FireMon Security Manager Reviews

I have been using FireMon Security Manager for around two years in a production environment, mainly for firewall policy review, compliance report, rule cleanup, and change tracking across multiple firewall platforms such as Palo Alto, Fortinet, and SonicWall, in addition to Check Point. Over this time, it has become part of the regular operations for audit and policy governance rather than just a one-time tool.

A very common day-to-day use case for us with FireMon Security Manager is policy review and cleanup before an audit. For example, recently, we had to prepare for an internal security audit, and we used FireMon Security Manager to run a policy analysis across multiple firewalls such as Palo Alto, Fortinet, SonicWall, and Check Point. FireMon Security Manager quickly highlights unused, over-permissive rules, as well as shadow and duplicate rules, allowing us to generate a risk and compliance report from FireMon Security Manager, review the findings with the application owner, and use that output to clean up and optimize the rule base. It also helps us track changes and document what was modified and why, making audit evidence much easier. FireMon Security Manager plays a key role in reducing risk, speeding up audit preparations, and making policy cleanup structured instead of manual and error-prone.

Based on my experience and operational uses, some of the best features FireMon Security Manager offers include centralized policy visibility, which provides a single pane of glass view across all firewall vendors and devices without needing to log into each firewall to understand rules. Another important feature is risk and rule analysis, which highlights risky, unused, shadow, duplicate, and overly permissive rules automatically, saving huge time on manual audits and helping reduce the attack surface. Compliance reporting is also a key feature, with built-in reports for standards such as PCI DSS, ISO 27001, and NIST, ready for auditors and saving weeks of work generating and validating evidence. Additionally, rule cleanup or recertification workflows allow assignment of rules to owners for validation and enforcement of governance. Multi-vendor support is significant as FireMon Security Manager works across various firewalls such as Palo Alto, Fortinet, Cisco, Check Point, and SonicWall. Policy automation is one of the most critical features, as it automates repetitive tasks such as rule assessment, reporting, and compliance snapshots, reducing manual work weekly or monthly.

I rely the most on the policy risk and rule analysis feature of FireMon Security Manager, as this is the most practical and high-impact feature on a day-to-day basis. It quickly shows unused rules, overly permissive rules, shadow rules, and duplicate rules across all firewalls. Instead of manually reviewing thousands of rules, FireMon Security Manager gives a clear prioritized view of what is actually risky or unnecessary, which directly helps in reducing the attack surface, preparing for audits, and keeping the rule base clean without spending days on manual checks. The risk and rule analysis feature is the most valuable, saving time, reducing human errors, and continuously improving the security posture.

One thing that stands out about FireMon Security Manager is how much visibility and control it provides over complex multi-vendor firewall environments, which really changes policy management from a reactive task to a more proactive and governed process.

I wish to see deeper and more customizable reporting and dashboards, as while the standard reports are useful for audits, operational teams sometimes need real-time, flexible views without exporting data. Tighter integrations with ticketing and change management tools would also enhance the workflow from request to implementation. FireMon Security Manager is excellent for policy governance and risk reduction, but better real-time dashboards and stronger workflow integrations would make it even more powerful for daily operations.

There are one or two areas where FireMon Security Manager could be improved to make it even stronger. While FireMon Security Manager overall delivers solid governance and risk insight, it would benefit from more flexible dashboards and deeper integrations to reduce manual steps and improve visibility without relying on external tools.

I rate FireMon Security Manager an 8 out of 10. It is a strong tool for firewall policy management, risk analysis, and compliance, clearly improving our audit process and policy governance. The reason I do not give it a 9 out of 10 is mainly because the dashboard could be more flexible and integration with the firewalls could be smoother. FireMon Security Manager is a reliable and high-value platform for managing and governing firewall policies, especially in a multi-vendor environment, though a few areas can still be improved.

I have been in my current field for more than six years.

FireMon Security Manager has been stable and reliable in our experience. We have not experienced any major crashes, data losses, or serious outages. It runs consistently during day-to-day operations, including policy analysis, reporting, and change tracking. While we do regular maintenance and upgrades during planned windows as any enterprise tool would require, there has been no major technical issues or unplanned downtimes. FireMon Security Manager has maintained steady performance even when scanning multiple firewalls and large rule pages.

FireMon Security Manager's scalability is good and practical for most enterprise environments. It handles increasing workloads and growing numbers of firewalls quite well, provided the underlying infrastructure such as CPU, memory, and database is sized correctly. We started with a moderate number of firewalls and added more over time without any performance degradation. Reports, risk scans, and compliance checks continue to run reliably as the device count increases. The key to scalability is the platform's sizing and how we use it in our environment; larger rule bases and more frequent scans may benefit from additional resources. Proper database maintenance and archiving also help maintain consistent performance. We have successfully scaled from dozens to a couple of hundred firewall devices, and FireMon Security Manager has kept up well through that growth.

The customer support for FireMon Security Manager has been outstanding in our experience. We have interacted with their support team a few times for setup questions and minor tuning issues, with responses being quick, knowledgeable, and very helpful. Issues were understood quickly and resolved without unnecessary back and forth.

We did not use a different and dedicated solution before FireMon Security Manager. Most of our work was done manually using native firewall management tools and spreadsheets for reviews and audits, which was time-consuming and error-prone. We adopted FireMon Security Manager to centralize policy management, automate analysis, and improve audit readiness, shifting from a manual process to FireMon Security Manager for saving time, reducing risk, and establishing proper governance in firewall policy management.

