Compare Cisco ASA NGFW vs. WatchGuard XTM [EOL]

Cisco ASA NGFW is ranked 2nd in Firewalls with 60 reviews while WatchGuard XTM [EOL] is ranked unranked in Firewalls with 6 reviews. Cisco ASA NGFW is rated 7.6, while WatchGuard XTM [EOL] is rated 8.0. The top reviewer of Cisco ASA NGFW writes "Enables us to to track traffic in inbound and outbound patterns so we can set expectations for network traffic". On the other hand, the top reviewer of WatchGuard XTM [EOL] writes "Application Control gives us granular regulation for different types of users and how they access websites". Cisco ASA NGFW is most compared with Fortinet FortiGate, Meraki MX Firewalls and Cisco Firepower NGFW, whereas WatchGuard XTM [EOL] is most compared with Fortinet FortiGate, Sophos UTM and pfSense.
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about Fortinet, Cisco, pfSense and others in Firewalls. Updated: September 2019.
371,355 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

The firepower sensors have been great; they do a good job of dropping unwanted traffic.Unfortunately in Cisco, only the hardware was good.The most important point is the detection engine which is now part of the next-generation firewalls and which is supported by Cisco Talos.The most valuable features are the flexibility and level of security that this solution provides.Integration with all the other Cisco tools is valuable.We moved from a legacy firewall to the ASA with FirePOWER, increasing our Internet Edge defense dramatically.Cisco ASA NGFW significantly improves our bank. It protects any high-value products that we use from hackers, viruses, malware, and script-bots. It gives us metrics on network traffic as well as what kind of attacks we are getting from the outside.Right now, Cisco ASA NGFW has given us a lot of improvement. We are planning to move to a new facility and will be a much larger organization.

Read more »

WatchGuard XTM is fairly basic. We use it as the perimeter firewall. The main point is to protect from attack software and hacking.After installing the product, we achieved awareness of our data protection needs and email misuse.I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site.We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them.Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular.Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process.They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time.It is stable and does not require you to reboot all the time.​

Read more »

The software was very buggy, to the point it had to be removed.In NGFW, Cisco should be aligned with the new technology and inspection intelligence because Cisco is far behind in this pipeline.Most users do not have awareness of this product's functionality and features. Cisco should do something to make them aware of them. That would be quite excellent and useful to organizations that are still using legacy data-center-security products.There was an error in the configuration, related to our uplink switches, that caused us to contact technical support, and it took a very long time to resolve the issue.With regards to stability, we had a critical bug come out during our evaluation... not good.The product would be improved if the GUI could be brought into the 21st Century.Cisco should improve its user interface design. There is a deep learning curve to the product if you are a newcomer.There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products.

Read more »

One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format. Readable means, I don't want Excel online. We repeat auditing when we trigger the report or setup calendar. That functionality is what we are looking for from WatchGuard XTM here.I would like them to improve the product's overall protections. This would be good for all product users.The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic.Sometimes we have had issues with stability of the product.WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure.The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out.​

Read more »

Pricing and Cost Advice
Always consider what you might need to reduce your wasted time and invest it in other solutions.Watch out for hidden licensing and incredibly high annual maintenance costs.We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement.The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market.Licensing is expensive compared to other solutions.Pricing is high, but it is essentially a corporate decision.The cost is a bit high compared to other solutions in the market.Cisco recently has become very expensive.

Read more »

The licensing and renewal is very expensive.Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.​

Read more »

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
371,355 professionals have used our research since 2012.
out of 50 in Firewalls
Average Words per Review
Avg. Rating
In Firewalls
Top Comparisons
Compared 38% of the time.
Compared 15% of the time.
Compared 14% of the time.
Also Known As
Cisco ASA, Adaptive Security Appliance, ASA

Adaptive Security Appliance (ASA) is Cisco's end-to-end software solution and core operating system that powers the Cisco ASA product series. This software solution provides enterprise-level firewall capabilities for all types of ASA products, including blades, standalone appliances and virtual devices. Adaptive Security Appliance provides protection to organizations of all sizes, and allows end-users to access information securely anywhere, at any time, and through any device.

Adaptive Security Appliance is also fully compatible with other key security technologies, and so provides organizations with an all-encompassing security solution.

Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW.

Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection, but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.

Learn more about Cisco ASA NGFW
Learn more about WatchGuard XTM [EOL]
Sample Customers
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense
Top Industries
Financial Services Firm17%
Comms Service Provider11%
Manufacturing Company11%
Software R&D Company28%
Comms Service Provider15%
Media Company8%
Manufacturing Company6%
Financial Services Firm36%
Healthcare Company14%
Logistics Company14%
Local Government7%
Company Size
Small Business36%
Midsize Enterprise25%
Large Enterprise38%
Small Business37%
Midsize Enterprise25%
Large Enterprise39%
Small Business70%
Midsize Enterprise24%
Large Enterprise6%
Find out what your peers are saying about Fortinet, Cisco, pfSense and others in Firewalls. Updated: September 2019.
371,355 professionals have used our research since 2012.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Sign Up with Email