Most Helpful Review
Features we most use are the SD-WAN and auto failover for dual ISP connections. Seem to work in harsh environments...
Configuring the network was the easiest part of implementation, but the internet failover needs to work better.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The Cisco ASA NGFW can easily scale. If you want, you can scale it to a lot of traffic. It's an X file, so all of our users are going through it.
Right now, Cisco ASA NGFW has given us a lot of improvement. We are planning to move to a new facility and will be a much larger organization.
The feature that I found most valuable is the overall stability of the product.
The stability of Cisco ASA is excellent compared to other products on the market. Because of our customer experience as an integrator company, our clients never report any performance problems. We have a good performance reputation with Cisco ASA.
I would say the Firepower module is most valuable. I'm trying more to transition to this kind firewall. I had to study a little on Palo Alto Networks equipment. There is a lot I have to learn about the difference.
We have multiple secure internal networks linked with our plants. We are from a oil company, so we have multiple plant areas which need to have restricted network access. Therefore, we are using it for restricting access to the plant area.
The initial setup was completely straightforward.
I like the user interface because the navigation is very easy, straightforward on your left side pane you have all the sites that you need to browse. Unlike any other firewalls, it's pretty straightforward.
Point-to-point VPNs can dynamically follow IP changes with no need for static IPs.
Dual WAN connections are greatly simplified and point-to-point VPNs automatically connect regardless of what WAN connection is active.
The security level of our organization has changed by using Meraki MX Firewalls. We didn't have the UTM before, but now we have sandboxing, tray scanning, attack preventions and monitorization. Our security level has improved.
It is very easy to configure.
It is very fast to implement.
In a week, we can make new policy and view what all our users did.
The dashboard is very intuitive and easy to understand.
Simple to manage.
The features that I've known to be most valuable are both the web security features as well as the web firewall capabilities. As a partner of Sophos firewall, we have some clients and they are using Sophos firewall UTM and we are using it as well.
Sophos UTM has improved the porting section. It has improved security by seeing the gaps. For example, when you discover that an entry has been using a certain application, with Sophos UTM acting as a Layer 7 firewall, you can block the application, not the port.
The most valuable feature is the IPS. It also protects us from malware.
UTM 9 brings along IPSec as well as iPhone and iPad support. This seems small but it’s useful.
The isolation of infected machines is a big feature. Also, the ability to detect external sources that change files on a file server is really big.
It improved bandwidth utilization and provided link load balancing features for internet and intranet lease lines.
Advanced protection (Sophos Sandstorm) - Protects against crypto viruses in real-time.
It has helped by identifying threats within the company. If there are computers or servers that are compromised, then we are able to identify them right away in the system.
Cisco could possibly improve upon their user interface design. There is a deep learning curve to the product if you are a newcomer.
There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products.
One of my main concerns, an area that could use improvement is in adjusting the need to buy a license to enable features.
Usually, the customers are satisfied, but I am going to recommend that all clients upgrade to FirePOWER management. I want Cisco to improve the feature called anti-spam. We use a Cisco only email solution, that's why we need the anti-spam on email facility.
The installation and integration of Cisco ASA with FirePOWER can be improved. The management with Fortigate is easier than Cisco ASA on FirePOWER. The management side of Cisco ASA can be improved so it can be more easily configured and used.
Most of the time, when I try to run Java, it is not compatible with ASA's current operating systems.
We have to rely on Cisco ASDM to access the firewall interface. This needs improvement. Because we have a web-based interface, and it is a lot more user-friendly.
If I need to download AnyConnect in a rush, it will prompt me for my Cisco login account. Nobody wants to download a client to a firewall that they don't own.
Meraki tech support staff have a lot more visibility into your network than you do, which is frustrating at times. I understand the approach is to keep the dashboard easier to understand. This will frustrate more advanced users at times.
We feel that Cisco provides smaller features, with fewer possibilities versus other solutions out there.
We could have more reporting options and the ability to send alarms to the administrator.
More detail needed for configuration of the VPN.
It would be great if the Meraki devices let us see, in real time, the internet demand on a single device.
