FireMon Security Manager Initial Setup

JeffReese - PeerSpot reviewer
Network / Security Design and Installation Engineer at a financial services firm with 1,001-5,000 employees

The initial setup is pretty easy. I have three engineers who work on setups, and it took about 20 minutes, walking through it twice in the sandbox. It's pretty easy to set up.

There are two aspects to the setup. There's the basic setup of getting the application working, and there is the advanced setup of putting firewalls into the application. The basic is so basic that it's ridiculous. I could probably answer all the questions a customer might have and send it off to them and they could do it by themselves the first time. The advanced is a little bit more hairy because you have to make sure everything is in place.

At each of our customers, we assign at least two people to do the reports.

The maintenance is lightweight. The only trouble is in the upgrades. They take a little bit of effort, but they only come out once or twice a year. Sometimes, you don't need to do the upgrade because the change isn't applied to whatever site you're working on. Sometimes an upgrade is easy, and sometimes it's reformatting a database and that takes a little bit more effort. But you don't do it. FireMon has a script all set up. It's just that it takes a little bit longer to watch it do the upgrades, as compared to doing it ourselves.

View full review »
Elden Torres - PeerSpot reviewer
Network Engineer at a financial services firm with 1,001-5,000 employees

The initial deployment was straightforward. Nothing was too complex, except adding more permissions to the service account. Otherwise, it was straightforward.

View full review »
JO
IT Manager for Networks and Cloud Infrastructure at a government with 10,001+ employees

The initial setup can take some time, including connecting it and configuring it. It's not something that is easy for anybody to do. There is time and energy required because of the number of systems you have to configure to get it to work properly. The setup is a bit complex and tedious, especially for a new user who will need someone to hold their hand as they go through it. But after doing it a couple of times, or upgrading it a couple of times, it's not as tedious.

Our deployment took about two weeks. We first did a discovery of what we wanted FireMon to do for us, a discovery of our requirements. We determined the prerequisites that had to be installed and the system requirements. We then moved on to an initial assessment through a deployment in a test environment. After the testing and everything working out, we further configured it to fine-tune it to our own specific environment. After all that was working okay, we went ahead to the final deployment. But for subsequent sites, it might just take a couple of days.

There is a learning curve as well to get used to the system and all the nitty-gritty knowledge needed to configure it and run it properly. Another thing that is time-consuming and tough to do is tagging stuff the right way.

View full review »
Buyer's Guide
FireMon Security Manager
May 2024
Learn what your peers think about FireMon Security Manager. Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
770,292 professionals have used our research since 2012.
MH
Network Security Analyst at a government with 10,001+ employees

I was not with the company for the initial setup but it was pretty straightforward when we did the upgrade. There were no real issues in the process.

Initially, we did have some high-maintenance requirements for it. That was at a point when we were having issues with it. However, after those were fixed within the system, it's been pretty low-maintenance. It runs as it needs to.

View full review »
RN
Network Engineer at a insurance company with 10,001+ employees

The basic implementation was straightforward but when you're talking about configuring the servers and all of the other steps, for a tool of this size, it's never straightforward.

For example, when configuring the servers, you will still have minor or major issues that you have to tackle or have to fix during the initial implementation. It may be straightforward to do so, but fixing problems will always lead to other problems in the process.

Overall, it was an easy implementation, but at the same time, it was ongoing. Our deployment did not take more than a month to complete. This included adding the firewalls from Check Point, which was done in advance of setting up FireMon. We had to set up the CPMI log collectors and then configure the Check Point dashboard to forward all of the logs to FireMon. Although it was time-consuming, I think it took less than 20 days in total.

With respect to our implementation strategy, we followed a basic approach. We started with installing all of the servers, and then we had to move all of the devices from Tufin to FireMon. We had three vendors including Cisco, Check Point, and Palo Alto.

