Cisco Hybrid Mesh Firewall Reviews

Our main use cases for the solution reflect that we chose Cisco because it's a unified solution. It's not just a single piece of equipment that requires extensive additional work to make everything else function. You can implement it end-to-end and it delivers comprehensive coverage.

I am using Cisco Hybrid Mesh Firewall together with several other Cisco security products and capabilities in a full Cisco environment. I had Cisco ICE, Cisco switching, Cisco ACI, Cisco UCS, and Splunk. This created a large Cisco ecosystem that we deployed, which is part of the reason we remained with Cisco Hybrid Mesh Firewall solution.

Regarding the capabilities I'm using together with Cisco Firewall, in our environment, we run an SDA environment. We have our access edge, which is our plug-and-play users. ICE forms a baseline of our entire SGT policy, with Cisco Hybrid Mesh Firewall serving as a break between our IT, OT, IOMT, and DMZ environments, creating a very full and simplified policy structure.

I am in the process of evaluating whether I use Cisco Security Cloud Control with my firewall, waiting to see where it progresses because in Australia, Triple C is coming out as a full feature release shortly. I'm weighing whether or not we adopt one or the other.

I have not started using or testing Triple C as it is not available in Australia yet. I have had some preview access through Cisco and through my account manager. It is something we are definitely considering. The question remains what benefits it brings to the organization to implement it as a fully-fledged solution.

That is something we're in the infancy of evaluating as we expand the product sets and the features we're pursuing.

I do not use Cisco AI Defense, but that's in our next roadmap. We're expecting that in Q3 of 2027.

I use Cisco Smart Switches, specifically utilizing the 9500X, which is the first generation of the Silicon One chipsets. I am about to place an order for 500 of the 9350 Smart Switches as part of our life cycle replacement.

How Cisco Smart Switches with segmentation capabilities work with Cisco Hybrid Mesh Firewall in my environment is not clear to us yet. We're still waiting to complete a production lab test.

The environment I am protecting with Cisco Hybrid Mesh Firewall includes critical water infrastructure across the entire state, as well as protecting medical endpoints. We are protecting the people of WA utilizing Cisco Hybrid Mesh Firewall.

The value I get from using Cisco Hybrid Mesh Firewall together with other Cisco security products is that we end up with a single unified pane of glass where anyone within the IT teams can log in and see the data set. It's one point to review. We're not logging into 15 different programs throughout the day for something we don't need. We've seen a massive uptake in ticket resolution, and ultimately, the corporate user is happier because we can identify the problem and resolve it efficiently. We're not troubleshooting 15 different applications.

I can quantify these improvements in terms of percentages. Rather than standing up new teams with this deployment, we've managed to optimize our existing team and their processes to take on the new workload and actually improve the enterprise themselves rather than spinning up dedicated teams. We've achieved about a 40 percent reduction in tickets, a 15 percent reduction in resolution times on P1 or P2 issues, and an 80 percent increase in customer satisfaction.

One of the features of Cisco Hybrid Mesh Firewall that I appreciate the most is the simplicity to deploy the device. I don't have to go to a site and do it myself. I don't have to send my senior engineers. I can get the device shipped to site, and one of my junior field support engineers can plug it in and it comes online. For us, covering such a large area of a country, that flexibility has proved invaluable.

In the context of the combination with segmentation and policy enforcement, visibility for stopping lateral movement is critical. The switching becomes the first layer within the VN structure. You have inter-VN and intra-VN capabilities. The switching is one layer, and Cisco Hybrid Mesh Firewall controls the secondary layer. For us, preventing lateral movement from a corporate end user into a patient monitoring system is crucial. It's a life-saving segmentation design.

The value I get from enforcing security closer to traffic alongside my firewall or firewall-like products is that you should always enforce closest to the egress point. You should never allow someone to get past or out of a site to begin with. The moment someone gets past that first perimeter, they're in your network. There's no stopping them from there.

As of now, there are no improvements I would like to see in how Cisco Hybrid Mesh Firewall works with other Cisco security products I use. Hopefully, as we progress through our journey, there will be things that we can work with Cisco on improving and bringing new feature sets that benefit not just us but everyone else.

As a product or solution itself, I do not want to suggest improvements or newer features at the moment. We're still building the product ourselves. We have sites running on it, but we have a lot more to accomplish before we reach a point where we finish our initial setups and designs.

I've been working in my current field for about five years. I have been working with Cisco products directly within health for a year. Before that, I was in Cisco in utilities and OT environments.

Cisco Hybrid Mesh Firewall has demonstrated great stability. To date, we've had no major outages. We've had the occasional bug, which is standard in any evolving environment, but we've had no major outages caused by the firewalls. We've experienced power outages and WAN outages, which are standard. Recovery when power is restored is nearly instantaneous. The same applies when a WAN link goes down and comes back up. We see a brief blip and that's all.

Regarding scalability, we have experienced great scalability. We are deploying across multiple sites. We deployed 100 Cisco Hybrid Mesh Firewalls in the environment as we progressed, and it was plug and play throughout, with a single unified policy across all of them.

