Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"The greatest benefit for the organization is the confidence that we are secured."
"Its ability to discover attacks is a valuable feature. All of the other features that have to do with security are good."
"I haven't had any major problems so I haven't had to open a ticket with technical support."
"The IPS (In-plane switching) is the most valuable feature."
"I like the user interface because the navigation is very easy, straightforward on your left side pane you have all the sites that you need to browse. Unlike any other firewalls, it's pretty straightforward."
"We have multiple secure internal networks linked with our plants. We are from a oil company, so we have multiple plant areas which need to have restricted network access. Therefore, we are using it for restricting access to the plant area."
"The initial setup was completely straightforward."
"I would say the Firepower module is most valuable. I'm trying more to transition to this kind firewall. I had to study a little on Palo Alto Networks equipment. There is a lot I have to learn about the difference."
"It protects from distributed denial-of-service attacks with Screen Options."
"Most of our clients use it as a traditional firewall, blocking Layer 3 and Layer 4, blocking by transport."
"The virtualization feature is the most valuable feature. Sometimes customers are requesting a private connection using mobile data when they are connecting to remote sites."
"On a scale from one to ten, one being the worst and ten being the best I'd give Juniper SRX an overall rating of eight because of its' competitive price."
"There is a lot of flexibility in how you can commit, check, and back out of a configuration."
"The most valuable feature is the virtualization because it can be used for customers who are using the mobile data network to request a private connection to a remote site."
"The deployment is quite easy and fast."
"I've found the security features, such as IDS and the VPN most valuable."
"It helps us when segmenting and securing the network and all sort of technologies, all sort of next generation needs. It's next generation phases of firewall like anti-virus, sandboxing, wifi, and VPN."
"They have many different options with Palo Alto WildFire and the set-up is quick. If you have all the details in hand, it does not take more than 15 minutes to deploy a firewall."
"The most valuable feature is the Automatic Verdict, to recognize whether something is a threat, or not."
"The way that the solution quickly updates to adjust to threats is the solution's most valuable aspect. When there's a security attack, within five minutes, all Wildfire subscribers have access to updates so that all systems will be safe. Its threat prevention is way better than other vendor products."
"Using WildFire has reduced the number of viruses and the amount of malware that comes into our system, which means that I don't have to rely on the end-users to identify it."
"The most valuable feature for us is the VPN."
"For example, if a security Intel threat talks about an IOC. We can then go to our MSP and say, "Is there a signature for this particular type of malware that just came out?" And if they'll say yes, then we'll say, "Okay. Does it apply to these firewalls? And have we seen any hits on it?" There's absolutely value in it."
"The technical support is good."
"There may have been one or two incidences of malicious threats."
"Some of the features, like the stability, need to be improved."
"In the past though, colleagues have had issues during the upgrade process. The failover didn't work and production was down."
"At times the product is sluggish and slow"
"If I need to download AnyConnect in a rush, it will prompt me for my Cisco login account. Nobody wants to download a client to a firewall that they don't own."
"Most of the time, when I try to run Java, it is not compatible with ASA's current operating systems."
"We have to rely on Cisco ASDM to access the firewall interface. This needs improvement. Because we have a web-based interface, and it is a lot more user-friendly."
"The installation and integration of Cisco ASA with FirePOWER can be improved. The management with Fortigate is easier than Cisco ASA on FirePOWER. The management side of Cisco ASA can be improved so it can be more easily configured and used."
"The GUI needs to be easier and more helpful for users who don't have security experience."
"it would be more powerful if Juniper brought out a security product other than the firewall, like anti-spam, endpoint protection, etc. Customers who want to deploy security solutions are not just thinking about firewalls... Juniper should have an end-to-end solution, from the endpoint to the network level."
"The Juniper SRX product needs to improve in terms of innovation."
"Improvements can be made to the GUI. The GUI can be improved by creating policies to handle IPS requirements. The configuration should be a one-step process. This would make it easier to complete the setup to register the time of operation."
"It's a good stable firewall, but it's nowhere near what it needs to be for a next-generation type firewall."
"The Juniper product has to improve in terms of innovation."
"The GUI needs improvement."
"In terms of other features, I'd like to see a web filter, 10 point control, application control and a DNA filter in the next release."
"Other vendors have some sort of bandwidth management built into the firewall itself and Palo Alto is missing that."
"There are certain changes that I was expecting in the previous version, and I hope that they are soon fixed. All of the problems that I have faced so far have been resolved."
"I would like to see them continue on their developmental roadmap for the product."
"The size of Palo Alto's cloud is big but it could be easier to use from a product management perspective."
"It would be nice if there was an easier way to install and deploy it, such as through the inclusion of wizards."
"When you contact support, there is no guarantee that they will be available to help you tackle the issue that you are facing."
"It's not really their problem, it's a problem across the board. There will always be problems with interrupted traffic. We have to set it up where we're playing a middle man game where we're stripping it out, looking at it, and then putting it back together and sending it on its way. That requires CPU cycles. And there's some overhead with that."
"The deployment model could be better."
Pricing and Cost Advice
"Licensing is expensive compared to other solutions."
"The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market."
"We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement."
"Watch out for hidden licensing and incredibly high annual maintenance costs."
"I bought a license for three years and it was really affordable."
"With AnyConnect, it depends on your license. It depends on the number of concurrent users you want to connect."
