Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
The most important point is the detection engine which is now part of the next-generation firewalls and which is supported by Cisco Talos.
The most valuable features are the flexibility and level of security that this solution provides.
Integration with all the other Cisco tools is valuable.
We moved from a legacy firewall to the ASA with FirePOWER, increasing our Internet Edge defense dramatically.
Cisco ASA NGFW significantly improves our bank. It protects any high-value products that we use from hackers, viruses, malware, and script-bots. It gives us metrics on network traffic as well as what kind of attacks we are getting from the outside.
Right now, Cisco ASA NGFW has given us a lot of improvement. We are planning to move to a new facility and will be a much larger organization.
The feature that I found most valuable is the overall stability of the product.
The stability of Cisco ASA is excellent compared to other products on the market. Because of our customer experience as an integrator company, our clients never report any performance problems. We have a good performance reputation with Cisco ASA.
The most valuable feature of this product is the threat protection.
It is a VPN that serves all your needs as an application firewall.
Web and content filtering are valuable in preventing people from abusing the network and pushing up the bandwidth price.
We have never had to restart a firewall. The firewalls have all worked perfectly fine.
The best feature is the flexibility the product offers, in terms of remote access. What we had before was a decentralized mechanism in our organization, but after having this product we were able to get the remote locations into the same LAN. We were able to control the bandwidth and were able to take virtual access of those machines and give them the support, as and when required.
Bandwidth Management and aggregation. It is valuable for combining two ISPs. Switching to a secondary/redundant ISP is thus seamless, in the event that the primary ISP goes down. The Bandwidth Management is also valuable for limiting heavy downloaders that may impact negatively on the experience of other users.
The product has helped control bandwidth utilization, as well as enhanced connectivity and security to remote locations.
User and network policies to be managed on a single screen with powerful filtering and search options.
It allows me to easily connect with more than forty-five remote sites and more than fifty remote users between IPsec and SSL VPN, applying the web filter and application filter to ensure a secure connection.
Configuration troubleshooting is eased by the use of the color-coded, live firewall log.
The features that I've known to be most valuable are both the web security features as well as the web firewall capabilities. As a partner of Sophos firewall, we have some clients and they are using Sophos firewall UTM and we are using it as well.
Sophos UTM has improved the porting section. It has improved security by seeing the gaps. For example, when you discover that an entry has been using a certain application, with Sophos UTM acting as a Layer 7 firewall, you can block the application, not the port.
The most valuable feature is the IPS. It also protects us from malware.
UTM 9 brings along IPSec as well as iPhone and iPad support. This seems small but it’s useful.
The isolation of infected machines is a big feature. Also, the ability to detect external sources that change files on a file server is really big.
Advanced protection (Sophos Sandstorm) - Protects against crypto viruses in real-time.
Most users do not have awareness of this product's functionality and features. Cisco should do something to make them aware of them. That would be quite excellent and useful to organizations that are still using legacy data-center-security products.
There was an error in the configuration, related to our uplink switches, that caused us to contact technical support, and it took a very long time to resolve the issue.
With regards to stability, we had a critical bug come out during our evaluation... not good.
The product would be improved if the GUI could be brought into the 21st Century.
Cisco should improve its user interface design. There is a deep learning curve to the product if you are a newcomer.
There is no support here in Georgia. If something goes wrong, support is not always very helpful with the other firewalls or other products.
One of my main concerns, an area that could use improvement is in adjusting the need to buy a license to enable features.
Usually, the customers are satisfied, but I am going to recommend that all clients upgrade to FirePOWER management. I want Cisco to improve the feature called anti-spam. We use a Cisco only email solution, that's why we need the anti-spam on email facility.
The reporting should be improved as well as the backup.
Its scalability is not that great.
Cyberoam configuration is done through the browser, which is one of the places that viruses spread.
Once in a while, an unwanted email will slip in. You have to set your parameters to avoid that happening, but once in a while, an email has slipped past firewall. Once you update the firmware, you notice that it doesn't happen. If an email slips in, I get a little bit worried. I do get the report, but you just don't want that situation happening in the first place.
I would like to see a better content management pack and also the website searching should be better.
I have problems with the email filtering. Emails pass through without any filtering affecting them. When I get back to them and tell them this is the issue, they check everything and say it is not in their database signature and they have to update it. But you know, by that time, my user has already opened it.