Our experience with FireMon Security Manager pricing, setup cost, and licensing has been reliable but not impressive or inexpensive. FireMon Security Manager is typically licensed based on the number of devices or policy targets you connect, such as firewalls and routers, rather than by the seat. This model makes sense for a multi-vendor environment, but costs can scale up quickly if you have hundreds of firewalls. The subscription pricing includes access to the platform and updates, but advanced modules or plugins, such as compliance packs or integrations, may require additional licensing. The initial setup is not trivial; it takes a few days to onboard all firewalls, configure connectors, and tune rule analysis baseline. Initial consulting or professional services can help speed this up, but that adds to startup cost. Once setup and baseline are done, ongoing effort is low and valuable. The cost for us is justified by the audit time saving and policy cleanup efficiency FireMon Security Manager delivers.

We have seen a major return on investment with FireMon Security Manager, especially concerning time saved and risk reductions, though this is not always captured in hard dollar figures. Before FireMon Security Manager, preparing for quarterly or annual audits meant manual reviews, cross-checking rules in spreadsheets, and building documentation, typically involving 30 to 40 engineers per audit cycle. After implementing FireMon Security Manager, policy risk reports, compliance reports, and anomalies are generated automatically, which reduces audit preparation down to 15 to 18 hours per cycle, saving about 40 to 50% of time just on audit-related efforts. Additionally, FireMon Security Manager's risk analysis helps us identify and remove hundreds of unused or risky rules within a week instead of months, thereby minimizing misconfiguration risk, lowering troubleshooting efforts, and strengthening overall security posture. While it is challenging to quantify risk reductions in monetary terms, the improvements in audit and compliance review are direct and visible. The same team now accomplishes more with less manual effort focusing on policy optimization, impact analysis, and governance flow instead of manual rule validation. In one audit cycle, preparation used to take 36 hours, which FireMon Security Manager has reduced to 16 hours, saving 20 hours for one cycle. With four audits per year, that leads to up to 80 hours saved annually, which might even exceed 100 hours. Assuming an engineer's cost per hour, this easily covers a portion of the FireMon Security Manager subscription over time. FireMon Security Manager delivers ROI through significant time savings, cleaner rule bases, and improved risk visibility, especially for organizations with complex multi-vendor firewalls.

We compare total engineer hours spent before versus after FireMon Security Manager and the number of days needed to get audit-ready reports, which explains the 40 to 50% time reductions based on practical ops-based measurement, not just a theoretical number. FireMon Security Manager clearly cuts audit preparation efforts almost in half by automating analysis and reporting.

The 40 to 50% reduction in audit preparation time was mainly based on hours spent by the team. Before FireMon Security Manager, audit preparation involved manually logging into multiple firewalls, exporting rules, checking them in spreadsheets, and building reports, with typically two to three engineers spending several days on this. After FireMon Security Manager, most of this work is automated; risk analysis, compliance checks, and reports are generated directly from the tool. The same preparation now usually takes about half an hour, sometimes even less.

We did a quick market scan before choosing FireMon Security Manager, but we did not find any other solution that met our requirements as effectively for multi-vendor firewall policy management and compliance. Hence, we did not seriously evaluate or shortlist another product.

My main advice for others looking into using FireMon Security Manager is to clearly define your policy management and compliance goals before deployment. This tool is powerful, and you will get the most value from it if you plan its use for risk analysis, rule cleanup, and audit workflows from day one. It is also important to size the platform properly based on the number of devices and rule base size, investing some time in initial tuning and baseline—this upfront effort pays off later with accurate reports and meaningful risk insights. Finally, involve both security and network teams early, ensuring FireMon Security Manager becomes a part of the regular change and governance process rather than just an audit tool.

One thing that stands out about FireMon Security Manager is how much visibility and control it provides over complex multi-vendor firewall environments, which really changes policy management from a reactive task to a more proactive and governed process. I rate this product an 8 out of 10.

Private Cloud

Other

FireMon Security Manager is mainly used for analyzing firewall configuration and rules. It is primarily for firewall analysis and configuration analysis of the firewall.

We work with FireMon Security Manager as a service provider. Our customers have it, but we use FireMon Security Manager on behalf of them.

We use FireMon Security Manager mainly for the on-prem environment, and we primarily use it for our on-prem firewalls.

We are not using FireMon Security Manager for SASE integration right now. We are just using it for firewall management.

We do use FireMon Security Manager for real-time compliance management primarily for that purpose, so we do have a positive impression of that because it can map the compliance against various standards available such as ISO 27001 or PCI DSS. That helps us in automating that compliance check on these firewalls.

We are not using FireMon Security Manager in an automatic fashion for compliance checks. We run it manually and run the tool periodically. We have not kept it for continuous scanning of the environment. However, whenever we run the tool, we do get a warning or an alert saying that this is a firewall rule that will potentially violate, for example, PCI DSS compliance.

FireMon Security Manager does affect our cleanup of firewall rules in a large enterprise environment because it helps us in identifying which rules are remaining unused since the previous FireMon Security Manager check. That helps us in prioritizing and saying that these are so many unused rules and why don't we clean them up.

One advantage of FireMon Security Manager is that it analyzes the firewall configuration against known standards. If there is a known firewall standard or configuration standard in NIST or any of the audit or compliance requirements such as PCI or ISO 27001, it can analyze the firewall configuration against those standards and give us a report of where we are missing so that we can comply with those standards as well.

