Most Helpful Review
Configuring the network was the easiest part of implementation, but the internet failover needs to work better.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
Integration with all the other Cisco tools is valuable.
We moved from a legacy firewall to the ASA with FirePOWER, increasing our Internet Edge defense dramatically.
Cisco ASA NGFW significantly improves our bank. It protects any high-value products that we use from hackers, viruses, malware, and script-bots. It gives us metrics on network traffic as well as what kind of attacks we are getting from the outside.
Right now, Cisco ASA NGFW has given us a lot of improvement. We are planning to move to a new facility and will be a much larger organization.
The feature that I found most valuable is the overall stability of the product.
The stability of Cisco ASA is excellent compared to other products on the market. Because of our customer experience as an integrator company, our clients never report any performance problems. We have a good performance reputation with Cisco ASA.
I would say the Firepower module is most valuable. I'm trying more to transition to this kind firewall. I had to study a little on Palo Alto Networks equipment. There is a lot I have to learn about the difference.
We have multiple secure internal networks linked with our plants. We are from a oil company, so we have multiple plant areas which need to have restricted network access. Therefore, we are using it for restricting access to the plant area.
It prevents people from visiting undesirable sites and ensures that they use the internet for their designated jobs.
What I like the most about Kerio is that I can use the software appliance as a solution, so if the hardware fails for any reason then I can quickly replace it with hardware that I have in stock.
All of the features of Kerio Control are equally good. Most valuable to us are the firewall rules, the intrusion detection system, and IP address features.
The most valuable feature is to provide users with the ability to log in to the portal page, keep track of their data usage and perform bandwidth management.
The flexibility of the system, the capacity to provide the right level of security, and the ability to be integrated into different kinds of infrastructures are the most valuable features.
The statistic feature enables us to better use bandwidth management. We monitored the use by mobile, type of application, department, and by users. The bandwidth was solid. Our internet speed is optimized for our research.
Kerio has improved my organization's security.
Technical support is good. They respond right away.
Configuration troubleshooting is eased by the use of the color-coded, live firewall log.
The features that I've known to be most valuable are both the web security features as well as the web firewall capabilities. As a partner of Sophos firewall, we have some clients and they are using Sophos firewall UTM and we are using it as well.
Sophos UTM has improved the porting section. It has improved security by seeing the gaps. For example, when you discover that an entry has been using a certain application, with Sophos UTM acting as a Layer 7 firewall, you can block the application, not the port.
The most valuable feature is the IPS. It also protects us from malware.
UTM 9 brings along IPSec as well as iPhone and iPad support. This seems small but it’s useful.
The isolation of infected machines is a big feature. Also, the ability to detect external sources that change files on a file server is really big.
Advanced protection (Sophos Sandstorm) - Protects against crypto viruses in real-time.
It improved bandwidth utilization and provided link load balancing features for internet and intranet lease lines.
With regards to stability, we had a critical bug come out during our evaluation... not good.
The product would be improved if the GUI could be brought into the 21st Century.
Cisco should improve its user interface design. There is a deep learning curve to the product if you are a newcomer.
There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products.
One of my main concerns, an area that could use improvement is in adjusting the need to buy a license to enable features.
Usually, the customers are satisfied, but I am going to recommend that all clients upgrade to FirePOWER management. I want Cisco to improve the feature called anti-spam. We use a Cisco only email solution, that's why we need the anti-spam on email facility.
The installation and integration of Cisco ASA with FirePOWER can be improved. The management with Fortigate is easier than Cisco ASA on FirePOWER. The management side of Cisco ASA can be improved so it can be more easily configured and used.
Most of the time, when I try to run Java, it is not compatible with ASA's current operating systems.
Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection.
Their support is getting better but still needs improvement.
Kerio Control has just improved on their biggest problem, which was to introduce better support for high-availability requirements in production.
I would like to be able to inspect https packets for the purpose of virus scanning.
