We performed a comparison between Cisco Secure Firewall and Huawei NGFW based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."A strong point of FortiGate is the graphical interface is complete and easy to use."
"Good load balancing feature."
"Whenever I need something, Fortinet improves and updates the software for me."
"The features that prevent internet connections, the filtering are the most valuable because we did not have any internet protection before."
"Its performance in fulfilling our requirements has been satisfactory."
"The email protection and VPN features are the most valuable."
"The most valuable features are the enterprise modeling and the simple interface."
"The security features that they have are quite good. On top of that, their licensing model is quite nice where they don't charge you anything for the SD-WAN functionality for the firewall."
"The main thing that I love the most is its policy and objects. Whenever I try to give access to a user, I can create an object via group creation in the object fields. This way, I am not able to enter a user in the policy repeatedly."
"It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective."
"ASDM provides GUI for configurations. The ASDM has made configuring ASA easy. No need to memorize CLI commands."
"The user interface, the UI, is excellent on the solution."
"Firepower has reduced our firewall operational costs by about 25 percent."
"Cisco tech is always good and helpful. I would rate them as 10 out of 10."
"On the network side, where you create your rules for allowing traffic — what can come inside and what can go out — that works perfectly, if you know what you want to achieve. It protects you."
"I like the way Firepower presents the data. It gives you two classifications for the evidence, something based on the priority of the evidence and another classification based on the impact of the evidence in your environment. This makes it very easy to spot the evidence that is most impactful to my environment. Instead of having to go through all the evidence based on that priority, I can focus on the evidence that has the most impact on my environment."
"I like that the initial setup is straighforward. It's also a scalable solution."
"The most useful feature is the performance of the firewalls and networking operations."
"The solution's performance is good with IPSec."
"The user interface is very, very good."
"The security is good. It's as effective as anything else on the market."
"The mapping features and traffic logging are good."
"I had no difficulty using the Huawei NGFW."
"We have found the initial setup to be straightforward."
"Its customer service could be better."
"I think the only issue that needs improvement is the interface."
"There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers. Why should you need to make so many extra purchases to enable features? They should have one price for the entire offering."
"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"The reports are very basic."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"The solution could have licensing fees reduced in the future."
"Cisco Meraki products are rising very quickly in the cloud and the connected era. Meraki products offer much better ROI, upgradability, and manageability."
"The Cisco ASA device needs overall improvement, as configurations alone do not completely secure my network."
"Virtual patching would be helpful for servers that are not able to update patches due to compatibility issues."
"Its configuration through GUI as well as CLI can be improved and made easier."
"I would like it if there was a centralized way to manage policies, then sticking with the network functions on the actual devices. That is probably the thing that frustrates me the most. I want a way that you can manage multiple policies at several different locations, all at one site. You then don't have to worry about the connectivity piece, in case you are troubleshooting because connectivity is down."
"I'm working on a slightly older version, but what it needs is a better alert management. It's pretty standard, but there's no real advanced features involved around it."
"One of the challenges we've had with the Cisco ASA is the lack of a strong controller or central management console that is dependable and reliable all the time."
"The graphical interface could be improved. From what I have seen, Fortinet, for example, has a nicer GUI."
"The process of procuring modern-day technology within the DOD needs to improve."
"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."
"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."
"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."
"The solution could be more secure and have better integration."
"The tool does not have web functionality. It needs to also have high end firewalls."
"The solution isn't cheap. It's market price."
"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."
"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Huawei NGFW is ranked 30th in Firewalls with 18 reviews. Cisco Secure Firewall is rated 8.2, while Huawei NGFW is rated 7.2. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Huawei NGFW writes "A scalable and easy-to-setup product that can be used to configure different policies for specific users". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX and Sophos XG, whereas Huawei NGFW is most compared with Netgate pfSense, Meraki MX, Palo Alto Networks NG Firewalls, Sophos XG and Palo Alto Networks VM-Series. See our Cisco Secure Firewall vs. Huawei NGFW report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.