The only stability issue is in Content Filtering. Sometimes we need to report these types of issues to Cisco support.
The only time we face a problem or issues is when we place a ticket. We have found that response is very slow.
With Sophos UTM, there is a general rule in the firewall when the country blocking can block some countries from accessing your data. In the current version, you still need to add it by putting in the IP range. This feature would be helpful for administrators and it gives them the advantage to block stuff in less time.
The solution could be improved by adding cloud soundboxing.
We didn’t find any issues but I know there have been some in the last few years.
It does have built-in policies, which enable you to disable USB devices, etc. It would be nice if they had more policies because there are not that many of them.
Initially, there were issues with the wireless network as wireless access points were disappearing from the dashboard after some time.
There is still room for improvement in wireless protection. I don't mean their WiFi device is bad, but there are still things to improve on, such as WiFi roaming.
The technical support only communicates via email. I would prefer to communicate directly with someone.
Pricing and Cost Advice
We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement.
The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market.
Licensing is expensive compared to other solutions.
Pricing is high, but it is essentially a corporate decision.
The cost is a bit high compared to other solutions in the market.
Cisco recently has become very expensive.
The cost is a bit higher than other competitive solutions on the market.
It is considered on the "high end" of the spectrum.
Other content filtering solutions that I have used had more bells and whistles, but given the cost, complexity, and management overhead, I am very pleased with Meraki’s solution.
It is more expensive than other solutions, but it is a cloud-managed network solution and support is given at the moment you call. That give a very big plus.
The Meraki UTM is excellent when you buy the Advanced Security license. If you buy a different license you lost all the valuable functions.
It can always improve pricewise regarding throughput.
The biggest issue with Sophos is the pricing. It's definitely more expensive. As I said, we looked at Webroot, which is a big alternative, and Sophos was almost three times the price of Webroot. That's a pretty big difference.
We purchased the appliance with five years onsite support and licenses.
Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers.
Sometimes more is less, meaning if you want more than three features, take the FullGuard licence.
The pricing and licensing are both good and better than Sophos's competitors. This is why we went with the product.
The AWS Marketplace product should be a better fit, but it is a little pricier.
Purchasing through the AWS Marketplace is pretty straightforward. Because were entirely on AWS and don't have anything anywhere else. It made the most sense for us as a one stop shop.
The pricing is pretty reasonable. I don't think that it is overly expensive.
Compared 34% of the time.
Compared 10% of the time.
Compared 8% of the time.
Compared 31% of the time.
Compared 16% of the time.
Compared 6% of the time.
Compared 27% of the time.
Compared 24% of the time.
Compared 13% of the time.
Also Known As
|Cisco ASA, Adaptive Security Appliance, ASA||MX64, MX64W, MX84, MX100, MX400, MX600||Astaro|
Adaptive Security Appliance (ASA) is Cisco's end-to-end software solution and core operating system that powers the Cisco ASA product series. This software solution provides enterprise-level firewall capabilities for all types of ASA products, including blades, standalone appliances and virtual devices. Adaptive Security Appliance provides protection to organizations of all sizes, and allows end-users to access information securely anywhere, at any time, and through any device.
Adaptive Security Appliance is also fully compatible with other key security technologies, and so provides organizations with an all-encompassing security solution.
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW.
|With the proliferation of modern applications and mixed-use networks, host and port based security is no longer sufficient. Cisco Meraki's layer 7 "next generation" firewall, included in MX security appliances and every wireless AP, gives administrators complete control over the users, content, and applications on their network.||The global network of highly skilled researchers and analysts, protecting businesses from known and emerging malware - viruses, rootkits and spyware.|
Learn more about Cisco ASA NGFW
Learn more about Meraki MX Firewalls
Try It For Yourself
Start your 30-day free trial today with Sophos UTM!
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||Hyatt, ONS||One Housing Group|
Financial Services Firm19%
Comms Service Provider11%
Comms Service Provider23%
Financial Services Firm16%
Comms Service Provider21%
Financial Services Firm12%
Comms Service Provider9%
Financial Services Firm7%