FireMon Security Manager can also connect to multiple types of firewalls with different vendor firewalls. We use a multi-vendor firewall environment, and the advantage of FireMon Security Manager is that it can connect to different vendors that we use in the environment.

FireMon Security Manager helps to prioritize risks and prioritize fixes. When it points out errors or misconfigurations, it gives us a rating saying that this is a high critical misconfiguration which needs to be fixed first, versus a low-rating misconfiguration which might have a less or reduced impact and which we can fix later on.

We do observe a decrease in errors and misconfigurations that increase risk in the environment with FireMon Security Manager. It points out errors, so we mainly use it for that purpose. We don't use it to manage the firewall, but we use it for analyzing the firewall configuration that will reduce the risk and any kind of errors that are there in the firewall. We could say there is about a twenty percent decrease in errors and misconfigurations due to FireMon Security Manager. The reason is we were using some other tool earlier, so we had done quite a bit of improvements on the firewall. Once we introduced FireMon Security Manager, it found new areas where we could improve and there is about a twenty percent improvement.

FireMon Security Manager does affect our compliance reporting processes. It helps us automate reporting and prioritize all those compliances. This way, it is quite useful.

I think there are some disadvantages and areas for improvement. What is limited or has no capability in FireMon Security Manager is integration with all the cloud-based firewall native vendors. For example, in Azure or in AWS, if you have a Palo Alto firewall, FireMon Security Manager will work fine. However, if you use Azure's own native firewall or AWS's own native firewall capabilities, FireMon Security Manager does not have the ability to analyze the policy of such native cloud-based firewalls. That is a disadvantage that we are seeing because we are also using more and more native services rather than going for third-party services in the cloud environment.

The second disadvantage we see with FireMon Security Manager is some vendors which are now becoming popular, such as Cato Networks. We have one customer who uses Cato quite extensively, but we are not able to use FireMon Security Manager for them to do the policy analysis because it doesn't work with Cato.

I started working with FireMon Security Manager approximately a year ago.

Stability-wise, FireMon Security Manager is not a problem. It is approximately a ninety-nine percent stable product.

We haven't used FireMon Security Manager in a highly scalable manner, so when we factored it in, we haven't really tested its scalability. I am not aware of the scalability of the product or whether it can support thousands of firewalls. We do use it for hundreds of firewalls today, but not in the thousands. I am not sure on scalability.

Customer service from FireMon Security Manager is good in terms of responding to any issues or any errors that we face. In terms of using the product as is and its customer support, I would say it is good enough. I would rate support at about an eight on the scale from zero to ten, with ten being the best.

We were using some other tool earlier. We had done quite a bit of improvements on the firewall. Once we introduced FireMon Security Manager, it found new areas where we could improve and there was about a twenty percent improvement.

Deploying FireMon Security Manager is quite easy to deploy.

We bought FireMon Security Manager directly from a reseller. We did not buy it through AWS Marketplace.

FireMon Security Manager is worth buying and worth its money in terms of return on investment. As long as you have the firewalls in your environment which are supported by FireMon Security Manager, it is worth the investment.

It does save time and money both because otherwise you would have to review the firewall configuration by hand or manually, whereas FireMon Security Manager automates it. In terms of money, you will have to reduce the number of people who are involved in the firewall review. FireMon Security Manager is also a lower-cost product than AlgoSec.

I am comparing FireMon Security Manager to a product such as AlgoSec, something which operates in the same market. AlgoSec is one big example where we did an evaluation.

Cost-wise, it is very competitive if I compare it with its peers. The pros are that in terms of the tool capability, it is as good as any of the best of the market tools and cost-wise, it is lower. FireMon Security Manager is affordable compared to its competitors.

Time-wise, I am not sure how to measure it, but from a procurement perspective, because this is procured by the customer directly, we don't have visibility in terms of what was used and what was the cost of AlgoSec versus FireMon Security Manager. However, from a product perspective, our recommendation was that both were equal, and FireMon Security Manager slightly better. Cost-wise when FireMon Security Manager was better, I think the client went with FireMon Security Manager itself.

When I mentioned time saving, I meant that it saves time for when accurately creating, approving, and deploying firewall policies.

What organizations should remember is primarily to look at the compatibility of FireMon Security Manager with the firewalls that they have in their respective environments. In their environment, if they have only, for example, Palo Alto, Cisco, or FortiGate firewalls, and all of them are supported by FireMon Security Manager, however, if they use a very unusual firewall or a cloud-native firewall, they should check whether FireMon Security Manager supports those firewalls and then take a call accordingly. My overall rating for this product is eight out of ten.

Our main use case for FireMon Security Manager is centralized firewall policies, visibility, and risk management in a large environment with close to 200 firewalls. FireMon Security Manager helps us identify risky or unused rules, maintain compliance, and support audit without manual policy review.

On a day-to-day basis, we use FireMon Security Manager to review firewall rules, changes, and identify unused or risky rules. For example, before or after a change window, we run policy analysis to check overly permissive access and confirm whether the rule is still required. This helps us reduce risk and stay audit-ready in the large environment. We use FireMon Security Manager daily to analyze rule changes, spot unused rules, and prepare clean reports for audit without manual checks.

FireMon Security Manager helps standardize firewall policies and review access. Instead of relying on individual firewall expertise, we use FireMon Security Manager as a single source of truth to consistently assess risk, track changes, and support compliance in large, regulated environments.

