Cisco Firepower NGFW Firewall Reviews
Cisco Firepower NGFW Firewall is the #4 ranked solution of our top Firewalls tools. It's rated 4.1 out of 5 stars, and is most commonly compared to Fortinet FortiGate - Cisco Firepower NGFW Firewall vs Fortinet FortiGate
Filter by:
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Loading...
Filter Unavailable
Order by:
Loading...
Search:
Real User
Lead Network Administrator at a financial services firm with 201-500 employees
Nov 24 2019
What is most valuable?
With the FMC and the FirePOWERs, the ability to quickly replace a piece of hardware without having to have a network outage is useful. Also, the ability to replace a piece of equipment and deploy the config that the previous piece of… more »How has it helped my organization?
Today I was able to quickly identify that SSH was being blocked from one server to another, and that was impacting our ability to back up that particular server, because it uses SFTP to back up. I saw that it was blocking rule 22, and one… more »What needs improvement?
Regarding the solution's ability to provide visibility into threats, I'm not as positive about that one. We had an event recently where we had inbound traffic for SIP and we experienced an attack against our SIP endpoint, such that they… more »Which solution did I use previously and why did I switch?
The previous usage was with an ASA that had FirePOWER services installed.What other advice do I have?
The biggest lesson I have learned from using this solution is that you can't always trust that console. In the particular case of the traffic which I was used to seeing identified in CTR, not seeing that traffic but knowing that it was… more »JoshuaThums
Real User
Network Administration Lead at Forest County Potawatomi Community
Oct 13 2019
What is most valuable?
The most valuable features of Cisco firewalls are the IPS and IDS items. We find them very helpful. Those are the biggest things because we have some odd, custom-made products in our environment. What… more »How has it helped my organization?
We definitely feel that we're more secure now than we have been in the past. That goes back to those Zero-day vulnerabilities. An example would be some of the vulnerabilities with Adobe TIF files that… more »What needs improvement?
Cisco firewalls provide us with some application visibility and control but that's one of those things that are involved in the continuous evolution of the next-generation firewalls. We have pretty… more »What's my experience with pricing, setup cost, and licensing?
Our subscription costs, just for the firewalls, is between $400,000 and $500,000 a year. In addition, there is Smart Net, but the subscription base is the most substantial. In an environment like ours… more »What other advice do I have?
My advice would be: Don't let the price scare you. I would describe the maturity of our company's security implementation as "working on it." It is an evolving process. When it comes to the Cisco… more »Which other solutions did I evaluate?
There have been evaluations of other products over the years. We do layer some of them to filter things through multiple product vendors, so if there ever is a vulnerability with Cisco, hopefully one… more »
Learn what your peers think about Cisco Firepower NGFW Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: April 2020.
438,560 professionals have used our research since 2012.
EduardoViero
Real User
IT Infrastructure Specialist at RANDON S.A
Nov 08 2019
What is most valuable?
For us, the main feature is due to the fact that we have internet connections for all these sites, and we use the internet to communicate with our data center using VPN. So the VPN support in these boxes is one of the most valuable… more »How has it helped my organization?
Overall, I would summarize Firepower NGFW's effect on our company's security position by saying that, until now, we haven't had any major security incidents. The investment we made, and the investment we are still making in that platform… more »What needs improvement?
Some products supersede others within Cisco. I have three platforms and some of the features are the same in two products. It's not clear for us, as a customer, if Cisco intends to have just one platform for security in the future or if… more »Which solution did I use previously and why did I switch?
For our remote sites we didn't use a specific security platform. We had the Cisco router itself and the protection that the Cisco router offers. But of course you can't compare that with a next-gen firewall. But here in our headquarters, we… more »What other advice do I have?
You must know exactly what features are important for you, and how you can manage all this infrastructure in the future. Sometimes you can have a product that is superior but it might demand an increase in manpower to manage all the… more »
Dave Cooper
Real User
Network Engineer at CoVantage Credit Union
Sep 16 2019
What is most valuable?
It's the brick wall that keeps us from the bad guys. It does a lot of things. In the beginning when you just have a firewall, of course, it's your NAT and it's your Access… more »How has it helped my organization?
It's hard to judge how much time it saves our organization because it's doing things you don't realize. For example, when it's blocking web advertisements, when it's… more »What needs improvement?
In Firepower, there is an ability to search and dig into a search, which is nice. However, I'm not a super fan of the way it scrolls. If you want to look at something… more »What's my experience with pricing, setup cost, and licensing?
We're going to get to a point, not this year and not the coming year, probably going into 2021, where we're going to want to replace the ASA appliances with either… more »Which solution did I use previously and why did I switch?
We've been with Cisco and haven't had anything else yet. We haven't had a desire to move in a different direction. We've stayed with it because of how good it is. We were… more »What other advice do I have?
The neat part about this is how Cisco continues to evolve its product line and help us stay secure, while still doing our day-to-day business. My advice would depend on… more »Which other solutions did I evaluate?
We haven't evaluated any other options. The only thing that may ever force us in that direction would be cost. Only if the cost of the solution got so large would we have… more »PaulChauchis
Real User
Security Architect
Nov 07 2019
What is most valuable?
The IPS, as well as the malware features, are the two things that we use the most and they're very valuable. Cisco Talos is also very good. I had the chance to meet them at Cisco Live and during the… more »How has it helped my organization?