During the program, we did have an engaged HTOM for the whole program, so I don't want to comment on that. It's not fair to the general support.

Before adopting Cisco Hybrid Mesh Firewall, I used some other vendors. There was a mix of firewalls in the environment. There was some Palo, some FortiGates, and some Sophos. It was very much a mixed environment. Unifying it all became a very clear requirement for the business.

The migration was challenging due to the differences between vendors. There was no central management, so each firewall had to be reviewed individually. There were no rules against the names; they were IP addresses, so none of it made sense. There was no clean 'we're cutting from this firewall to this firewall' process, so there were syntax changes throughout. That's where we encountered most of our issues. Cisco did have their firewall migration tool available as we finished.

I have seen a return on my investment in the sense that we haven't had to retrain the engineers on new products or new ways of working. It's simplified the training model because we go, 'Hey Cisco, we've got a new engineer. When can we get them in?' We're not dealing with five different vendors for one environment.

I evaluated other firewalls before going with Cisco. During the evaluation, we looked at going to a full FortiNet environment. So FortiGate firewalling, Forti-switching, FortiNAC, FortiPhones, and everything else. The capabilities, while FortiGate does produce great firewalls, the overall capabilities weren't right for the company at the time, whereas Cisco had everything we needed in an easier, simpler-to-deploy package.

If I were to rate Cisco Hybrid Mesh Firewall overall on a scale of one to ten, I would give it a solid eight. There were a few things during the deployment that challenged us while we were learning that process. One of the biggest challenges was migrating our legacy policies and structures over to Cisco Hybrid Mesh Firewall. That was a significant challenge for us. Overall, the performance is great. I can't fault what they deliver. The setup was hard for us; it doesn't mean it is for everyone else.

My advice for someone who is researching and considering purchasing Cisco Hybrid Mesh Firewall based on my experience is to buy one and put it in a lab. Experiment with it before you deploy it. You'll do the same thing I did and run with it. Get hold of one, spend six months, break it, experiment with it, challenge its limits, and don't be afraid.

On-premises

Our main use cases for Cisco Hybrid Mesh Firewall stem from our client considering their data center refresh a year and a half ago, where they thought about what new platforms to adopt versus just buying a traditional switch. When we originally bought it, Cisco came to us saying there is not actually a use case they could articulate yet, but they knew this would be able to do a lot more than a traditional switch because of the DPU. This was in the N9300 that allows you to be able to do a hybrid mesh firewall. Over the year and a half of working with them, we found that Cisco Hybrid Mesh Firewall gives you the ability to have stateful inspection on your switch in the data center, which is a massive change instead of having to install a firewall.

We are enforcing security with our environment right now using Cisco Hybrid Mesh Firewall and the N9300. The thought process there is instead of sending our production traffic up to the firewall for inspection and hair-pinning up to that, the inspection is happening within the data center in the flow of the data already. We are applying security policy to the data center. Instead of traditional stateless ACLs requiring one direction going in and one coming in the other, you do not have to have ordered rules now, and it is more of what you would think of as a global interface instead of being one interface here and one interface there, creating rules around that.

Cisco does optimize the experience in a hybrid or distributed enterprise setup, and the ability to do stateful segmentation in your data center is huge. It reduces costs both from a physical perspective and from a labor cost standpoint for our engineers who would otherwise have to traffic engineer to segment through the firewall and then inspect traffic. Additionally, it is providing the ability for organizations that have not adopted segmentation due to costs, both manpower and monetary. The ability to segment at your switch as you need, without having to turn it on from day one, gives you the ability to ramp up according to your organization's maturity level.

The features I most appreciate about Cisco Hybrid Mesh Firewall are the ability to do stateful segmentation on a switch, which in my opinion is huge because of the cost savings and effort savings. Outside of that, there are really interesting features such as anti-DDoS, which is a capability within the DPU because of the N9300, that I am also excited about.

Examples of how those features benefit our company include a project we canceled for our client to move their traffic from their data center up to the firewall. That was a massive project, and we spent probably three months planning it. During the process of working with Cisco and plugging in directly with the Cisco BU to understand the N9300's capabilities, we realized we do not need to implement that project after all. We can save money and efforts by segmenting and applying policy directly in the data center. Part of what we are doing is using Cisco Cloud Control as the overseer, connecting into Cisco Hybrid Mesh Firewall policy, integrating what we would call the ISOvalen agent and the HyperShield policy. All of that gets brought in together under Cisco Cloud Control.

To improve Cisco Hybrid Mesh Firewall, I think right now awareness is the biggest area for improvement. Cisco should focus on raising awareness about what the firewall on the switch actually is and how policy has changed. That is a massive story that has not been emphasized enough regarding saving time and effort due to the combination of all these tools.

From a feature perspective, I am discovering new features as we deploy, so I do not know if there is a good answer yet because we are at the forefront of this technology. I can tell you that whenever we ask for a feature while working with Cisco, within a day, we get the feature added. For instance, understanding flow data is crucial. Within the N9300, to be able to apply the policy as we are discussing, you need to understand your network flow and what communicates with what. We were able to collaborate with the Cisco BU to refine how we consume that data and migrate old policies to the new structure necessary with Cisco Hybrid Mesh Firewall and HyperShield.

