We performed a comparison between Cisco Secure Firewall and Palo Alto Networks K2-Series based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We are using the FortiGate 100D series. VPN, firewall, anti-malware, OTM, and intrusion prevention are useful features."
"I am "headache free" that I don't have to categorize all the websites and that security has been pre categorized by the people, and that the services are getting updated. At least one part of my problem is over."
"The most valuable feature of Fortinet FortiGate is the simple configuration."
"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"Fortinet FortiGate is scalable for our users. Right now, we have almost 70 users. We do not have any plan to increase our usage of FortiGate. For maintaining the firewall solution, one staff member is enough."
"Provides good firewall security and has great VPN features."
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"The ability to set up remote systems is the most valuable feature."
"The initial setup is easy."
"The primary benefits of using Cisco Secure solutions are time-saving, a robust API, and convenience for the security team."
"Cisco's engineer helped us with a lot of scripting to see what existed. Previously, we didn't have a proper policy. In fact, we didn't have any policy because we didn't have any firewall for the data center, so generating a policy was a big challenge. Cisco's engineer helped us to do some scripting and find out what kind of policy we can have and organize those policies. That was nice."
"The firewall and policy side are easy to use."
"The most valuable feature must be AnyConnect. We have quite a few customers who use it. It is easy to use and the stablest thing that we have. We have experienced some issues on all our VPN clients, but AnyConnect has been the stablest one."
"It is very stable compared to other firewall products."
"The most important feature is the VPN connection."
"The ASDM (Adaptive Security Device Manager) which is the graphical user interface, works out, and Cisco keeps it current."
"Everything I could possibly want has already been implanted in the new version."
"It is a stable solution."
"The most valuable feature of Palo Alto Networks K2-Series is its management abilities. Additionally, the updates are very good."
"The company is inventive and always adds a lot of great features."
"Palo Alto's App-ID is what differentiates it from other competitors."
"The IPS system is the best in the field."
"K2-Series' best features include its scalability, which is the best on the market."
"As long as the solution is kept updated, it's pretty stable."
"Web security solutions can be improved."
"Performance and technical support are the main issues with this solution."
"Compared to some other products, the DLP is not at par for the moment."
"It should provide better visibility over the network and more information in the form of reports for the end users. Its installation should also be easier."
"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."
"The solution needs to improve its integration with cybersecurity."
"One issue that I have had is that sometimes I need to monitor the traffic, so I need to filter it according to the user and which user is using it the most. I experience a bottleneck most of the time, particularly at the peak time when the number of contracts and users are at maximum."
"There are some problems that support cannot give you a logical reason as to why it happened. For example, I had a case where I was dealing with a WhatsApp application that was giving issues. Technical support gave more than one reason it could be giving issues, but none of them solved the problem. Eventually I solved the problem, but it was far from the solutions that support had given."
"Sometimes, it is not easy to troubleshoot. You need to know where to go. It took me quite awhile. It's like, "Okay, if it doesn't go smoothly here, then go find the documentation." Once you do it, it is not so bad. However, it is sometimes a steep learning curve on the troubleshooting part of it."
"Other products are becoming easier to access and configure. They are providing UI interfaces to configure, take backup, synchronize redundant machines, and so on. It is very easy to take backup and upgrade the images in those products. Cisco ASA should have such features. If one redundant machine is getting upgraded, the technology and support should be there to upgrade other redundant machines. In a single window, we should be able to do more in terms of backups, restores, and upgrades."
"The operation of the ASA is good but the problem is that whenever you require an upgrade, there are multiple pieces of software that you have to upgrade. Extensive planning is required, because if you upgrade one piece of the software it has to be compatible with the others as well. You always need to check the compatibility metrics."
"Tech support could not answer all of our questions. I had to do research on the web to solve my issues."
"It needs to provide the next-generation firewall features that other vendors provide, like data analytics, telemetry, and deep packet inspection."
"It should have an additional “operating mode”, like a “candidate configuration mode”, where you would have the possibility to test the changes you are going to implement and also the possibility to validate these changes."
"I would like to see them release a patch for ASAv with cross-platform FirePower integration."
"I would like to see more configurable feature parity with Cisco ASA, which is the legacy product that Cisco is moving away from. When configuring remote access VPN, not all of the options are there. You have to download another tool, which means that the configuration takes a little bit longer with Cisco Secure Firewall. Though it's getting there, there are still some features lagging behind."
"Its networking features could be better."
"When it comes to renewing the solution, they tend to try to jack up the pricing."
"The product should get frequent updates allowing us to add new signatures."
"The technical support, and how they provide it to the client, needs to be improved."
"In the past, we've had trouble with Palo Alto's application filtering not getting it right. I would not be recommending layer 7 application filtering yet."
"It would be nice if it could easily be integrated with Elasticsearch or Nagios."
"There are a lot of bugs in this solution."
"We had some issues with upgrading in the past. They could make the process easier."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Palo Alto Networks K2-Series is ranked 27th in Firewalls with 29 reviews. Cisco Secure Firewall is rated 8.2, while Palo Alto Networks K2-Series is rated 8.4. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Palo Alto Networks K2-Series writes "Easy to implement and manage, and the documentation is good". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Palo Alto Networks K2-Series is most compared with Palo Alto Networks NG Firewalls. See our Cisco Secure Firewall vs. Palo Alto Networks K2-Series report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.