Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The URL filtering is very good and you can create a group for customized URLs.
The most valuable feature is the ability to automatically learn the traffic in our environment, and change the merit recommendations based on that.
In general, the features are all great. However, if I need to take hardware for ASA, because they need to upgrade to Firepower, we want to create rules. For that, most of the time we go to the command line. Right now Firepower is working really hard on the grid. You can apply all those rules to the grid. Even if you want to monitor the logs, for example, the activity will tell you which particular user has been blocked because of that rule. Firepower's monitoring interface is very good, because you can see each and every piece. ASA also had it, but there you needed to type the command and be under the server to see all that stuff. In Firepower you have the possibility to go directly to the firewall. The way the monitoring is displayed is also very nice. The feature I appreciate most in Firepower is actually the grid. The grid has worked very well.
I like most of Cisco's features, like malware detection and URL filtering.
The most valuable feature of this solution is the filtering.
The solution can be integrated with some network electors like Cisco Stealthwatch, Cisco ISE, and Active Directory to provide the client with authentication certificates.
The whole solution is very good, and stable.
Cisco technical support is unbeatable. It offers a premium service every time.
The most valuable features are the centralized management of the firewalls.
The user interface is very easy to navigate.
It would normally take us a handful of days to install one FortiGate instance on one site. But with this technology, zero-touch deployment, we need just one hour or maybe as little as 30 minutes to install one site. It is much more efficient.
The solution is very stable.
The product is a combination of management and monitoring from the same interface.
There are problems setting up VPNs for some regions.
We are unhappy with technical support for this solution, and it is not as professional as what we typically expect from Cisco.
To be frank, the product is not really stable, although they're working on that. Whenever I go to the technical community with an issue, they will usually say that it is not there yet, but the technical team are working on it. The issues are not insolvable. I think they should just keep working on the product to make sure that the product can become very stable. The technical support is great. I appreciate that. We have a lot of communities supporting Firepower now, so you can find help for whatever issue you have.
I don't think this solution is a time-based control system, because one cannot filter traffic based on time.
If the price is brought down then everybody will be happy.
With the next release, I would like to see some PBR, so that you can do the configuration with the features.
The customization of the rules can be simplified.
The pricing needs to be improved. We have lots of low-budget clients around us. Budget constraints are always a deterrent in our market.
It's a difficult process to transfer one interface from one virtual domain to another.
Regional support in African countries needs to be improved.
Troubleshooting for Fortinet products is more difficult than competing products like Cisco and Palo Alto.
The GUI could be updated. It's not as good as it could be and is something the solution should improve in an upcoming release.
The areas that need improvement are implemenation and support. In terms of implementation, it mainly needs clear documentation.
Pricing and Cost Advice
I don't know the exact amount, but most of the time when I go to a company with a proposition, they will say, "This thing that you are selling is good, but it's expensive. Why don't you propose something like FortiGate, Check Point, or Palo Alto?" Cisco device are expensive compared to other devices.
Licensing for this solution is paid on a yearly basis.
We have a three-year license for this solution.
The licensing costs depend on how many devices you want to use.
Fortinet FortiManager is not expensive at all if you compare it with other vendors like Check Point and Cisco. Fortinet products are the least expensive on the market in the category of firewalls.
out of 43 in Intrusion Detection and Prevention Software
Average Words per Review
out of 36 in Network Management Applications
Average Words per Review
Compared 16% of the time.
Compared 16% of the time.
Compared 13% of the time.
Compared 48% of the time.
Compared 10% of the time.
Compared 8% of the time.
Also Known As
Snort is an open-source, rule-based, intrusion detection and prevention system. It combines the benefits of signature-, protocol-, and anomaly-based inspection methods to deliver flexible protection from malware attacks. Snort gained notoriety for being able to accurately detect threats at high speeds.
Networks are constantly evolving due to threats, organizational growth, or new regulatory/business requirements. Traditional management products focus on mitigating company-wide threats through firewall policies, firmware updates, and keeping content security current. FortiManager offers the features to contain threats as well as providing flexibility to evolve along with your ever-changing network.
Learn more about Cisco Sourcefire SNORT
Learn more about Fortinet FortiManager
|CareCore, City of Biel, Dimension Data, LightEdge, Lone Star College System, National Rugby League, Port Aventura, Smart City Networks, Telecom Italia, The Department of Education in Western Australia||Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data|
Software R&D Company37%
Comms Service Provider19%
Financial Services Firm9%
K 12 Educational Company Or School7%
Software R&D Company34%
Comms Service Provider18%
See also Cisco Sourcefire SNORT Reviews, Fortinet FortiManager Reviews, and our list of Best Intrusion Detection and Prevention Software Companies.