We have been using Cisco Hybrid Mesh Firewall with our client since probably the beginning of January. We have spent close to six months of time working with it.

I have not experienced any downtime or crashes with Cisco Hybrid Mesh Firewall. The biggest issue we encountered was a gap between expectations for features relating to the design team versus the coding team. We had to work through that gap regarding policy flows and converting those into the new way of thinking from old traditional stateless to stateful. There were growing pains since this technology is new, but we collaborated closely with the Cisco BU and were able to get solutions quickly without causing any issues for us.

Cisco Hybrid Mesh Firewall scales very well, and the scale-out experience has been excellent. Supporting throughput for East-West traffic has been huge. It has scaled out, starting with our data center for disaster recovery specifically, and we plan to take it into full production easily as well.

I would evaluate the customer service and technical support as a white-glove experience for sure. They have been responsive, even late in the evenings, around eleven PM, taking calls to address issues and helping us figure out how to make things work because it was not functioning as we expected. They demonstrate a high level of expertise and engagement.

Before selecting Cisco Hybrid Mesh Firewall, we considered the traditional Nexus platform, which represents what traditional switching for the data center would be. Additionally, we considered using Palo firewalls for stateful segmentation for East-West traffic. Those were the primary solutions we considered and subsequently moved away from. There is nothing quite this on the marketplace, so I do not know if I could compare it to a single-point product that I could have considered.

I have seen a return on investment with Cisco Hybrid Mesh Firewall, and two major wins stand out. The first is the firewall redesign we canceled completely, which was a huge win for us, both in terms of human capital for our team and a monetary win. This achievement was made possible by Cisco Hybrid Mesh Firewall capability and the N9300 in the data center.

The second big win relates to a feature called TCAM, which manages MAC addresses and more. In large environments, this requires significant pruning, and previously, we would have to manually clean up the TCAM once a quarter. With Cisco Hybrid Mesh Firewall, that need is completely eradicated. We no longer deal with TCAM attacks or manually cleaning out routes.

My experience with the pricing, setup cost, and licensing of Cisco Hybrid Mesh Firewall is that it was minimal compared to the cost difference between what traditional N9300 would have cost to empower this capability versus the traditional Nexus. The pricing difference was very minimal. While I cannot give specifics, I can tell you that when our client and we sat down to look at the numbers, we realized we cannot afford not to invest in it due to the small gap in cost. A year and a half after working with them, it has paid off tenfold, and we would not have been where we are now if we had gone with the traditional Nexus platform. Investing in the smart switch, particularly the N9300 smart switch to enable HyperShield and Cisco Hybrid Mesh Firewall, has empowered us to respond to emerging threats effectively. New threats come in, and we are able to react.

Prior to adopting Cisco Hybrid Mesh Firewall, I can confidently say there was nothing that was able to address what we are doing with it.

What is currently preventing us from expanding into additional security enforcement with Cisco Hybrid Mesh Firewall is definitely internal policy, more than anything. It is about making sure we get all the teams aligned. The organization size of who we are working with using Cisco Hybrid Mesh Firewall is just about getting the teams agreed on this approach moving forward. The manpower piece is also critical as we are doing things with AI Defense in tandem, and that is a whole other team running that with the client.

My advice for other companies considering Cisco Hybrid Mesh Firewall would be to carefully consider your goals. You do not have to adopt all these advanced features I have discussed right from day one. You can use it just from a traditional Nexus switch for as long as you need. You can adopt these new features, from moving from ACLs and stateless segmentation to stateful segmentation, at your own pace as your team and organization mature.

The applications we run are mostly monolithic; however, there are some distributed applications, but most of it is the data lake, which is massive, servicing everything out of that in the data center. I would rate this product a ten out of ten.

On-premises

Other

My main use cases for Cisco Hybrid Mesh Firewall include data center segmentation and north-south segmentation.

The most valuable feature is the integration with all of the other Cisco tools that we have, and its platform-first approach. The centralized management console has helped my organization streamline security policies by leading to faster troubleshooting and more informed troubleshooting. You have that information whether it's from ICE or CSW or Cisco Hybrid Mesh Firewall at your fingertips. From the engineering perspective, the significant advantage is that a lot of the external data, such as CVE scores, are readily available, which makes it easier to understand if there are current threats that need immediate attention.

I think that's evident in what it does for healthcare, providing a more secure environment for our users and patients, which is always beneficial.

Regarding how Cisco Hybrid Mesh Firewall can be improved, I would say pricing and discount structures could be enhanced.

I have been using Cisco Hybrid Mesh Firewall for almost a year.

I would assess the stability and reliability of Cisco Hybrid Mesh Firewall as strong. I have not experienced any downtime, crashes, or performance issues.

I would assess how well Cisco Hybrid Mesh Firewall scales with the growing needs of the organization as performing quite well.