We added each firewall vendor separately and we made sure that all of the logs were being forwarded to the data collector. This is where we get all of the log data hit counts, and we have to make sure that all of the devices are being retrieved successfully, without any issues. We also had to ensure that nothing was impacting the performance of the servers and there were instances where we had to wait for the specifications of the server just so they could meet all of the performance requirements. For example, the retrievals and all of the log data had to work properly.

All in all, there were a lot of steps and we had to get support tickets throughout. Thankfully, the support was great. They were very helpful during the initial implementation stage.

View full review »
JE
IT Security Admin at a tech vendor with 1,001-5,000 employees

It took two weeks before we were completely deployed. The actual project took three months, but most of that was knowledge transfer and advanced concepts.

Because FireMon is pretty expensive, our initial purchase was only one module of FireMon, which was Security Manager. We do have licenses for all our firewalls, but we only had the one module, Security Manager, and not the other ones, like Policy Planner and Policy Optimizer. That was our initial implementation setup.

View full review »
BK
Project Manager at a manufacturing company with 10,001+ employees

Our initial setup of FireMon was pretty complex, but we're trying to simplify things by choosing where we start. We're starting with some of our simpler, more straightforward firewalls. We haven't even gotten to the complex ones yet. It's a very slow process.

View full review »
JP
Lead Network Specialist at a university with 5,001-10,000 employees

The initial setup was straightforward. We sat back and they installed it for the most part.

View full review »
AG
Technical Account Manager at Axity de Colombia

It is very easy to set up and deploy this solution. It took perhaps one hour to complete.

View full review »
DJ
Security Engineer at a transportation company with 10,001+ employees

The initial setup was very straightforward. There are three different versions of the appliance that you can have, but they all come from the same ISO. They're just set up differently, depending on how you go through a configuration process. Everything is virtual. Even if I had to completely rebuild my entire infrastructure, it wouldn't take more than a day.

With all the processes and procedures around testing and only doing stuff during change windows, our original deployment took less than two weeks. For us, that is a pretty good turnaround time for deploying something, going through all the proper procedures and pre-requisites, validation tasks, etc. It wasn't a dedicated two weeks. I only have certain four-hour change windows for when I can accomplish tasks.

Our implementation strategy was that we sat down with a vendor engineer and we talked about how this needs to look. We took that and ran with it. It wasn't a run-book implementation strategy, no. But the vendor made sure that we were very clear on what we were building, how we were building it, how it all needed to talk to each other, and what access it needed to the rest of our network. It's simple enough that we didn't need more of a strategy, the kind you might need with a more complex infrastructure product.

In terms of the staff for maintenance and deployment, maintenance is a vague term. Let me give you two different answers. The actual maintenance of the solution really only occurs whenever the networking team has made a change on a reporting device, and I need them to make sure that they get it working with FireMon again; or, whenever we perform an upgrade. So that's a minimal amount of time, maybe five hours monthly. But, the whole job of one of my operations team's members is to review firewall changes, approve them, validate that they were done correctly, and to run reports monthly and quarterly against out compliance posture. All of that is done within the solution. There are some folks who spend 80 hours per paycheck inside of FireMon.

View full review »
SG
Solution Architect at a transportation company with 51-200 employees

The initial setup was pretty straightforward for the most part. We had some hiccups and some bumps with some of the more detailed configurations, but overall, it was pretty simple to set up, get it running, and collecting logs and configurations. It took us about four hours over the span of two weeks.

View full review »
AU
Management Trainee at a financial services firm with 1,001-5,000 employees

FireMon's initial setup is straightforward. Three individuals from our team and one engineer from FireMon's team participated in the deployment.

View full review »
it_user563418 - PeerSpot reviewer
Network Security Architect at a healthcare company with 1,001-5,000 employees

The upgrade from version 7 to version 8 seemed to be unnecessarily complicated, so we opted to to a clean install on version 8, and have had no issues with using this approach. In fact, it helped us clean up our installation.

View full review »
NS
Info Assurance Engineer at a aerospace/defense firm with 1,001-5,000 employees

The initial setup was straightforward. The wizard was easy to use. So, the initial installation of the tool was easy. However, when you get back into configuring the details for the map to obtain that single pane of glass view for the entire network, it was not well thought out and it could use improvement.