When you put FTD between your internet and network units, you can get valuable insights about your encrypted traffic on the web, DNS traffic, and the like. It gives us statistics up to Layer 7… more »What needs improvement?
For the new line of FTDs, the performance could be improved. We sometimes have issues with the 41 series, depending on what we activate. If we activate too many intrusion policies, it affects the CPU… more »What's my experience with pricing, setup cost, and licensing?
Cisco changed its price model with the new FTD line, where the appliances are a bit cheaper but the licensing is a bit more expensive. But that's not only Cisco, a lot of suppliers are doing that. I… more »Which solution did I use previously and why did I switch?
In our company, we have used another firewall which we developed based on FreeBSD. I, personally, used to work with Juniper, Check Point, and Fortinet. I used Fortinet a lot in the past. If you use… more »What other advice do I have?
FTD is pretty good. You can stop new threats very quickly because you can get the threat intelligence deployed to all your IPSs in less than two hours. Cisco works closely with Talos and anything that… more »
Al Faruq Ibna Nazim
Real User
Head of Technology at BDPEER Ltd.
Apr 15 2019
What is most valuable?
Cisco Firepower NGFW is really easy to use right now to determine when my file requires a shift from primary to secondary status, and it can be done with automation… more »How has it helped my organization?
I have a two-part business. First, we provide solution services as a vendor for multiple customers working as a consulting firm. I'm providing multiple customers with… more »What needs improvement?
I would say when Cisco is selling something called a firewall, they put a lot of services together to make a single box solution. When a company develops a firewall, they… more »What's my experience with pricing, setup cost, and licensing?
The license in my country is available to subscribe for three years or one year. We wanted to go with the solutions for embedding a two-year subscription, but this was not… more »Which solution did I use previously and why did I switch?
We previously used Cisco ASA as a firewall.What other advice do I have?
In my opinion, I would rather ask everyone to have a simple network. If you need multiple networking lines, like for the Cisco ASA or the Firepower NGFW, make sure you… more »Which other solutions did I evaluate?
This fall, we evaluated firewall equipment from Juniper Networks. This is a limitation for Cisco, as their pricing is too high. The fact is when I need to install and… more »
Girish Vyas
Real User
Architect - Cloud Serviced at NTT Global Networks
Nov 30 2019
What is most valuable?
Firepower is an okay product. However, it is better as a firewall than the IPS or other services it provides.How has it helped my organization?
My client company is Cisco Oriented. They wanted to leverage something which is equivalent that can give them the next gen features like application awareness and… more »What needs improvement?
I was trying to learn how this product actually operates and one thing that I see from internal processing is that it does fire-walling and then sends it to the IPS model… more »What's my experience with pricing, setup cost, and licensing?
We normally license on a yearly basis. The hardware procurement cost should be considered. If you're virtual maybe that cost is eradicated and just the licensing cost is… more »Which solution did I use previously and why did I switch?
We did previously use a different solution. They had two different solutions. One was Cisco ASA itself and before that, they used Check Point. We are a Cisco company and… more »What other advice do I have?
If you're really looking into Cisco Firepower, they have a good product, but I would say study hard and look around. If you want an easier product, you can always use Palo… more »Which other solutions did I evaluate?
We gave them Palo Alto as an alternative option. I think they were more into Cisco. They did not evaluate the Palo Alto though, they just opted for Cisco.
Maharajan S
Real User
Associate Vice President - IT Infrastructure at Navitas Life Sciences
Jun 08 2020
What is most valuable?
The advance malware protection (AMP) is valuable because we didn't previously have this when we had an enterprise gateway. Depending on the end user, they could have EDR… more »How has it helped my organization?
Being able to determine our active users vs inactive users has led us to increased productivity through visibility. Also, if an issue was happening with our throughput… more »What needs improvement?
The solution has positively affected our organization’s security posture. I would rate the effects as an eight (out of 10). There is still concern about the engagement… more »What's my experience with pricing, setup cost, and licensing?
Cisco pricing is premium. However, they gave us a 50 to 60 percent discount. There are additional implementation and validation costs.Which solution did I use previously and why did I switch?
We used Fortinet and that product was coming to end of life. We had been using it continuously for seven years, then we started to experience maintenance issues. Also, we… more »What other advice do I have?
We are using Cisco at a global level. We have internally integrated this solution with Cisco Unified Communications Manager in a master and slave type of environment that… more »Which other solutions did I evaluate?
We also evaluated Check Point, Palo Alto, Sophos, and Cisco ASA. In the beginning, we thought about going for Cisco ASA but were told that Firepower was the newest… more »See 11 More Cisco Firepower NGFW Firewall Reviews
What is Cisco Firepower NGFW Firewall?
Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.
Also known as
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWvCisco Firepower NGFW Firewall customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Popular Comparisons
Fortinet FortiGate
Cisco ASA Firewall
Palo Alto Networks WildFire
Azure Firewall
Check Point Virtual Systems
Palo Alto Networks NG Firewalls
SonicWall NSA
Juniper SRX
Zscaler Internet Access
WatchGuard Firebox
Barracuda CloudGen Firewall
BUYER'S GUIDE
Download our free Cisco Firepower NGFW Firewall Report and get advice and tips from experienced pros
sharing their opinions.