I would evaluate my customer service and technical support experience as fantastic. On a scale from 1 being the worst to 10 being the best, I would rate the customer service and technical support overall as about an 8 to 9. There is always room for improvement, but so far we are in that range.

Prior to adopting Cisco Hybrid Mesh Firewall, I was using another solution to address similar needs. The factors that led me to consider a change include scalability because of the previous platform we were on. Other platforms required a full-blown chassis for similar capabilities, whereas Cisco's solution fits more compactly into a data center.

I would describe my experience with deploying Cisco Hybrid Mesh Firewall as involving the obvious transition from one platform to another. There is a small learning curve for engineers, but so far, it has been steady. Good account teams and sales teams have been available and engaged, providing continuous training and support.

In my deployment, the partnership with our account teams at Cisco has been phenomenal. They have always been available to help, answer questions, and provide ongoing support.

I have seen a return on investment with Cisco Hybrid Mesh Firewall, as operational efficiencies are tangible. The team is spending less time troubleshooting situations, reducing MTTR. Because of the integrated ecosystem, we are able to gain better insight and develop better controls around securing our system.

My experience with the pricing, setup costs, and licensing has been positive. The partnership with our account teams has been phenomenal. Pricing has been competitive, and any savings we make on infrastructure can be reinvested in patient experience, care, and safety. So far, things have been good.

Before selecting Cisco Hybrid Mesh Firewall, we explored a couple of other competitors because of the native integrations that we have with other tools. However, we went through three different other manufacturers before settling on Cisco due to its advantages, including integration and better scalability.

The advice I would give to another organization that is considering using Cisco Hybrid Mesh Firewall is that it is easier to convert over than you would think. Obviously, there are challenges, especially if you are not building out a greenfield. From a brownfield perspective, internal challenges including migration windows, team pace, application partnership, and change management might arise, but they are manageable.

I would rate this solution an 8.5 overall.

On-premises

Other

My main use case for Cisco Hybrid Mesh Firewall is utilizing the full next-gen feature that includes antivirus, IPS, network access control, DDoS protection, and all access control features on the firewall.

Because these firewalls are the edge firewalls or the perimeter firewalls for our environment, we connect to the internet in multiple data centers and these firewalls provide us protection for all incoming and outgoing traffic to the government, thus we block all threats on the edge by using those features.

Another aspect I would add about my main use case is the DDoS protection feature; because these edge firewalls connect to the internet, the DDoS protection feature on the external interface is another useful component of these firewalls that we use.

I have most of the firewalls as on-prem and hybrid, along with some cloud perimeter firewalls.

I am currently using Azure and AWS for my cloud perimeter firewalls and am hoping to get on Oracle as well.

I use Cisco ThousandEyes and SNA alongside Cisco Hybrid Mesh Firewall, but I am not using Cisco Splunk.

Cisco Hybrid Mesh Firewall has had a notable positive impact on my organization. The problem I used to have was dealing with many active threats in the world that were affecting us, and without these firewalls, I could not stop those threats in real-time. Having threat intelligence feeds coming directly into my edge firewalls and blocking those threats is one of the improvements I have seen.

The first benefit I received is improved threat blocking that wasn't there before, and having the threat landscape reducing because of these features is another positive outcome.

The best features Cisco Hybrid Mesh Firewall offers include everything from the basic access control list to all those threat intelligence feeds that I receive from Cisco, as well as blocking all known threats at the perimeter, which is one of the key features. Blocking zero-day attacks on the perimeter using those threat feeds is also very helpful.

To give you an example of how those threat intelligence feeds have helped my team, at any given time if a zero-day attack has been discovered, the Cisco threat team already has that information, collects it, and pushes that feed into the firewalls. These firewalls have dynamic objects that receive those feeds and block all traffic incoming to my corporate environment and block all threats from the edge. This has been one of the very useful features, along with all the signatures that I get from Cisco on the IPS and the rest of the threat prevention blades, which are pushed in real-time as soon as they are available.

I wish that Cisco, by introducing a new feature like Cisco Live Protect, will one day integrate it into Cisco firewalls so that these firewalls can provide protection for all Cisco devices I have in the environment at the edge, including legacy devices, ensuring they are still protected without enabling those features on Cisco Hybrid Mesh Firewall.

Once having Cisco Live Protect, there is potential for reporting coming out of these firewalls, which I think Cisco Cloud Control may help in the future if telemetry goes into Cisco Live Protect and generates all reports on all the vulnerabilities it has protected.

Regarding the AI capabilities of Cisco Hybrid Mesh Firewall, I hope that the guardrails Cisco is implementing will be strengthened and evaluated, as that will make a significant difference in governance and security.

I believe that integration with Cisco Cloud Control will significantly improve Cisco Hybrid Mesh Firewall, and I see Cisco is on track to implement these improvements.

While Cisco Catalyst Center and Cisco EPNM do not directly interact with the firewalls, I hope that all those tools will feed into the cloud control solution in the future, providing better visibility, dashboards, and control for monitoring my entire environment.