"This solution might be expensive, but it is economical in the long run."
"Some of our customers would be more likely to standardize on Cisco equipment if the cost was lower because a lot of people install cheap equipment."
"In terms of pricing, Juniper is in the middle. The most expensive firewall is Palo Alto. If a customer wants the cheapest price they should go for FortiGate. Juniper is in between these products."
"The direct support with Juniper is expensive. When you stop using the solution and miss one year of payments, if you want the support back on a specific node, they ask you to pay for the year that you haven't used the node."
"The pricing is perhaps half, probably forty percent, of Cisco."
"While the price of support is expensive, the price of the solution, itself, is not."
"The price of this solution is more than other products, but it's stable, and the technical support is better than I have seen with others."
"There was no additional licensing cost because there were no IPS services. It was just a firewall IP circuit router so they have the default licensing. We just need to renew the support yearly."
"Compared to other vendors, the pricing of this solution is good."
"The product itself is costly and the price of migration is very high."
"It's pretty expensive but with respect to value for money, it's okay."
"The licensing fees are on an annual basis, and there are no costs in addition to the standard fees."
"We pay between $3,000 and $4,000 CAD ($2,200 - $3,000 USD) per year to maintain this solution."
"This solution is very pricey and it depends on the package that you implement."
"I think they should lower the price of this solution"
"The pricing is highly expensive."
"This is an expensive product and the market for Palo Alto in Poland could be much bigger if the pricing was comparable to Fortinet."
Questions from the Community
Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer: Cisco FW for peace of mind
Top Answer: The EEE security controls allow us to make policy restrictions, so I can customize port numbers to allow or limit… more »
Top Answer: When we first tested the serial interface on our model, it did not work. It should be easier to escalate support… more »
Top Answer: The way that the solution quickly updates to adjust to threats is the solution's most valuable aspect. When there's a… more »
Top Answer: The pricing of the solution is a bit higher, but it's worth the extra money you will spend because of the protection… more »
Top Answer: In terms of threat prevention capabilities, the solution doesn't need any improvements that I can see. We've been quite… more »
Compared 34% of the time.
Compared 15% of the time.
Compared 7% of the time.
Compared 5% of the time.
Compared 3% of the time.
Compared 34% of the time.
Compared 6% of the time.
Compared 4% of the time.
Compared 4% of the time.
Compared 3% of the time.
Compared 20% of the time.
Compared 13% of the time.
Compared 8% of the time.
Compared 5% of the time.
Compared 4% of the time.
Also Known As
|Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv||SRX|
|Cisco||Juniper||Palo Alto Networks|
Cisco ASA firewalls deliver enterprise-class firewall functionality with highly scalable and flexible VPN capabilities to meet diverse needs, from small/branch offices to high performance data centers and service providers. Available in a wide range of models, Cisco ASA can be deployed as a physical or virtual appliance. Flexible VPN capabilities include support for remote access, site-to-site, and clientless VPN. Also, select appliances support clustering for increased performance, VPN load balancing to optimize available resources, advanced high availability configurations, and more.
Cisco ASAv is the virtualized version of the Cisco ASA firewall. Widely deployed in leading private and public clouds, Cisco ASAv is ideal for remote worker and multi-tenant environments. The solution scales up/down to meet performance requirements and high availability provides resilience. Also, Cisco ASAv can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables greater simplicity, visibility, and efficiency.
|High-performance security with advanced, integrated threat intelligence, delivered on the industry's most scalable and resilient platform. SRX Series gateways set new benchmarks with 100GbE interfaces and feature Express Path technology, which enables up to 1 Tbps performance for the data center.||WildFire™ cloud-based threat analysis service is the industry’s most advanced analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis, innovative machine learning techniques, and a groundbreaking bare metal analysis environment to detect and prevent even the most evasive threats.|
Learn more about Cisco ASA Firewall
Learn more about Juniper SRX
Learn more about Palo Alto Networks WildFire
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand||Novamedia, Nexon Asia Pacific, Lenovo, Samsonite, IOOF, Sinogrid, SanDisk Corporation|
Financial Services Firm17%
Comms Service Provider14%
Computer Software Company7%
Comms Service Provider34%
Computer Software Company22%
Comms Service Provider50%
Financial Services Firm18%
Comms Service Provider37%
Computer Software Company25%
Comms Service Provider21%
Financial Services Firm7%
Comms Service Provider25%
Computer Software Company25%
Juniper SRX is ranked 15th in Firewalls with 24 reviews while Palo Alto Networks WildFire is ranked 1st in Advanced Threat Protection with 11 reviews. Juniper SRX is rated 7.4, while Palo Alto Networks WildFire is rated 8.8. The top reviewer of Juniper SRX writes "This best in class Next-Gen firewall is elegant in its ease-of-use and architecture". On the other hand, the top reviewer of Palo Alto Networks WildFire writes "Good technical support and provides automatic analysis that saves us time in filtering email". Juniper SRX is most compared with Fortinet FortiGate, pfSense, Meraki MX, Cisco Firepower NGFW Firewall and Sophos XG, whereas Palo Alto Networks WildFire is most compared with Fortinet FortiGate, Cisco Firepower NGFW Firewall, Zscaler Internet Access, Proofpoint Email Protection and pfSense.
See our list of .
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.