We performed a comparison between Cisco Secure Firewall and Zscaler Internet Access based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It is user friendly, and has all the features you need."
"It has very easy management and an amazing ETM configuration."
"This solution has solid UTM features combined with a nice GUI."
"It's quite comfortable to handle the FortiGate firewall."
"We are very happy with the general bandwidth agility we have seen from one website to another website."
"The notable features that I have found most valuable are that it includes the antivirus, and also IPS, and even SD-WAN."
"The solution is highly scalable because they have devices that can handle a large amount of traffic."
"It is easy to use. We chose this product for the possibility to have virtual domains (VDOMs). We are building another company in the group, and we would like to split the firewalling rules and policies between these two companies. Each company would be able to manage its own policies and security rules, which is an advantage of Fortinet FortiGate. We can define VDOMs, and every company can manage its own VDOM as if it has its own physical firewall, but in fact, we would be using the same physical appliance because we are also using the same internet lines. So, it allows us to reuse the existing resources without the disadvantage of having to compromise on policies and security. Each company can choose its own way of working."
"The Firepower IPS, based on Snort technology, has an amazing detection engine and historical analysis capability of files that eases threat investigations a lot."
"The AnyConnect remote access VPN gives us an easy way to deploy remote working for our users."
"It's pretty reliable and allows for isolation capabilities within the network."
"My confidence continues to build upon using Cisco firewalls."
"The most valuable feature is the ability to block almost all of the ports."
"The firewall and policy side are easy to use."
"Once you add Firepower onto to it and you start enabling some of its features, you get some IDS/IPS involved with it and you can even do web filtering."
"Once configured to suit your needs, these firewalls are rock solid appliances."
"The solution offers a distributed organization to master and to control all of the endpoints."
"Zscaler covers all the features needed to replace a VPN or proxy solution. They are good. They've been on the market for 15 years now, so they are mature enough."
"The solution is stable and reliable."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"The solution replaces multiple vendor technologies with one which makes it worth the cost."
"We use ZIA for outbound internet connectivity. The internet traffic of on-prem users will be directed to the ZIA cloud for security checks and web filtering."
"One feature that is valuable to me from an implementation point of view is that it's very easy to implement."
"The most valuable feature is the ability to drop packets."
"Fortinet FortiGate needs to improve the protection, it did not prevent us from being attacked. Additionally, Fortinet FortiGate could provide more features for WAF devices. I should not have to purchase two solutions, it would be a benefit to combine these features into one solution."
"The security of Fortinet FortiGate could improve."
"There is a lot of improvement needed with SSL-VPN."
"Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards. Fortinet is lacking in features in comparison to competitors."
"Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved."
"It is stable, but its stability can be improved."
"The stability of Fortinet FortiGate could improve."
"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"The Firepower FTD code is missing some old ASA firewalls codes. It's a small thing. But Firepower software isn't missing things that are essential, anymore."
"<p>If there is old hardware, or appliances, it does not necessarily work with the new Cisco generation firewalls."
"Deploying configurations takes longer than it should."
"The solution has not had any layer upgrades. It does not have layer five and upwards, it only has up to layer four. This has caused some problems for us."
"The ability to integrate (as options) all-in-one features -- like anti-spam, anti-virus, etc."
"There is limited data storage on the appliance itself. So, you need to ship it out elsewhere in order for you to store it. The only point of consideration is around that area, basically limited storage on the machine and appliance. Consider logging it elsewhere or pushing it out to a SIEM to get better controls and manipulation over the data to generate additional metrics and visibility."
"ASDM needs to be able to customize applets."
"The Sandbox and the Web Censoring in this solution need to be improved."
"The main issue with Zscaler Internet Access is proxy IP detection, which sometimes makes sites inaccessible."
"They could provide more time for the onboarding the training of an IT person."
"One thing that they could improve is the ability to import rules from other platforms."
"Zscaler should continue to make the user interface better. They should also improve the backup network and continue to expand it so that it can handle larger numbers of customers."
"Zscaler Internet Access's troubleshooting is very limited, and their textbook logs need to be more informative."
"There are some performance issues when we add on additional controls."
"Technical support could be better."
"The performance needs improvement. Some areas create performance issues and, depending on the use cases, require reconfiguration to perform again."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Zscaler Internet Access is ranked 2nd in Secure Web Gateways (SWG) with 46 reviews. Cisco Secure Firewall is rated 8.2, while Zscaler Internet Access is rated 8.2. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Zscaler Internet Access writes "Provides integrated CASB and file sandboxing but could be less expensive ". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Zscaler Internet Access is most compared with Cisco Umbrella, Microsoft Defender for Cloud Apps, Netskope , Prisma Access by Palo Alto Networks and Appgate SDP. See our Cisco Secure Firewall vs. Zscaler Internet Access report.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.