution is pretty straightforward. We did have some rules that somebody had put on it that didn't match up, but we got it all worked out. View full review »
Senior Network Administrator at Washington Trust Bank
The setup was straightforward, even without initially having all the information we needed. It was very intuitive. When I went in to get help, help was there. View full review »
Information Security Officer at a government with 501-1,000 employees
We found the initial setup much more difficult to do even simple things, like setting up VPN tunnels. View full review »
Mbaunguraije Tjikuzu
Information Security Administrator at Bank of Namibia
The initial setup of the Cisco ASA NGFW is not easy, but at the same time also it is not complex. It's somewhere in the middle. It took about 4 weeks, then it was activated. View full review »
Seang Haing
Team Leader Network Egnieer at deam
The initial setup is straightforward. View full review »
Michael Collin
Senior System Engineer at a tech services company with 11-50 employees
The initial setup was not complex, it's just difficult to find out how to do it. The FAQ is not clear. In terms of deployment, it depends on the client, but deployment takes about an average of six hours. View full review »
Ahmad Alkoragaty
IT Consultant at MOD
The initial setup was straightforward. It took around two to three days to implement. View full review »
Pre-sales engineer with 51-200 employees
For some things it is very easy, but configuring other things is a little complex. It depends on the use case. View full review »
Network Security/Network Management at a K-12 educational company or school with 201-500 employees
The initial setup was straightforward and it took the company about a day to deploy the firewalls. View full review »
IT Specialist at a government with 1,001-5,000 employees
The initial setup of this solution is pretty straightforward. View full review »
Integration / Wireless Engineer at J.B. Hunt Transport Services, Inc.
The initial setup of this solution was straightforward. We had the proper documentation to reference. View full review »
Security Solution Architect at a financial services firm with 5,001-10,000 employees
The initial setup was of a medium complexity. This was especially true when it came to integration of the data servers. View full review »
Johnsey Kivoto
IT Manager at a manufacturing company with 51-200 employees
It was a bit complex to setup this solution. When we used the command line, it was not easy to implement. We needed Cisco technical knowledge to be able to manage the implementation. View full review »
IT Manager at a construction company with 11-50 employees
I was involved in the initial setup. It was complex. View full review »
Mahmoud Ashoub
Team Leader, Information Risk Engineer at National Bank of Egypt
The initial setup is easy. If we have an issue we contact their support. View full review »
Center for Creative Leadership at a professional training and coaching company with 501-1,000 employees
The initial setup was straightforward. Implementation took two days. We needed two people for the deployment. View full review »
Fadil Kadrat
Network Engineer at Banque des Mascareignes
The setup was straightforward. I was happy with the configuration and deployment of the solution, as it was quick. View full review »
Network Operations Center Team Leader at a financial services firm with 10,001+ employees
It was very straightforward. It was not complex at all. View full review »
Find out what your peers are saying about Cisco, Fortinet, Juniper and others in Firewalls. Updated: March 2020.
406,860 professionals have used our research since 2012.