The best features of FireMon Security Manager are centralized firewall visibility, policy risk analysis, and compliance reporting. It provides a single view across all firewalls, helps quickly identify risks and unused rules, and generates audit-ready reports, which is extremely useful in large, regulated environments. Change tracking is also very helpful, as it shows who changed what and when, reducing the risk of misconfiguration.

The change tracking feature has helped our team by giving clear visibility into what rule was changed, when it was changed, and whether it introduced any risk. This has reduced troubleshooting time and helped us quickly validate changes during audit and incident review. Policy risk analysis and unused rule identification are also very valuable, especially in large environments, as they have helped us continuously reduce risk and keep firewall policies clean.

The reporting and dashboard visibility are worth highlighting. FireMon Security Manager makes it easy to share clear, understandable reports with auditors and management, which saves time and reduces back-and-forth during review.

FireMon Security Manager has had a very positive impact on our organization by reducing manual effort and improving overall security posture. It helped us gain centralized visibility across a large firewall environment, reduce risk and unused rules, and significantly shorten the time required for audit and policy reviews. It has also improved change control and accountability, which reduced configuration errors and operational risk.

FireMon Security Manager is a strong platform. However, it could be improved with a more intuitive user interface and faster initial onboarding for new users. Simplifying some workflows and dashboards would help teams get value more quickly, especially in large environments. More guided recommendations for rule cleanup would also make day-to-day operations even easier.

I have been using FireMon Security Manager for the last 1.5 years.

I have not faced any issues with FireMon Security Manager. It has been more than one year and the solution is still running perfectly fine.

We are managing a large number of firewalls with the client where the solution is installed. As the environment grew, FireMon Security Manager continued to handle policy analysis, reporting, and change tracking reliably without performance issues. Even with the increased workload, the platform remained stable and consistent, which is critical in large, regulated environments.

The customer support is outstanding.

We have seen a clear return on investment with FireMon Security Manager. It significantly reduced the time spent on manual firewall policy review and audit preparation. Tasks that earlier required multiple team members and several days can now be handled by fewer people in a much shorter time. The biggest ROI has been time savings and operational efficiency rather than direct cost savings. It allows the same team to manage a much larger firewall environment without increasing headcount.

Since using FireMon Security Manager, we have seen a clear reduction in manual effort. Firewall policy reviews and audit preparation that earlier took days now take a few hours, especially when dealing with a large number of firewalls. This has helped the team focus more on analysis and decision-making instead of manual rule checking. It significantly reduced the time spent on manual policy reviews and audit preparation, making the process faster and more efficient.

Our experience with FireMon Security Manager's pricing and licensing is that it is on the higher side, but justified for a large, regulated environment. The setup cost and licensing made sense given the scale, compliance requirements, and the value it delivers in reducing manual effort and audit risk.

I evaluated several solutions available in the market, including Tufin and AlgoSec. However, I would not recommend any other solution besides FireMon Security Manager.

My advice would be to clearly understand your firewall scale and compliance requirements before deployment. FireMon Security Manager delivers the most value in large or regulated environments, so proper planning, clean onboarding, and stakeholder alignment will help you get benefits faster. It works best at scale, so plan the deployment properly and align it with audit and compliance goals. FireMon Security Manager is a strong choice for large environments, especially where compliance and audit readiness are critical. I rate this solution an 8 overall.

On-premises

We use FireMon Security Manager for managing the rule base on our various multi-vendor firewalls.

We did not use the policy manager, but with FireMon Security Manager, we checked for logging disabled. We used overly permissive features and ran SQL queries to find the overly permissive rules and conducted remediation based on those findings. We ran FQDN queries to find out which rules were using FQDN instead of URL filtering. Without FireMon Security Manager, the vendor did not have any such features, so FireMon Security Manager was the only tool we could use to get our retrievals. We use CLI scripts and GUI, both of which are doing something that no other tool can do as far as we have seen.

What I like the most about FireMon Security Manager is that it can go across a whole rule base and get the items we need, like rules that have a specific characteristic, such as logging disabled, and we can find which rules are there that match that criteria for any vendor. It can do this very quickly. Whereas, if we have to log into all the vendor websites and try to get access to all the infrastructure for every single vendor separately, it is a very time-consuming task. We can export results in CSV, and there are some good features that we can use right away.

What I dislike about FireMon Security Manager is that I use the Insights add-on option, which does add a visual dashboard. I would prefer more of a visual dashboard that I can customize. Right now, we have the visual dashboard in Security Manager, but it is not customizable, and the same applies to Insights. The AI feature is very useful in Insights, but the visual dashboard which can be customized is not there to track our progress if we are trying to mitigate any security blind spots.

I mention more customizable visual dashboards because every organization has different priorities. Sometimes our management asks us to prioritize and look for different items, and suddenly they change the direction. If you have a tool that does not customize a dashboard, then you cannot make graphs or visually represent over the past three months or six months how we have progressed. Have we gotten worse or better?

I think the pricing for FireMon Security Manager is fair. However, it could be better if you could have more customization options, such as medium and large firewalls. You could have different categories; small firewalls exist, but medium is no longer in the licensing. That would help save money.

FireMon Security Manager requires maintenance on my end. We have to pull retrievals, and the retrievals fail many times, and sometimes they succeed. Sometimes we have to investigate, troubleshoot, and do packet captures. There is a lot of work that management does not understand, and it is very difficult to convince them that we are actually working. They do not realize that we are actually working on many tasks just to keep things running and pulling reports. We need fresh retrievals, and sometimes things break. We have to remove devices and add devices. It is very difficult to portray to management that we are actually working, and it takes a lot of effort to manage the database server and keep things running smoothly and update licenses. A lot of background effort is involved, though it does not appear that way to management. It is very difficult to convey the efforts involved at performance evaluation time.