The only improvement I am looking for is Cisco Cloud Control, and once that is established, other integrations like Catalyst Center and ThousandEyes could contribute positively.

I have been using multiple types of firewalls from Cisco since 2010, not exactly Cisco Hybrid Mesh Firewall, so it has been 15 years with a different Cisco firewall product.

Cisco Hybrid Mesh Firewall scalability is very good; it is sufficient for my capacity needs, and I can scale it anytime if required.

Customer support has always been good; Cisco has local SEs to the Cisco TAC center, and these resources are invaluable for me.

I would rate customer support a nine; it is very good.

I did not use a different solution previously; this is my first solution in my environment, and I am happy with it.

These measures certainly help save costs, time, and effort, which I am looking forward to.

I use a BYOL license for Cisco Hybrid Mesh Firewall and did not use the other model.

Licensing and pricing are fine; however, the setup cost is high because I use a managed service provider for those services. If Cisco could offer complimentary services for setup without using a third party, it would save costs and lead to better outcomes.

Before choosing Cisco Hybrid Mesh Firewall, I was using Cisco ASA firewalls at my edge and swapped them with Cisco Hybrid Mesh Firewall.

I would probably rate Cisco Hybrid Mesh Firewall a seven.

The reason I don't give it a lower score is that Cisco offers a good quality product, but I haven't given it a ten because it still has room to improve. Cisco can do better in terms of security and firewall capabilities, and although they are leaders, they can reach an even higher rank with a few improvements that are forecasted.

I believe the accuracy and reliability of its output are very good; Cisco is doing well in that area, but there is still room for improvement. With AI enhancements, I believe it will get even better, currently sitting around a seven to eight and likely to be a nine to ten in a year or two.

The value I get from using Cisco Hybrid Mesh Firewall together with other Cisco security products remains the same, without anything extraordinary happening. I hope that once the integration with Cisco Cloud happens, it will enhance the overall effectiveness.

Cisco Hybrid Mesh Firewall is a good product with good value for money; if set up correctly from the beginning, I will likely have a better outcome.

Hybrid Cloud

Microsoft Azure

My main use cases for Cisco Hybrid Mesh Firewall are cloud and on-premises connectivity. I run various applications and assess the operational efficiency with Cisco Hybrid Mesh Firewall in my IT environment.

What I appreciate most about Cisco Hybrid Mesh Firewall is the visibility that I gain into the network. The end-to-end visibility from Cisco greatly affects my organization's troubleshooting capabilities, and I can provide examples of how these features have benefited my organization.

I believe Cisco Hybrid Mesh Firewall can be improved by including additional features in the next release. My experience with the pricing, setup costs, and licensing has been satisfactory.

I have been using Cisco Hybrid Mesh Firewall for five years.

I have experienced minimal downtime, crashes, or performance issues with Cisco Hybrid Mesh Firewall. I evaluate customer service and technical support as responsive.

My experience with deploying Cisco Hybrid Mesh Firewall has been effective, with certain challenges and successes. It scales well with the growing needs of my organization.

I evaluate customer service and technical support as responsive.

Prior to adopting Cisco Hybrid Mesh Firewall, I was using another solution to address similar needs. My deployment model for Cisco Hybrid Mesh Firewall is hybrid.

My experience with deploying Cisco Hybrid Mesh Firewall has been effective, with certain challenges and successes.

I have seen a return on investment through Cisco Hybrid Mesh Firewall. I considered other solutions before selecting it.

I believe Cisco Hybrid Mesh Firewall can be improved by including additional features in the next release. My experience with the pricing, setup costs, and licensing has been satisfactory.

I considered other solutions before selecting Cisco Hybrid Mesh Firewall.

If I am using a public or hybrid cloud, the cloud provider I use is reliable. My experience with the deployment has been overall positive.

I face specific challenges with hybrid or distributed enterprise networks that Cisco addresses. My impression of the end-to-end visibility offered by Cisco is positive. I am curious about how Cisco optimizes the experience in a hybrid or distributed enterprise setup.

What stood out in the evaluation process, both positive and negative, when comparing the options was noteworthy, particularly before selecting Cisco Hybrid Mesh Firewall. I would rate Cisco Hybrid Mesh Firewall overall as high, and my advice to another organization considering it would be to assess their specific needs and how the product addresses them.

I have expanded usage of Cisco Hybrid Mesh Firewall. I would assess the stability and reliability of the system as strong. I rate Cisco Hybrid Mesh Firewall overall as eight out of ten.

Hybrid Cloud

Other

My main use case for Cisco Hybrid Mesh Firewall is to filter incoming and outgoing traffic through our perimeter firewall. We also have an East-West firewall to control the traffic between our data center and Azure environment.

Cisco Hybrid Mesh Firewall helps us filter traffic between our data center and Azure environment by using Access Control Lists to control user access to our Azure servers, where the source is the user PC and the destination is the Azure server, specifically filtering all HTTPS traffic.

In addition to our main use case, we enable IPS, Intrusion Detection Systems, malware protection, and URL filtering on Cisco Hybrid Mesh Firewall to filter all outgoing traffic from Peninsula users to external sites.

