We performed a comparison between Cisco Secure Firewall and Huawei NGFW based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"FortiGate is flexible and easy to use."
"The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that."
"The solution is easy to configure and maintain remotely."
"This solution has helped our organization by having strong functions and a reliable firewall."
"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"The product is easy to use and is stable. The SV1 functionality is a benefit."
"It's great for capturing the traffic and troubleshooting it."
"You do not have to do everything through a command line which makes it a lot easier to apply rules."
"The stability of the product is good."
"Cisco's engineer helped us with a lot of scripting to see what existed. Previously, we didn't have a proper policy. In fact, we didn't have any policy because we didn't have any firewall for the data center, so generating a policy was a big challenge. Cisco's engineer helped us to do some scripting and find out what kind of policy we can have and organize those policies. That was nice."
"The initial setup was completely straightforward."
"An eight because it's a good security solution. It's more mature than its competitors."
"The greatest benefit that this has provided to our organization is that we've been able to adjust the time that it takes to implement firewall changes. It's gone from a week to less than half a day to implement a change, which means that our DevOps team can be much more agile, and there is much less overhead on the firewall team."
"The protection and security features, like URL filtering, the inspection, and the IPS feature, are also very valuable for us. We don't have IT staff at most of the sites so for us it's important to have a robust firewall at those sites"
"The monitoring dashboard is valuable to us for troubleshooting."
"The most useful feature is the performance of the firewalls and networking operations."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The security is good. It's as effective as anything else on the market."
"I had no difficulty using the Huawei NGFW."
"The solution's initial setup process is easy."
"The UI is quite good."
"The solution's implementation is pretty easy."
"The support for the solution has been excellent. If we ever had an issue they would send an engineer to help us with our problem."
"A lack of integration between our data centers."
"Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box."
"The captive portal could be improved."
"They should offer special pricing to premium partners and customers."
"Its reporting and pricing need improvement."
"The stability of Fortinet FortiGate could improve."
"A sandbox would be good in order to be able to inspect the emails containing spam and be able to validate the emails that contain malware, prior to delivering to the customer."
"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."
"The worst part of the entire solution, and this is kind of trivial at times, is that management of the solution is difficult. You manage FireSIGHT through an internet browser. I've had Cisco tell me to manage it through Firefox because that's how they develop it. The problem is, depending on the page you're on, they don't function in the same way. The pages can be very buggy, or you can't resize columns in this one, or you can't do certain things in that one. It causes a headache in managing it."
"VPNs are weak as this product still does not support route-based VPNs."
"It should have packets, deep level inspections and controls, like the features which other IPS solutions used to have."
"The service could use a little more web filtering. If I compare it to Cyberoam, Cyberoam has more the web filtering, so if you want to block a website, it's easier in other solutions than in Cisco."
"It needs more tunneling capabilities."
"Technical support takes a long time to respond."
"One of the challenges we've had with the Cisco ASA is the lack of a strong controller or central management console that is dependable and reliable all the time."
"It would be nice if you didn't have to configure using a command-line interface. It's a bit technical that way."
"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."
"The solution is scalable but it is difficult because you need to purchase new systems, it is not just one click."
"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."
"The solution could be cheaper."
"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."
"With the Huawei firewall, none of the features comes at the top. We found out later that customer support is really not good. For this firewall, because of our customers' routine, for example, every six months they'll do a penetration test to find weaknesses. So whenever they came up with VAPT reports, they are looking to Huawei for help. I think that's basically because it's a different culture. Chinese culture and our culture is different. They have always tried to help find some excuses or say some other things that cannot help you solve the problem immediately."
"The solution isn't cheap. It's market price."
"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Huawei NGFW is ranked 30th in Firewalls with 18 reviews. Cisco Secure Firewall is rated 8.2, while Huawei NGFW is rated 7.2. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Huawei NGFW writes "A scalable and easy-to-setup product that can be used to configure different policies for specific users". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX and Sophos XG, whereas Huawei NGFW is most compared with Netgate pfSense, Meraki MX, Palo Alto Networks NG Firewalls, Palo Alto Networks VM-Series and Sophos XG. See our Cisco Secure Firewall vs. Huawei NGFW report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