I would still consider us in an early phase of deployment, even though we've been using it for two years. We don't have all the firewalls licensed, so they are not all being managed by the tool. I would say we're still not done deploying it. We're still waiting on features to be developed by FireMon, so we can use it in our environment.

Our implementation strategy was to license the high value firewalls first, trying to start getting them managed by the tool, then we were hoping to do an initial pilot for firewall rule change management. However, we were never able to get to that step because the tool can't manage our network, or doesn't understand our network.

View full review »
KS
IT Security Consultant and Platform Architect at a pharma/biotech company with 10,001+ employees

Infrastructure was simple to set up, but custom workflow was complex, due to customer regulatory environment necessitating a lot of customization. FireMon Professional Services was able to accommodate, though.

View full review »
it_user600747 - PeerSpot reviewer
Security Engineer at a logistics company with 1,001-5,000 employees

The initial setup using VMs was rather straightforward. The use of VM images sped up the process greatly. Professional services added a great deal of value in optimizing the environment.

View full review »
SW
Network Security Engineer- Senior at a financial services firm with 1,001-5,000 employees

The initial setup was on version 7, which is a totally different ballgame, but the setup of both versions 7 and 8 were straightforward enough for me. I can't imagine something being much easier. It required minimal configuration and the documentation was excellent on how to set it up on your own. It's just easy.

A single-server deployment wouldn't have taken more than a day or two. We did multiple virtuals so we got slowed down by our virtual team building the servers. As a result, it probably took a few weeks. But that was not because of the product, it was because of our own internal teams.

Our implementation strategy was just to get the system up and running and onboard all of our firewalls into it.

View full review »
TA
Security Analyst at a government with 501-1,000 employees

I wasn't there when they installed it.

View full review »
it_user456090 - PeerSpot reviewer
Senior Network Security Engineer at a local government with 1,001-5,000 employees

Like anything new, we needed help from support to get our initial setup moving along. However once you learn the basics, it's not hard moving around the system.

View full review »
MP
GISA at a tech vendor with 201-500 employees

FireMon professional services helped us during deployment, and it was relatively straightforward. Deployment took us around two months. 

View full review »
PG
Asst. Manager Finance at a insurance company with 5,001-10,000 employees

The installation is pretty straightforward. It didn't take much time to install. It will take around 10 days of time to install in an environment similar to ours.

We have 30 people that deploy the solution to different organizations.

View full review »
it_user617388 - PeerSpot reviewer
Works at a financial services firm with 1,001-5,000 employees

Setup was fairly straightforward. Our system is in a virtual environment. We pretty much turned logging on for the firewall, pointed it to the FireMon server, added the firewall to the FireMon server. Within seconds, there were tens of blocks being pushed over there. The reports pretty much created themselves. You just had to run them.

View full review »
it_user588591 - PeerSpot reviewer
Enterprise Security Architect at a insurance company with 1,001-5,000 employees

Initial setup was all pretty straightforward. You stand up your platform, get your database ready to go, and that all happens out of the box. Then, you start to populate it with your devices. It's all pretty straightforward.

View full review »
it_user613533 - PeerSpot reviewer
Sr. Systems and Network Engineer at a recruiting/HR firm with 1,001-5,000 employees

The setup was pretty straightforward. It was just a matter of pointing the logs to the device and setting up a few basic things, so that it could go out and fetch the configurations/settings. Thus, it was relatively easy.

View full review »
it_user620586 - PeerSpot reviewer
Works at a financial services firm with 501-1,000 employees

Setup was straightforward. The instructions were really simple. We put in the basic information and then they scheduled some time with us to go through the setup and walk us through each one of the screens, what they do, what to look for and things like that. They kind of gave a little bit of a training class or training session.

View full review »
it_user642174 - PeerSpot reviewer
Information Security Officer at a university with 10,001+ employees

Back then, it was client-based and the setup was not so straightforward. Most things worked well right out of the box.