There is a lot or room for improvement, because it is still not a fourth or fifth generation firewall. It lacks security features.
Needs a mail alert/notification when the device loses any of its connections, during ISP redundancy implementation.
I would like to see the SD-WAN feature improved.
Support for IKEv2 is needed in this solution.
The only time we face a problem or issues is when we place a ticket. We have found that response is very slow.
With Sophos UTM, there is a general rule in the firewall when the country blocking can block some countries from accessing your data. In the current version, you still need to add it by putting in the IP range. This feature would be helpful for administrators and it gives them the advantage to block stuff in less time.
The solution could be improved by adding cloud soundboxing.
We didn’t find any issues but I know there have been some in the last few years.
It does have built-in policies, which enable you to disable USB devices, etc. It would be nice if they had more policies because there are not that many of them.
There is still room for improvement in wireless protection. I don't mean their WiFi device is bad, but there are still things to improve on, such as WiFi roaming.
Pricing and Cost Advice
Watch out for hidden licensing and incredibly high annual maintenance costs.
We paid about $7,000 for the Cisco firewall, plus another small Cisco router and the lead switch. It was under the combined license. It's a final agreement.
The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market.
Licensing is expensive compared to other solutions.
Pricing is high, but it is essentially a corporate decision.
The cost is a bit high compared to other solutions in the market.
Cisco recently has become very expensive.
The cost is a bit higher than other competitive solutions on the market.
I have no comment about the pricing.
Prices are very high.
It is worth the value.
It’s value for the money. It’s functionally competitive with higher priced alternative brands.
The price is very competitive and the licensing is easy.
It is more expensive than cheap routers, but it offers a lot of functionality, and that warrants the price.
This solution is less expensive than FortiGate.
The biggest issue with Sophos is the pricing. It's definitely more expensive. As I said, we looked at Webroot, which is a big alternative, and Sophos was almost three times the price of Webroot. That's a pretty big difference.
Sometimes more is less, meaning if you want more than three features, take the FullGuard licence.
We purchased the appliance with five years onsite support and licenses.
Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers.
The pricing and licensing are both good and better than Sophos's competitors. This is why we went with the product.
The AWS Marketplace product should be a better fit, but it is a little pricier.
Purchasing through the AWS Marketplace is pretty straightforward. Because were entirely on AWS and don't have anything anywhere else. It made the most sense for us as a one stop shop.
Compared 38% of the time.
Compared 11% of the time.
Compared 9% of the time.
Compared 24% of the time.
Compared 23% of the time.
Compared 20% of the time.
Compared 33% of the time.
Compared 22% of the time.
Compared 15% of the time.
Also Known As
|Cisco ASA, Adaptive Security Appliance, ASA||Astaro|
Adaptive Security Appliance (ASA) is Cisco's end-to-end software solution and core operating system that powers the Cisco ASA product series. This software solution provides enterprise-level firewall capabilities for all types of ASA products, including blades, standalone appliances and virtual devices. Adaptive Security Appliance provides protection to organizations of all sizes, and allows end-users to access information securely anywhere, at any time, and through any device.
Adaptive Security Appliance is also fully compatible with other key security technologies, and so provides organizations with an all-encompassing security solution.
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW.
|Cyberoam Unified Threat Management hardware appliances offer comprehensive security to organizations, ranging from large enterprises to small and branch offices. Multiple security features integrated over a single, Layer 8 Identity-based platform make security simple, yet highly effective.||The global network of highly skilled researchers and analysts, protecting businesses from known and emerging malware - viruses, rootkits and spyware.|
Learn more about Cisco ASA NGFW
Learn more about Sophos Cyberoam UTM
Learn more about Sophos UTM
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||Gulf Corporation for Technology, Maridive & Oil Services, Fidelity Bank, Petra University, Capital FM Kenya, Safari Park Hotel and Casino, Mayfair Casino, Pacific International Lines, Mozambique Ministry of Education, University of Namibia, Royal Hospital for Neuro-disability, University of Hawai, New Delhi Municipal Council||One Housing Group|
Financial Services Firm18%
Comms Service Provider12%
Software R&D Company22%
Comms Service Provider14%
Financial Services Firm37%
Software R&D Company8%
Financial Services Firm12%
Comms Service Provider17%
Software R&D Company15%