I have just used Panorama with FireMon Security Manager. However, my colleagues have used other tools, and they said there are advantages and disadvantages in every tool. FireMon Security Manager is a very good tool to do what we want to do, but it can be improved, as can every other tool.

I have been using FireMon Security Manager in my career overall for about four years.

I think stability is very good. FireMon Security Manager is pretty stable. Sometimes we had issues, but we resolved those issues and restarted the server. That part is good.

I think scalability with FireMon Security Manager is pretty easy.

Our TAM helped us a lot and was very useful to have. He customized many features that were not customizable. He wrote custom scripts and did a great job customizing everything and keeping our management happy. We had very customized requests, and since we could not customize anything, our TAM helped us maneuver around the rigid dashboard display limitations. He wrote custom Python scripts and did a lot of effort behind the scenes. I am not even aware of how much effort he took to do all that work.

I have just used Panorama with FireMon Security Manager. My colleagues have used other tools, and they said there are advantages and disadvantages in every tool. FireMon Security Manager is a very good tool to do what we want to do, but it can be improved, as can every other tool.

I was not there when they did the initial deployment of FireMon Security Manager, but I was involved in an upgrade, and the upgrade went smoothly.

I was not there when they did the initial deployment of FireMon Security Manager, but I was involved in an upgrade, and the upgrade went smoothly. Our TAM helped us a lot and was very useful to have.

I have just used Panorama with FireMon Security Manager. My colleagues have used other tools, and they said there are advantages and disadvantages in every tool. FireMon Security Manager is a very good tool to do what we want to do, but it can be improved, as can every other tool.

Overall, I would say FireMon Security Manager is hard to beat, except the AI features have been recently introduced in Insights. I would rate FireMon Security Manager 9 out of 10. There are hardly any tools that can do better, from what I have known. Perhaps there are some other tools, but I have not had experience with any of them. FireMon Security Manager is one of the best that I have seen so far. However, everyone has their own opinion, and management has their own expectations. They expect a miracle, so I cannot speak for management. We have told them that this tool does a lot of good work and it is very difficult to beat. The reporting features are very stable and reliable. It may not present the appearance of the latest or a shiny tool, as some tools are flashy. This is not the flashy tool, but it does a lot of basic reporting work and allows you to do all the queries. I think FireMon Security Manager is a well-rounded tool.

I have used the reporting capabilities of FireMon Security Manager to communicate risk reduction, compliance status, and the overall security posture to my higher-ups. We use it on a regular basis.

Our customers have different use cases with FireMon, and I won't disclose names. They want a tool that offers a single pane of glass for rule set visibility, understanding policy compliance, and how compliant they are with various policies such as HIPAA, PCI DSS, or NIST. Another use case involves Security Manager rather than Policy Planner and Policy Optimizer, as these are designed for change automation.

Regarding centralized visibility of firewall rules across multiple vendors for a customer, they sometimes want to know who owns a particular rule, its function, and its deployment location. For risk and compliance, the focus is on identifying risky firewall rules and assessing them against organizational standards. Additionally, they use network path analysis to understand connections between applications, which aids network security teams in troubleshooting.

FireMon Security Manager acts as a network security policy management layer above core infrastructures, offering centralized policy visibility across platforms including Palo Alto, Fortinet, and Check Point. It interfaces with ITSM tools, facilitating workflow automation. However, it complements rather than replaces existing security technologies.

Transitioning from a manual and time-consuming process to one utilizing Policy Planner and Optimizer has improved visibility and confidence in policy changes, reducing manual efforts, and enhancing governance and auditability.

The console GUI disappoints me because it lacks customization. I cannot remove or add widgets, similar to how iPhone locks app placements. The non-customizable dashboard annoys me as it shows unwanted information. However, Insights with AI integration offers customizable dashboard visibility once opted in, which addresses this limitation.

I have been with the company for twenty-two years, and with FireMon Security Manager, I have been using it for around two years now.

A specific collector issue affected traffic log collection and config retrieval. It was not a total crash, but a process issue. This is the first occurrence in two years, and we are working on pinpointing the problem. Overall, I rate the stability at nine out of ten.

FireMon Security Manager uniquely supports Strata Cloud Manager for Prisma Palo Alto devices and facilitates Azure firewall configurations and Illumio integrations. It integrates with various solutions such as ServiceNow, SIEM, or SOAR, showcasing superior integration and scalability among vendors.

As a user for two years, I recently opened my first case with FireMon's technical support, which was handled promptly. Unlike other vendors with long response times, FireMon's support quickly engaged, offering screen sharing sessions to resolve issues efficiently. I have found their support exemplary.

I have experience working with several network security policy management solutions, including Tufin, AlgoSec, and previously Skybox. Skybox offered a high degree of dashboard customisation, but the company subsequently went into liquidation in February 2025. Tufin and AlgoSec both have their own strengths, and my experience with FireMon has led me to favour it for my current requirements, particularly around centralised policy visibility, compliance, policy management, and integration capabilities.

Initial deployment is extremely easy. If a connector issue arises, FireMon sends a device pack to address specific issues, avoiding full software upgrades. This expedites resolutions, such as with Check Point or Fortinet firewalls. Furthermore, bulk uploading capabilities streamline implementation without management stations.