Cisco Hybrid Mesh Firewall positively impacts our organization by providing the latest firewall protection in the world, and with features like IPS and AMP, we are confident in our security. We also utilize the Talos blocklist to ensure up-to-date malware protection.

The best features Cisco Hybrid Mesh Firewall offers include the stateful firewall for controlling traffic and IPS with malware protection, which helps us filter traffic and prevent malware and phishing.

For IPS, while we do not have any specific case about a malware attack, this feature ensures that all our users have intrusion protection when accessing external websites, and we have not experienced any intrusion cases or malware cases over the past few years.

For URL filtering, we enhance our protection by using a monthly malware list from third parties, which we upload to our firewall, and we also manually block websites with bad reputation URLs.

Currently, we send all syslogs from our managed devices to LogRhythm, and I believe Cisco's features for exporting logs and integrating with our SNA logs for third-party syslogs are quite beneficial.

Regarding Cisco Hybrid Mesh Firewall's AI capabilities, I believe AI is vital for our IT infrastructure as it allows us to automate policy rules based on user behavior, reducing workload for network engineers while ensuring correct rule configuration for protection.

My experience with Cisco Hybrid Mesh Firewall's AI capabilities in terms of accuracy and reliability has been good, as Cisco maintains a strong reputation for data filtering, traffic control, and protection against malware and phishing attacks.

I think Cisco Hybrid Mesh Firewall fulfills an important role in protecting our network, but I believe if Cisco could develop tools for managing third-party firewall devices using Cisco FMC, it would provide a more comprehensive solution.

I do not have any complaints regarding the management capabilities of Cisco Security Cloud Control, and I hope Cisco continues to develop new features and AI integrations for the firewall infrastructure environment.

I have a few years of experience using Cisco Hybrid Mesh Firewall.

Cisco Hybrid Mesh Firewall is stable and has been reliable for us.

The scalability of Cisco Hybrid Mesh Firewall is very good as we can upgrade the firewall appliances easily whenever we expand our branches or see an increase in users, ensuring increased data throughput and high availability.

We contact Cisco support, especially during new deployments or upgrades, and their proactive TAC service has been very efficient in addressing issues quickly.

I would rate customer support a ten out of ten.

We have been using Cisco firewall products for a long time, transitioning from Cisco ASA to ASA with Firepower module, and then upgrading to FTD managed by FMC. We trust Cisco and continue to use their latest developments.

Regarding our return on investment, compared to older models, the new firewall infrastructure allows us to efficiently manage all firewall appliances through Cisco FMC, significantly reducing human workload and improving rules management and segmentation.

I am not responsible for pricing and cost management decisions but work closely with our network engineer, providing feedback on models, new features, and licenses concerning Cisco products.

We did not conduct an official review of other options before choosing Cisco Hybrid Mesh Firewall, as we followed recommendations from other health organizations with positive experiences using Cisco products.

On a scale of one to ten, I would rate Cisco Hybrid Mesh Firewall a nine.

I chose nine out of ten because since deploying Cisco firewall, we have not experienced any intrusion or malware attack, and the URL filtering feature consistently provides new feeds to classify and block URLs based on reputation.

In our organization, we deploy Cisco Hybrid Mesh Firewall in both on-premises and cloud-based environments, utilizing multiple Cisco Firewall Threat Defense devices managed by our Cisco FMC along with Firepower Threat Defense for Azure in various regions.

We use Azure cloud for our cloud-based deployment.

We also utilize Cisco SNA for secure network analytics and Cisco ISE for authentication and authorization in our wired and wireless networks, including our newly deployed Cisco SDA using our Catalyst Center.

Together with Cisco firewalls, we are using Firepower Threat Defense devices, all managed by Cisco FMC, and for authentication purposes, we are using Cisco ISE version three along with Cisco SNA's features like managers, flow collectors, and flow sensors.

My advice for others considering Cisco Hybrid Mesh Firewall is that Cisco has a strong reputation in the firewall industry for controlling both north-south and east-west traffic, providing a complete solution that works well with other Cisco products.

Hybrid Cloud

Microsoft Azure

My main use case for Cisco Hybrid Mesh Firewall is basic edge security.

The features I value most about Cisco Hybrid Mesh Firewall are the integration it has, allowing you to access the cloud and integrate other firewalls to build and manage policies.

The centralized management console has helped my organization streamline security policies because we have a single place to view logs, ingestion, and to correlate all logs and events from one dashboard.

We have utilized the advanced threat intelligence feature of Cisco Hybrid Mesh Firewall, and it helps significantly as it detects more threats that we encounter.

I assess the integration of machine learning in enhancing threat detection with Cisco Hybrid Mesh Firewall as excellent, especially with the anomaly detection based on machine learning that helps identify unusual activities even without pre-defined rules.

I cannot identify specific improvements for Cisco Hybrid Mesh Firewall, but integrating additional security products such as Cisco Umbrella might be beneficial for pulling information into the dashboard.

I have been using Cisco Hybrid Mesh Firewall since last year.