Although I haven’t done an actual setup after it became web-based, I can see that it is much easier. You don’t have to download a client. You just have a website. There is no need for a command-line configuration to get it up and running. It was fine for overall level of difficultly before and I can assume it is easier now.

View full review »
it_user616515 - PeerSpot reviewer
Sr Network Security Specialist at a government with 1,001-5,000 employees

I haven't really been involved much with the licensing. It seems fairly straightforward. Regarding the training after setup, I find the videos maybe could be a little bit better in respect to how to work with your FireMon product to get the best out of it; so maybe some better training videos on how to work with the product.

View full review »
MK
IT Security Assistant Manager at Octopus Cards Limited

Most of the setup was easy for us, but the advanced features are more complex.

View full review »
CG
IT Security Architect at a financial services firm with 1,001-5,000 employees

We had another guy who primarily worked on the setup because he actually used to work at FireMon. So, I haven't really done the setup on it in quite a few years.

The deployment was fairly straightforward.

View full review »
it_user586914 - PeerSpot reviewer
Conseiller sécurité des TI at a tech services company with 1,001-5,000 employees

Initial setup was quite simple.

View full review »
GI
Technology Engineer at a financial services firm with 501-1,000 employees

Initial setup was done prior to me being here.

View full review »
it_user617493 - PeerSpot reviewer
Network Support Systems Manager at a retailer with 1,001-5,000 employees

The initial setup was pretty straightforward. It was just a matter of pointing the logs to the device and setting up a few basic things. It could then go out and fetch the configurations/settings. It was relatively easy.

View full review »
it_user494268 - PeerSpot reviewer
Information Security Analyst at a financial services firm with 1,001-5,000 employees

The initial setup was straightforward. Minimal support was required to complete it.

View full review »
it_user560244 - PeerSpot reviewer
Clinical Systems Engineer So Cal Regional Office at a healthcare company with 1,001-5,000 employees

Since a non-IT person like me was able to setup the system from scratch, I would say that it is not complex at all.

View full review »
MP
GISA at a tech vendor with 201-500 employees

We had a FireMon support engineer for the initial setup and it looked fairly straightforward, but it definitely needed some FireMon knowledge. Since then, we have onboarded a number of new devices in FireMon on our own, and that part is quite straightforward. But setting up the system itself is something that requires the knowledge of a FireMon engineer.

For the deployment, there was a month of weekly sessions with the engineer to get it working.

We have three people, within our security staff, who are using FireMon regularly. The three of us were involved in deploying and we work on maintaining it. It's a shared effort. None of us is working full-time on FireMon.

View full review »
it_user494046 - PeerSpot reviewer
Information Security Engineer at a energy/utilities company with 51-200 employees

Initial setup was fine; you just need to map certificates between the sensor and the Application Server, which was something different. It can be sorted out through some other methods as well. I don’t exactly remember, but we faced one issue and to resolve it, we had to install the certificates again to get it working.

View full review »
it_user448857 - PeerSpot reviewer
Security Consultant at a tech services company with 501-1,000 employees

The initial setup was very easy and straightforward and we had no problems implementing it.

View full review »
JM
CEO at a tech services company with 11-50 employees

The initial setup was very easy.

View full review »
it_user453555 - PeerSpot reviewer
President at a tech services company with 51-200 employees

Straightforward.

View full review »
it_user494874 - PeerSpot reviewer
Network Security Sr. Advisor at a tech services company with 1,001-5,000 employees

We recently installed FireMon on VMware architecture and it was very smooth and without issues.

View full review »
it_user501963 - PeerSpot reviewer
Systems Engineer at a tech company with 51-200 employees

Initial setup was straightforward and it was easy to follow the installation steps.

View full review »
it_user456099 - PeerSpot reviewer
Information Security Engineer at a insurance company with 1,001-5,000 employees

It’s quite straightforward.

View full review »
Buyer's Guide
FireMon Security Manager
May 2024
Learn what your peers think about FireMon Security Manager. Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
770,292 professionals have used our research since 2012.