We performed a comparison between Cisco Secure Firewall and Huawei NGFW based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the web filter."
"This solution made it very easy to manage our bandwidth."
"The SD-WAN is the most valuable feature."
"I have found Fortinet FortiGate to be scalable."
"It's great for capturing the traffic and troubleshooting it."
"Mainly the FortiGate reporting system is very good. It guides us through all the expectations of security. Fortinet provides us all that we need for security. Also, Fortinet FortiGate is a next-generation firewall. It is much more advanced than others."
"The most valuable features of Fortinet FortiGate are the ease of use and there are several operating systems that can include the hardware capacities. In the newer releases, the resources were more useful because they were included in the operating system."
"It is quite easy to handle."
"I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable."
"The IP filter configuration for specific political and Static NAT has been most valuable."
"The integration and configuration were pretty straightforward."
"Technical support services are excellent."
"Cisco ASA has an okay CLI with a nice GUI."
"The Inline Mode configuration works really well, and ASA works very impressively."
"Cisco Secure Firewall improved our organization. We have it in every one of our French offices."
"The most valuable features are the flexibility and level of security that this solution provides."
"The mapping features and traffic logging are good."
"I like that the initial setup is straighforward. It's also a scalable solution."
"The solution's implementation is pretty easy."
"The support for the solution has been excellent. If we ever had an issue they would send an engineer to help us with our problem."
"The most useful feature is the performance of the firewalls and networking operations."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The UI is quite good."
"Huawei was able to assist us in the installation of their product. The installation was very fast."
"The biggest "gotcha" is that if the client purchases what they call the UTM shared bundle, which has unified threat management on both, it's not as easy to manage if you have more than one firewall."
"With FortiGate, the main complaint that I have heard is about the technical support."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"Quality control on their firmware versions needs improvement. When they introduce new firmware, there tend to be bugs."
"The way everything is set up could be easier. Currently, people need a lot of experience and knowledge to administer it and to link it to devices."
"There are some tiny bugs that sometimes affect the operations. In the past revision of it, there was a bug. Because of the bug, we had to downgrade the version. It happened only with the last revision."
"The logging details need to be improved."
"Its reporting can be improved. Sometimes, I don't get proper reports."
"They could improve by having more skilled, high-level engineers that are available around the clock. I know that's an easy thing to say and a hard thing to do."
"Its user interface is good, but it could be better. Currently, you have to know what to do before you can manage a device. If you don't know what to do, you can mess things up. There are some devices that are easier, such as FortiGate. The user interface of FortiGate is more intuitive. It is very easy to log in and configure things."
"There's a little bit of a disconnect between Firepower’s management and the rest of the products, like DNA and Prime. The solution should have fewer admin portals for network, security, and firewalls."
"This product is managed using the Firepower Management Center (FMC), but it would be better if it also supported the command-line interface (CLI)."
"The solution could offer better control that would allow the ability to restrictions certain features from a website."
"It needs to provide the next-generation firewall features that other vendors provide, like data analytics, telemetry, and deep packet inspection."
"The integration between different tools could be improved. For example, with SecureX, I am yet to find out how to forward security events to different tools such as Microsoft Sentinel, which is what we use for log detection."
"The only con that I have really seen with it is the reporting structure. FirePOWER is good. It has been a great help because, before that, it was not good at all."
"The user interface could be more user-friendly."
"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."
"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."
"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."
"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."
"The solution isn't cheap. It's market price."
"The WAF capability in the Huawei Firewall is missing."
"The IPS feature must be improved."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Huawei NGFW is ranked 31st in Firewalls with 18 reviews. Cisco Secure Firewall is rated 8.2, while Huawei NGFW is rated 7.2. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Huawei NGFW writes "A scalable and easy-to-setup product that can be used to configure different policies for specific users". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX and Sophos XG, whereas Huawei NGFW is most compared with Netgate pfSense, Palo Alto Networks NG Firewalls, Meraki MX, Sophos XG and Fortinet FortiOS. See our Cisco Secure Firewall vs. Huawei NGFW report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