I assess the stability and reliability of Cisco Hybrid Mesh Firewall as strong, with no downtime or crashes experienced once it has been onboarded.

I find that Cisco Hybrid Mesh Firewall is well-prepared to scale with the growing needs of my organization, as it is designed with scalability in mind.

We have not expanded usage yet, but as more data becomes available and more people utilize it, there will inevitably be a need for expansion.

I evaluate the customer service and technical support as excellent, as the support provided by Cisco is superior to other companies I have dealt with across various products.

I would rate my experience with customer service and technical support an eight out of ten.

I give it an eight because they are generally quick to respond, but there are times during shift changes where I have to re-explain issues to new staff. While they track previous interactions well, starting over can be frustrating if an urgent case arises at the end of a shift.

Prior to adopting Cisco Hybrid Mesh Firewall, we were using older Cisco firewalls such as Cisco ASAs.

My experience deploying Cisco Hybrid Mesh Firewall is that it is fairly easy now compared to how it used to be, especially with the ease of cloud onboarding where you can start applying your policies right away.

Initially, I faced some challenges during deployment, such as failures to onboard, but many of those issues have been addressed in the last revisions, making it much better.

I believe there is a return on investment with Cisco Hybrid Mesh Firewall for every company that deploys it, as they typically see returns quickly, often within a few months, and the value measured is reasonable and comes back quickly.

I think the pricing and setup cost for Cisco Hybrid Mesh Firewall are fairly priced. While some vendors offer cheaper options, the real value lies in the technology and the support provided by Talos and TAC, justifying its price in comparison to other vendors.

Before selecting Cisco Hybrid Mesh Firewall, we considered different vendors such as Palo Alto and Fortinet. Customers often ask for options from other vendors, but many prefer Cisco due to the intelligence and support in the back end, which I value more than any specific feature some other vendors may excel in.

I review the insights provided by Cisco Hybrid Mesh Firewall for traffic patterns and vulnerabilities every day.

While the features of Cisco Hybrid Mesh Firewall have not specifically helped my organization, they have clearly benefited the companies we deploy it for by centralizing security and providing advanced intelligent threat detection with machine learning, which streamlines their security processes.

My advice to another organization considering Cisco Hybrid Mesh Firewall is to view security holistically, recognizing that it integrates multiple layers, allowing you to manage everything through a single dashboard without siloed information. I rate this solution an eight out of ten overall.

Hybrid Cloud

Other

My main use case for Cisco Hybrid Mesh Firewall is the consolidation of multiple tools into one management platform.

A specific example of how I use Cisco Hybrid Mesh Firewall for consolidation is that I previously managed many instances of Firepower Threat Defense and ASA firewalls across many different management panes, and all of those devices now roll up into Security Cloud Control.

The best features Cisco Hybrid Mesh Firewall offers are that the look and feel of the platform is consistent across all the different domains of the security platform, so whether I am working on Secure Network Analytics, Cisco Hybrid Mesh Firewall, or the endpoint, I get a unique and consistent feel across every different management pane.

The consistency offered by Cisco Hybrid Mesh Firewall helps me in my day-to-day work and improves my experience because having a similar look and feel allows me to be quicker in performing regular tasks such as managing rule sets and provisioning new devices. Previously, when all the tools looked differently, it was very difficult to remember where specific functions and features were, but now with a consistent UI and a consistent look and feel, I find that I can do common tasks quicker, more efficiently, and with fewer errors.

Cisco Hybrid Mesh Firewall has positively impacted my organization because many of us reflect very highly on the Cisco portfolio, and over the last few years, Cisco's security portfolio in particular has lost market share. For those of us who are very strong Cisco stakeholders, we have found this to be a risk to us personally, so having Cisco begin to increase its mind share and wallet share within the organization has helped us not only on the job security front but also helped us evangelize the solutions and technologies that we have spent most of our careers learning about.

Specific outcomes that show the positive impact of Cisco Hybrid Mesh Firewall include that, with a single management environment to perform many different network changes on, we find that we can aggregate different change requests through the change management program without having to split things up. We also have the ability to document changes and indeed have the ability to roll back failed changes in a much more expeditious manner with an audit trail, which ensures that both our network team and our security and compliance organizations are confident that we can not only effectively implement change, but we can also manage the risk that comes along with change.

Cisco Hybrid Mesh Firewall could be improved by refining the documentation around the migration path from Cisco Defense Orchestrator or Farsight Manager because when we were early adopters, the migration path was quite unset and very vague and ambiguous. I also feel that the third-party firewall management functionality could be better documented, such as managing Palo Alto or Fortinet firewalls under Security Cloud Control.

I have been using Cisco Hybrid Mesh Firewall for approximately one year.

Cisco Hybrid Mesh Firewall is stable right now.

The scalability of Cisco Hybrid Mesh Firewall is currently undetermined because we have not scaled out yet.

We have not needed to use customer support for Cisco Hybrid Mesh Firewall yet.

My experience with pricing, setup cost, and licensing for Cisco Hybrid Mesh Firewall is that it involves a very light touch because there was a very clear migration path from traditional management and traditional security tools into Cisco Hybrid Mesh Firewall platform, and there was very little lift for us.

