Most Helpful Review
The granularity keeps users seeing what they are supposed to and enables the security not to become compromised
Find out what your peers are saying about Cisco Sourcefire Firewalls vs. Palo Alto NG Firewalls and other solutions. Updated: July 2019.
360,582 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The most valuable features are the flexibility and level of security that this solution provides.
Integration with all the other Cisco tools is valuable.
We moved from a legacy firewall to the ASA with FirePOWER, increasing our Internet Edge defense dramatically.
Cisco ASA NGFW significantly improves our bank. It protects any high-value products that we use from hackers, viruses, malware, and script-bots. It gives us metrics on network traffic as well as what kind of attacks we are getting from the outside.
Right now, Cisco ASA NGFW has given us a lot of improvement. We are planning to move to a new facility and will be a much larger organization.
The feature that I found most valuable is the overall stability of the product.
The stability of Cisco ASA is excellent compared to other products on the market. Because of our customer experience as an integrator company, our clients never report any performance problems. We have a good performance reputation with Cisco ASA.
I would say the Firepower module is most valuable. I'm trying more to transition to this kind firewall. I had to study a little on Palo Alto Networks equipment. There is a lot I have to learn about the difference.
The most valuable feature of this solution is its ability to integrate vertically.
An efficient, easy to deploy and dependable firewall solution.
This solution is easy to use if you know how to set it up.
The most important feature is its categorization because on the site and social media you are unified in the way they are there.
The web interface was easy for me. The configuration is logical, so it's easy to use and easy to understand how to protect, how to open a port, how to manage and how to route a device. That's why I prefer Cisco. It's robust and I never have issues with the hardware. That's why I choose Cisco and not another vendor.
The initial setup was very easy.
The most valuable features are the threat prevention and policy-based routing features.
We have found the application control to be the most valuable feature. Also, Layer 7, because all other products are working up to the maximum capacity. But Palo Alto is benefiting us, especially in application control management. We are able to differentiate between Oracle traffic and SQL traffic.
The solution is scalable
I found Palo Alto NG firewalls more intuitive compared to other products. I value the capability to identify a cloud solution.
Comments have some delay, but overall, it's a good product.
With our High availability pair, we have had no downtime for several years, since it was first put it in production.
The solution is very stable.
There was an error in the configuration, related to our uplink switches, that caused us to contact technical support, and it took a very long time to resolve the issue.
With regards to stability, we had a critical bug come out during our evaluation... not good.
The product would be improved if the GUI could be brought into the 21st Century.
Cisco should improve its user interface design. There is a deep learning curve to the product if you are a newcomer.
There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products.
One of my main concerns, an area that could use improvement is in adjusting the need to buy a license to enable features.
Usually, the customers are satisfied, but I am going to recommend that all clients upgrade to FirePOWER management. I want Cisco to improve the feature called anti-spam. We use a Cisco only email solution, that's why we need the anti-spam on email facility.
The installation and integration of Cisco ASA with FirePOWER can be improved. The management with Fortigate is easier than Cisco ASA on FirePOWER. The management side of Cisco ASA can be improved so it can be more easily configured and used.
There used to be information displayed about the packets in a module called Packet Flow, but it is no longer there.
The interface for monitoring could be improved to allow better views to make troubleshooting easier.
The inclusion of an autofill feature would improve the ease of commands.
I see room for improvement when it comes to integrating all the devices into a central management system. Cisco doesn't provide this, but there are some good products in the market that can provide it.
The service could use a little more web filtering. If I compare it to Cyberoam, Cyberoam has more the web filtering, so if you want to block a website, it's easier in other solutions than in Cisco.
The advanced manual protection needs to be improved a little bit because they used to make a cloud manual analysis for the cloud.
I think they need to have a proper hardware version for a smaller enterprise. We had to go to a very high-end version which is very expensive. If we chose the lower-end version, it would not meet our goals. A middle-end is missing in its portfolio.
The solution needs some management tool enhancements. It could also use more reporting tools.
The support could be improved.
The scalability compared to other products is not good. You need to change the box whenever you want your number of connection sessions to increase.
We need better affiliations for profiling the user.
When you delete and add a new rule, because of the one hundred rule limit, if the new rule has an ID that is greater than one hundred, even though you have fewer than that, it will not work.
Generating reports is not so easy.
Pricing and Cost Advice
Watch out for hidden licensing and incredibly high annual maintenance costs.
We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement.
The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market.
Licensing is expensive compared to other solutions.
Pricing is high, but it is essentially a corporate decision.
The cost is a bit high compared to other solutions in the market.
Cisco recently has become very expensive.
The cost is a bit higher than other competitive solutions on the market.
The cost of this solution is high.
Some of our customers would be more likely to standardize on Cisco equipment if the cost was lower because a lot of people install cheap equipment.
The licensing is annual, and there aren't any additional fees on top of that.
Don't buy a device with more power than you really need, because licensing depends on the cost of the box you have.
It will be worth your time to hire a contractor to set it up and configure it for you, especially if you are not very knowledgeable with PA firewalls.
Pricing is yearly, but it depends. You could pay on a yearly basis, or every three years. If you want to add a device or two, there would be an additional cost. Also, if you want to do an assessment, or other similar add-on, you have to pay accordingly for the additional service.
Annually, the licensing costs are too much.
Compared 37% of the time.
Compared 11% of the time.
Compared 9% of the time.
Compared 41% of the time.
Compared 18% of the time.
Compared 13% of the time.
Compared 42% of the time.
Compared 11% of the time.
Compared 10% of the time.
Also Known As
|Cisco ASA, Adaptive Security Appliance, ASA||Sourcefire Firewalls||Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall, Palo Alto Networks PA-Series|
|Cisco||Cisco||Palo Alto Networks|
Adaptive Security Appliance (ASA) is Cisco's end-to-end software solution and core operating system that powers the Cisco ASA product series. This software solution provides enterprise-level firewall capabilities for all types of ASA products, including blades, standalone appliances and virtual devices. Adaptive Security Appliance provides protection to organizations of all sizes, and allows end-users to access information securely anywhere, at any time, and through any device.
Adaptive Security Appliance is also fully compatible with other key security technologies, and so provides organizations with an all-encompassing security solution.
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW.
|Sourcefire Firewalls help ensure your network's availability and the security of your company's resources by protecting the network infrastructure against network- and application-layer attacks, viruses, and worms.|
Palo Alto Networks' next-generation firewalls secure your business with a prevention-focused architecture and integrated innovations that are easy to deploy and use. Now, you can accelerate growth and eliminate risks at the same time.
Learn more about Cisco ASA NGFW
Learn more about Cisco Sourcefire Firewalls
Learn more about Palo Alto NG Firewalls
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||Aegean Motorway, EllisDon Corporation, Linz AG,||SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments|
Financial Services Firm19%
Comms Service Provider12%
Comms Service Provider21%
Financial Services Firm14%
Financial Services Firm43%
No Data Available