As a partner, I have experience working with multiple network security policy management vendors, each with different pricing, licensing, and deployment models. I have found FireMon's commercial offering to be competitive, with the overall value depending on the organisation's requirements, scale, functionality, and support needs. I would recommend evaluating the complete solution and its capabilities rather than looking at licensing cost in isolation.

I regularly design, deploy, and support FireMon Security Manager instances, receiving daily reports. These reports are valuable for customers, particularly for C-level presentations, offering insights into compliance, security, and change activities. I give FireMon Security Manager a rating of ten out of ten. I have worked with many solutions, including Skybox, Tufin, AlgoSec, Check Point, and Palo Alto, but FireMon Security Manager truly stands out for its willingness to assist quickly.

On-premises

Microsoft Azure

I am a partner for FireMon Security Manager and typically perform implementations for multiple clients. I use FireMon Security Manager to deploy rules, perform cleanup of rules and firewalls, and create reports based on daily changes or firewall triggers so that administrators and higher management teams can be notified. I can generate compliance reports in a fraction of a second at my convenience. I use the reporting features of FireMon Security Manager to communicate risk reduction, compliance status, and overall security posture to my management. I have scheduled reports for perimeter firewalls that notify the admin and management team when changes occur beyond restricted times, such as during nighttime or in production environments. On a daily basis, these scheduled reports provide details about what changes have been made and which personnel made those changes, with everything delivered to the management and admin inboxes so they are aware of who made what changes on the firewall. This provides evidence for future investigations if any issues are triggered. If someone mistakenly made changes or reverted changes and then deleted the audit logs, I can still map or review what changes were made through FireMon Security Manager for investigation purposes.

I particularly like the SQL query feature of FireMon Security Manager that I can use for rule searches. I can search based on command, source, destination, rule name, or rule number with multiple search field parameters that give me leverage to filter rules and obtain output at my convenience. The output can be delivered via email as well as in PDF or CSV format. This is a very good feature because I have not found this many filters on any other tools to get rules filtered from security devices.

I dislike that as soon as I upgrade the security devices' version, it takes time to get the device pack for that compatible version. I want to highlight that FireMon Security Manager should work in parallel with the latest version of security devices, such as firewalls, and the device pack should be updated as soon as the OS is released. For example, with the device pack, we pull data from security devices and based on that analysis, FireMon Security Manager provides us with reports. As soon as the security device's OS gets upgraded, such as with Check Point, when a client is running on R81.20 and upgrades to R82 or R82.10, there is an error pulling the configuration that was working previously on R81.20. In that scenario, I have to log a case with technical support, which takes time for analysis, and it takes more than a month to get the compatible version of the device pack to pull configuration from the upgraded OS of the firewall.

I have been working with FireMon Security Manager for more than two to three years.

Downtime in FireMon Security Manager is not significant. I can say that quarterly, once in a while, it is not accessible, but most of the time it is accessible with no crashes. I have seen improvements since I implemented FireMon Security Manager. It has improved quite a bit from previous versions. The page loading time is very minimal now, whereas previously it took more time to load the pages.

The scalability of FireMon Security Manager is good.

I have contacted the technical support and customer support of FireMon Security Manager. The quality of the support is good and the speed is also good. I receive responses within a timeframe, and as soon as I send an email, I get a response within the next day if analysis of logs is required, or the same day if it is not.

Previously when I was not working on FireMon Security Manager, I used to work on AlgoSec. As per my convenience, I can say that FireMon Security Manager is better because it gives me filtering of rules at my convenience, which is not possible in AlgoSec.

The initial deployment of FireMon Security Manager is easy. Everything is visible in the GUI and documentation is readily available. If someone reads the documentation, they can complete the setup. However, they should be aware of how to access the console. Basic knowledge of networking is required to complete the setup.

The pricing structure for FireMon Security Manager is good. FireMon Security Manager is much better than AlgoSec.

I would give FireMon Security Manager a rating of 10 for support. For everything related to FireMon Security Manager, I would give it a 10. My overall review rating is 10.

I use FireMon Security Manager as a compliance tool to check rule compliance and firewall rule compliance.

I use FireMon Security Manager as a compliance tool to check rule compliance and firewall rule compliance. Overall, it is good and working fine. As soon as we deployed it for that purpose, we could see the benefits immediately. We could see what rules should be blocked and everything.

The only feedback I would like to give is that we were requesting them to move to SaaS so that the upgradation and everything would be a little more automatic or maybe just easier.

I have been using FireMon Security Manager for around four years.

I have not observed any lagging, crashing, downtime, or instability with FireMon Security Manager recently. Previously, we used to have some issues with respect to upgrades two years back; it was failing, but now it seems pretty smooth since the last two years.

FireMon Security Manager is good in terms of scalability. We are requesting a few things now, and we have requested new features. I have gotten an update from the TAM that the engineering team is working on that, and it may be coming soon. With respect to scalability, FireMon Security Manager is fine and good.

I think FireMon Security Manager is pretty good. I have a support manager, Gary, who helps us. He is a TAM for us, and he supports us very well.

I have contacted the technical support or customer support of FireMon Security Manager regularly. The TAM with whom I am connected supports us, and his support is really good. He gives us proper support; whenever there is a query or any issue, we send an email to him, and he gives us support whenever required. We are completely satisfied with that.

