Most Helpful Review
Researched Cisco Adaptive Security Appliance (ASA) Firewall but chose SonicWall TZ: Easy to implement, fairly stable, and supports SSL-DPI
Find out what your peers are saying about Cisco Adaptive Security Appliance (ASA) Firewall vs. SonicWall TZ and other solutions. Updated: September 2020.
437,168 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
Unfortunately in Cisco, only the hardware was good.
The traffic inspection and the Firepower engine are the most valuable features. It gives you full details, application details, traffic monitoring, and the threats. It gives you all the containers the user is using, especially at the application level. The solution also provides application visibility and control.
If we look at the Cisco ASA without Firepower, then one of the most valuable features is the URL filtering.
It's easy to integrate ASA with other Cisco security products. When you understand the technology, it's not a big deal. It's very simple.
The benefits we see from the ASA are connected to teleworking as well as, of course, having the basic functionality of a firewall in place and the prevention of attacks.
On the network side, where you create your rules for allowing traffic — what can come inside and what can go out — that works perfectly, if you know what you want to achieve. It protects you.
If you have a solution that is creating a script and you need to deploy many implementations, you can create a script in the device and it will be the same for all. After that, you just have to do the fine tuning.
They provide DDoS protection and multi-factor authentication. That is a good option as it enables work-from-home functionality.
We are able to block whatever we want to block by using this product. It provides all required security features, such as content filtering, VPN, in one box. Before switching to SonicWall, we had specified all required features.
It protects against intrusion while allowing needed access.
The best thing about the product is the very good threat prevention output.
Ease of management and the VPN integration.
We are very much happy with the support.
The most valuable features are security and technical support.
It lets me monitor in live time if someone is 'hogging' bandwidth.
I find the security we are able to do with the policies to be valuable. The monitoring is valuable as well.
In NGFW, Cisco should be aligned with the new technology and inspection intelligence because Cisco is far behind in this pipeline.
Security generally requires integration with many devices, and the management side of that process could be enhanced somewhat. It would help if there was a clear view of the integrations and what the easiest way to do them is.
One area where the ASA could be improved is that it doesn't have AMP. When you get an ASA with the Firepower model, ASA with FTD, then you have advanced malware protection.
If I want to activate IPS features on it, I have to buy another license. If I want Cisco AnyConnect, I have to buy another license. That's where we have challenges.
Cisco missed the mark with all the configuration steps. They are a pain and, when doing them, it looks as if we're using a very old technology — yet the technology itself is not old, it's very good. But the front-end configuration is very tough.
Cisco provides us with application visibility and control, although it's not a complete solution compared to other vendors. Cisco needs to work on the application behavior side of things, in particular when it comes to the behavior of SSL traffic.
It is expensive.
We were also not too thrilled when Cisco announced that in the upcoming new-gen ASA, iOS was not going to be supported, or if you install them, they will not be able to be managed through the Sourcefire. However, it seems like Cisco is moving away from the ASA iOS to the Sourcefire FireSIGHT firmware for the ASA. We haven't had a chance to test it out.
It could be made more user friendly.
Needs more robust self-help documentation along with examples and things to watch out for.
The dashboard needs to be improved.
From a support perspective, if we're talking tech support I think Silver Partners, Gold Partners, Platinum, whatever level, should have a different number to call. End users can call tech support over at SonicWall if they've paid for support as part of their AGSS or whatever services they bought. The end-user can call, or we can call, however, I don't want to be calling the same line that an end user's calling. I don't want the same response time. I need a different level of expertise.
In general, the company needs to think contingently and integrate more security options.
We have been facing issues with reporting.
The monitoring is a little bit confusing.
I would like to see lower antivirus pricing.
Pricing and Cost Advice
Always consider what you might need to reduce your wasted time and invest it in other solutions.
There is room for improvement in the pricing when compared to the market. Although, when you compare the benefits of support from Cisco, you can adjust the value and it becomes comparable, because you usually need very good support. So you gain value there with this device.