The improvement that we are looking for is for when decide to move some part of our application to the cloud.
I would like for them to add more security features.
They should add wireless features.
I would like to see them develop a bit more flexibility creating VLANs.
Support for IKEv2 is needed in this solution.
The only time we face a problem or issues is when we place a ticket. We have found that response is very slow.
With Sophos UTM, there is a general rule in the firewall when the country blocking can block some countries from accessing your data. In the current version, you still need to add it by putting in the IP range. This feature would be helpful for administrators and it gives them the advantage to block stuff in less time.
The solution could be improved by adding cloud soundboxing.
We didn’t find any issues but I know there have been some in the last few years.
It does have built-in policies, which enable you to disable USB devices, etc. It would be nice if they had more policies because there are not that many of them.
There is still room for improvement in wireless protection. I don't mean their WiFi device is bad, but there are still things to improve on, such as WiFi roaming.
Initially, there were issues with the wireless network as wireless access points were disappearing from the dashboard after some time.
Pricing and Cost Advice
Watch out for hidden licensing and incredibly high annual maintenance costs.
We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement.
The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market.
Licensing is expensive compared to other solutions.
Pricing is high, but it is essentially a corporate decision.
The cost is a bit high compared to other solutions in the market.
Cisco recently has become very expensive.
The cost is a bit higher than other competitive solutions on the market.
My advice is to use your own hardware, and do not use theirs.
There is a yearly upkeep fee.
The pricing is in-line with our expectations in terms of the quality that we get for it.
It's very affordable.
The price is inexpensive.
Pricing is good, but the licensing took a lot of time.
Search and compare.
The biggest issue with Sophos is the pricing. It's definitely more expensive. As I said, we looked at Webroot, which is a big alternative, and Sophos was almost three times the price of Webroot. That's a pretty big difference.
Sometimes more is less, meaning if you want more than three features, take the FullGuard licence.
We purchased the appliance with five years onsite support and licenses.
Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers.
The pricing and licensing are both good and better than Sophos's competitors. This is why we went with the product.
The AWS Marketplace product should be a better fit, but it is a little pricier.
Purchasing through the AWS Marketplace is pretty straightforward. Because were entirely on AWS and don't have anything anywhere else. It made the most sense for us as a one stop shop.
The pricing is pretty reasonable. I don't think that it is overly expensive.
Compared 37% of the time.
Compared 11% of the time.
Compared 9% of the time.
Compared 40% of the time.
Compared 15% of the time.
Compared 12% of the time.
Compared 32% of the time.
Compared 22% of the time.
Compared 15% of the time.
Also Known As
|Cisco ASA, Adaptive Security Appliance, ASA||Astaro|
Adaptive Security Appliance (ASA) is Cisco's end-to-end software solution and core operating system that powers the Cisco ASA product series. This software solution provides enterprise-level firewall capabilities for all types of ASA products, including blades, standalone appliances and virtual devices. Adaptive Security Appliance provides protection to organizations of all sizes, and allows end-users to access information securely anywhere, at any time, and through any device.
Adaptive Security Appliance is also fully compatible with other key security technologies, and so provides organizations with an all-encompassing security solution.
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW.
Kerio Control brings together next-generation firewall capabilities -- including a network firewall and router, intrusion detection and prevention (IPS), gateway anti-virus, VPN, and web content and application filtering. These comprehensive capabilities and unmatched deployment flexibility make Kerio Control the ideal choice for small and mid-sized businesses.
|The global network of highly skilled researchers and analysts, protecting businesses from known and emerging malware - viruses, rootkits and spyware.|
Start your two week free trial.
Learn more about Kerio Control
Learn more about Sophos UTM
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||Triton Technical, McDonald's||One Housing Group|
Financial Services Firm19%
Comms Service Provider10%
Comms Service Provider21%
Financial Services Firm14%
No Data Available
Financial Services Firm12%
Comms Service Provider11%
Financial Services Firm7%