Out of 10, I would give the support of FireMon Security Manager a score of 10. It is really good.

I cannot say that MFNA, Micro Focus Network Analyzer, is exactly similar to FireMon Security Manager because as of now, we have that tool, but it is strictly for configuration. There, we check the configuration part, not the rule of the firewalls. It strictly checks the configuration, so it is not really similar. FireMon Security Manager is better. I think we are exploring to check configuration from FireMon as well, but we are not checking it yet.

The initial deployment of FireMon Security Manager when I first started using the product was fine. It was easy and not so difficult.

Definitely, some time had to pass before I saw the benefits of FireMon Security Manager.

I do not have much idea with respect to pricing of FireMon Security Manager.

FireMon Security Manager does not really require any maintenance on my end to continue working. There are just regular updates whenever a new OS comes up, but apart from that, I do not see any maintenance that is required.

I think FireMon Security Manager's reporting is good. In our case, we do not use the report from FireMon Security Manager. We fetch the data from the API, and we have different dashboards, so we do not use reports directly from FireMon.

I do not have any idea about partnerships; I think I am just a customer of FireMon Security Manager.

I would rate this review an 8 out of 10.

I have been using FireMon Security Manager for approximately one to two years, but we are not utilizing it extensively, so we are not running all our tickets through it.

The intended use case is to have every firewall opening ticket processed through FireMon Security Manager. To accomplish this, we need to integrate it with ITSM, a ServiceNow tool, which is currently not implemented on our side. We have been waiting for this integration for a very long time and are awaiting support from FireMon Security Manager team to work with us and integrate it into our ITSM system. Currently, the way we would use it would be to manually enter all the data into FireMon Security Manager and then run it over, but this does not save us any time, so we are not currently doing that.

We have the topology built and are using FireMon Security Manager from time to time, but not for every use case. We sometimes use it for topology checks and rule verification, so we are using the secondary functions rather than the main function. The ideal scenario would be to have users enter information into ServiceNow that would be automatically populated to FireMon Security Manager, and then FireMon Security Manager would push the changes.

We are currently in the middle of changing our infrastructure. Previously, when we purchased FireMon Security Manager, we were using Cisco ASAs. Now we are migrating to FTD and next-generation firewalls from Cisco, and those devices are not yet integrated. Our engineer is working with the system, and we are seeking help from FireMon Security Manager in order to assist us with this transition.

FireMon Security Manager itself is very similar to Tufin, which I have previously used. The tool itself works well for its intended purpose and I do not think it needs improvement. FireMon Security Manager fulfills our requirements, although we are still working on integrating it with ServiceNow.

AlgoSec is another tool we considered, as Tufin is a popular comparison. However, FireMon Security Manager is cheaper and fits well with our needs. The logic of these tools is mostly the same, with differences coming down to specific extra features available with each one.

What I do not like is the time until support is provided, especially regarding the integration with ServiceNow. We asked about it a year ago, but we still do not have a date for when this work will commence. Better support is essential, as we are waiting an unreasonable amount of time.

Waiting one year to get help is unacceptable, particularly regarding the new setup and integration with ServiceNow. We need to pay extra for it, and it is frustrating to wait for an engineer from FireMon Security Manager to assist us.

We have never seen any instability, such as lagging, crashing, or downtime with FireMon Security Manager.

We did not experience scalability issues, but since we were never using or putting in more devices, I cannot adequately answer this question regarding scalability as I have not had a lot of experience with it in this regard.

The initial deployment was managed by an assigned person who was amazing and really helpful. However, getting in touch with an engineer now is a terrible experience, which I would score at five. The speed of support is slow; for instance, a question raised a week ago has not received a reply yet, although it may not have been an official ticket.

From their side, there was one person, and if he had some issues, he was reaching out to the developers to solve the problems we faced. This implies a level of dependency on their internal team which can cause delays.

Better support is needed as waiting a year for assistance is way too long. We have known we wanted this setup from the start, but it has not integrated as expected.

In my previous work, I used Tufin. Tufin and FireMon Security Manager were very similar in functionality, only with minor differences. While FireMon Security Manager is cheaper, I never directly dealt with the support of Tufin, as my role was limited to using the tool as a network engineer.

We were also considering AlgoSec, which has similar logic to FireMon Security Manager and Tufin. However, slight differences exist in potential extra features or what they support, but nothing was significant enough to impact our decision.

The initial deployment was acceptable because the assigned person was helpful. It was not the easiest process as we needed to import devices and adjust settings, but his assistance made the process manageable.

I remember the timeframe for fully implementing it from start to finish was three to six months.

There was one person from their team. When issues arise, he connects with developers to find solutions, rather than an entire team being dedicated to it.

Unfortunately, we have not realized return on investment because we did not fully implement FireMon Security Manager and are not fully using it, so it does not bring us the benefit so far. To realize benefits, we need more support for full integration.

The initial attraction to FireMon Security Manager was primarily due to its pricing. While it is cheaper than Tufin, I do not recall if AlgoSec was cheaper. Pricing strategies depend on individual agreements.

AlgoSec and Tufin were also evaluated by us along with their pricing.

We considered Tufin and AlgoSec alongside FireMon Security Manager. Each has a similar baseline logic, but FireMon Security Manager was more cost-effective. Tufin is known as a popular comparison, and AlgoSec was part of the evaluation during proof of concepts.

If comparing them, depending on the use case and device compatibility, all three could potentially meet our needs.