When it comes to Cisco, the price of everything is higher. Cisco firewalls are expensive, but we get support from Cisco, and that support is very active.
It's a brilliant firewall, and the fact that it comes with a perpetual license really does go far in terms of helping the organization in not having to deal with those costs on an annual basis. That is a pain point when it comes to services like the ones we have on Fortigate. That's where we really give Cisco firewalls the thumbs up.
Cisco is expensive, but you do get benefits for the price.
In terms of costs, other solutions are more expensive than Cisco. Palo Alto is more expensive than Cisco.
Pricing varies on the model and the features we are using. It could be anywhere from $600 to $1000 to up to $7,000 per year, depending on what model and what feature sets are available to us.
We used Check Point and the two are comparable. Cost was really what put us onto the ASAs... the price tag for Check Point was exorbitantly more than what it is for the ASA solution.
Its pricing is okay as compared to other solutions.
The price is high compared to some other solutions.
License renewals come in around $35,000 to $45,000.
Licensing costs have been around $2,000. There are no other costs above the standard licensing fees.
The product pricing is relatively good, compared to other products, including the licenses.
The pricing was a factor for us, and we felt that the price was good.
Questions from the Community
Top Answer: Fortinet FGs: Great devices, relatively easy to deploy and maintain. Cheaper than most devices of their kind. If you're looking for a lot of features at a relatively low price point this is the way to… more »
Top Answer: They provide DDoS protection and multi-factor authentication. That is a good option as it enables work-from-home functionality.
Top Answer: In terms of costs, other solutions are more expensive than Cisco. Palo Alto is more expensive than Cisco.
Question: What is the biggest difference between Fortinet FortiGate and Sonicwall TZ for eCommerce database network security?
Top Answer: The biggest difference is based on two aspects: The RF-DPI the sonicwall analysis capacity of the traffic without the need for the information to be reassembled or as it comes. allowing the… more »
Top Answer: It protects against intrusion while allowing needed access.
Top Answer: I have no basis to advise.
out of 55 in Firewalls
Average Words per Review
out of 55 in Firewalls
Average Words per Review
Compared 36% of the time.
Compared 13% of the time.
Compared 9% of the time.
Compared 5% of the time.
Compared 4% of the time.
Compared 34% of the time.
Compared 12% of the time.
Compared 11% of the time.
Compared 10% of the time.
Compared 9% of the time.
Also Known As
|Cisco ASA Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls||Dell SonicWALL TZ|
Cisco ASA firewalls deliver enterprise-class firewall functionality with highly scalable and flexible VPN capabilities to meet diverse needs, from small/branch offices to high performance data centers and service providers. Available in a wide range of models, Cisco ASA can be deployed as a physical or virtual appliance. Flexible VPN capabilities include support for remote access, site-to-site, and clientless VPN. Also, select appliances support clustering for increased performance, VPN load balancing to optimize available resources, advanced high availability configurations, and more.
Cisco ASAv is the virtualized version of the Cisco ASA firewall. Widely deployed in leading private and public clouds, Cisco ASAv is ideal for remote worker and multi-tenant environments. The solution scales up/down to meet performance requirements and high availability provides resilience. Also, Cisco ASAv can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables greater simplicity, visibility, and efficiency.
|The secure, sophisticated SonicWALL TZ is widely deployed at small businesses, retail, government, remote sites and branch offices. It combines high-performance intrusion prevention, malware blocking, content/URL filtering and application control.|
Learn more about Cisco Adaptive Security Appliance (ASA) Firewall
Learn more about SonicWall TZ
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||AeroM_xico Delta TechOps, Unimat|
Financial Services Firm20%
Comms Service Provider9%
Computer Software Company28%
Comms Service Provider22%
Comms Service Provider8%
Computer Software Company24%
Comms Service Provider17%
See our list of best Firewalls vendors.