The same reasoning applies to questions about measurable improvements, integration effects, and specifics about FireMon Security Manager identifying or preventing risks because of insufficient utilization.

I do not want to blame FireMon Security Manager for this because our failure to use it is partially their fault. They are not giving us the engineer support we need.

We view this as a new setup issue requiring financial support. This is not directly a support problem for an existing issue, but more about expected availability to facilitate implementation.

My overall review rating for FireMon Security Manager is seven.

The main case of FireMon Security Manager is firewall policy management and compliance.

For an example, an application team requested access from a vendor network to an internal server. Before approving it, I used FireMon Security Manager to simulate the rule and analyze the risk. It showed that the requested access was too broad and would violate our internal policy. Using FireMon Security Manager, I identified the overly permissive access, narrowed the rule to a specific source, destination, and the port, checked the rule conflict and the redundancy, verified it met compliance requirements. Then I approved the least privilege rule instead of the original one. This prevented unnecessary exposure and kept the firewall policy clean.

Here are the best features which are offered by FireMon Security Manager: firewall policy analysis and optimization, risk impact and analysis, change management automation, compliance monitoring and reporting, and visibility across multiple firewalls.

Policy analysis and risk impact made the biggest difference for my team. It quickly identifies overly permissive or unused firewall rules, helping us reduce risk, clean up policies, and save time on manual reviews.

FireMon Security Manager has improved our organization by reducing risk, saving time, and improving compliance. It helps us quickly identify overly permissive rules, automate policy reviews, and maintain audit-ready reports. As a result, firewall changes are safer, manual effort is lower, and the overall visibility across the network is much better.

We saw about a forty to fifty percent reduction in the time spent on manual firewall rules reviews after using FireMon Security Manager. Compliance also improved. Audit preparation time dropped by sixty percent. Additionally, we reduced overly permissive or unused rules by roughly twenty-five to thirty percent.

The UI can be improved, including UI performance and navigation, and faster data refresh. Easier initial setup would be beneficial for new users. These areas can be improved by FireMon Security Manager.

I have been working in my current field for almost five years.

FireMon Security Manager is very stable.

Scalability is very good.

Customer support is moderate.

I chose eight out of ten because FireMon Security Manager delivers strong value in the policy analysis, risk visibility, and the compliance automation. It significantly reduced manual efforts, improves firewall rules, and makes audits much easier.

I have a partner business relationship with this vendor.

My experience with pricing and licensing for FireMon Security Manager was generally positive, but on the higher side. The cost is typically subscription-based and depends on the number of devices or firewalls being managed. It was on the higher side.

My advice is that if you are not an enterprise customer, then this solution is particularly not for a small customer because it is a use case for the enterprise customer, such as Bajaj, banks, and similar organizations. FireMon Security Manager is not the right fit for smaller organizations. I would rate FireMon Security Manager eight out of ten.

On-premises

My main use case for FireMon Security Manager is continuous firewall policy monitoring and compliance management, and I typically use this solution for analyzing firewall rules across multiple firewalls such as FortiGate or Palo Alto, identifying risky or non-compliant configurations and maintaining a clean and optimized rule base.

A specific example of how I use FireMon Security Manager for firewall policy monitoring or compliance management is that I regularly audit firewall rules. FireMon scans policies across devices, highlights unused rules, overly permissive access, and any rule that violates compliance, allowing me to review and clean up rules based on its recommendations.

The best feature FireMon Security Manager offers is the policy analysis feature, as it deeply inspects the firewall rules, and it also works with different firewall brands, making these two things very useful.

FireMon's deep inspection of firewall rules helps me in my daily work by deeply analyzing the firewall rules of all the firewalls integrated with the solution, evaluating the logic and behavior of the rule base, including rule usage, such as rule relationships and whether any shadow or redundant or overlapping rules are present, and it provides the risk level of open ports defined by any rule or exposure, making its compatibility with different firewall brands significantly beneficial for my team.

FireMon Security Manager has positively impacted my organization by being helpful in analyzing firewall policies, better controlling risks, reducing risky configurations, and improving the compliance readiness environment.

It improved compliance readiness as I have seen a better environment and found the solution enables faster policy reviews, typically involving less time in this solution because it works automatically, meaning I do not have to do anything manually.

FireMon Security Manager is working well and providing great features with full visibility across all firewalls, so I do not see any improvement needed at this time.

I have two years of experience using FireMon Security Manager.

FireMon Security Manager is stable.

FireMon Security Manager's scalability is excellent, as it can handle multiple firewalls at a time.

Customer support is excellent in their technical knowledge, and they are able to solve complex technical issues.

I would rate customer support a nine out of ten.

I have not switched from a different solution, as I have been using FireMon Security Manager since the beginning.

I purchased FireMon Security Manager through the AWS Marketplace.

I have seen a great return on investment, as I am able to save time for my team along with money savings.

I have seen that audit preparation has been reduced to a few hours compared to previously taking days or weeks, resulting in almost 60 to 70% time savings, and it has reduced the efforts in rule analysis and cleanup by 40 to 50%.

I have not evaluated other options before choosing FireMon Security Manager.

My advice to others looking into using FireMon Security Manager is that any mid-sized organization with a hybrid environment, especially those with multi-vendor firewalls, should consider this solution as a game changer, as it helps in compliance readiness, policy analysis, or policy cleanup, so I highly recommend considering this solution as one of the best options. I would rate this solution an eight out of ten overall.

Public Cloud

Amazon Web Services (AWS)