It is too soon to tell today what the ROI with Cisco Hybrid Mesh Firewall would be, but now that we have everything managed under a single platform, we do have a better capability to gather those metrics, and we feel that we will gain better KPIs moving forward.

I did not evaluate other options before choosing Cisco Hybrid Mesh Firewall.

Regarding Cisco Hybrid Mesh Firewall's AI capabilities, having an AI-empowered solution around governance and security allows us to be much more expeditious in our research and our evaluation of rule sets, policies, and the implementation and health of the platform. Previously, we had to touch every log, touch every UI, and every report, which was not only time-consuming but prone to errors, especially considering many different people may perform the same job. Having AI and agents do that for us now provides a consistent look and feel and a consistent outcome, and we do not have to be at the risk of any individual's skill set or experience with the tool. Consistency is key.

Regarding Cisco Hybrid Mesh Firewall's AI capabilities, I think the accuracy and reliability of output will tell in time because I do not think we have had long enough to work with the tool. This is a very new and evolving area of the technology space, but I do have a great deal of confidence based on early feedback that we have gotten from the tool which indicates it will remain a highly valuable asset as part of our infrastructure.

Cisco Hybrid Mesh Firewall is deployed in my organization in a hybrid cloud setup, as hybrid cloud and on-premises are the same thing. We are a hybrid organization leveraging both cloud-powered assets as well as on-premise firewalls and sensors, and we have a truly hybrid multi-cloud architecture.

The cloud providers I use as part of my hybrid multi-cloud setup include AWS and GCP.

We did not purchase Cisco Hybrid Mesh Firewall through the AWS Marketplace; we deployed it ourselves.

The specific challenges I face with hybrid and distributed enterprise networks that Cisco addresses include having the ability to deploy the solution flexibly, which addresses our needs in this area. Being able to deploy it in any public cloud or in our own private cloud in our data center and on premises gives us the flexibility not only to have better high availability and resiliency of the platform, but it also gives us the flexibility, when the time comes, to move those workloads between cloud providers should we decide to move off of AWS or Azure in the future, which gives us a lot of comfort in knowing that we are not locked into one single cloud provider.

I believe Cisco optimizes the experience in a hybrid or distributed enterprise setup because the majority of Cisco's cloud and SaaS-based products are distributed in multi-cloud, and this results in a similar look and feel when we consume the solution that matches the original developer's intent.

The applications I run include a composite of many different types of solutions, some of which are traditional enterprise applications that are monolithic in nature, hosted out of our own data center, such as SAP and ERP applications, while we also have highly distributed microservices applications that are distributed across cloud and on-premise.

I enforce security within my environment by operating on the premise of least privilege and following Zero Trust architecture.

Currently, business drivers do not dictate that we need to expand into additional security enforcements today, but in the future, we would probably consider Cisco solutions to do that.

I would encourage others looking into using Cisco Hybrid Mesh Firewall to evaluate the solution and understand each of the elements within it, as there are many different discrete enforcement points and policy points that live within Cisco Hybrid Mesh Firewall solution, and I would encourage them to become familiar with all of those different touch points so that they can most effectively implement their security strategy. I rate this solution a ten out of ten.

The main use case involves traffic filtering, detection, NAT, and generic firewall policy implementation.

With Cisco Hybrid Mesh Firewall, I appreciate that the central control is very effective, and the throughput and volume of traffic we can push through them is impressive.

We enforce security within our environment with a dedicated security team that conducts proactive monitoring, establishes baseline security standards, and evaluates network activity through alerts and other monitoring mechanisms.

For improving Cisco Hybrid Mesh Firewall, licensing is always a pain point and represents the worst aspect of the solution. While I am not certain about additional features, it would be beneficial to have better interoperability and VXLAN integrations, along with more advanced networking features. More capabilities would be better, and although they are already implementing some features, additional ones would be valuable.

I have been using Cisco Hybrid Mesh Firewall for longer than my tenure with the organization.

The stability and reliability of Cisco Hybrid Mesh Firewall used to be poor but has improved significantly. The initial teething problems were severe, though overall the current state is acceptable and not particularly problematic.

Cisco Hybrid Mesh Firewall scales well with the growing needs of our organization, especially with the newer models that are impressive. I am satisfied with the scalability I am observing.

My experience with customer service and technical support has been positive overall. However, the new technical support model is somewhat concerning due to the fragmentation of support becoming more license-based, which I find unsatisfactory. I will monitor how this develops.

When choosing Cisco Firewall, multiple solutions were likely considered. We utilize other vendors as well, as we are not a single vendor shop, maintaining a diverse mix of different vendors.

Our pricing structure is unusual because we work through CDW, so we do not receive standard pricing available to other customers. This results in special pricing where pricing is rarely a concern for us.

Currently, visibility, time, and resources are preventing me from expanding into additional security enforcements. We would prefer to implement more security measures, but we have significant work to complete before reaching that goal.

We run multiple types of applications, both monolithic and distributed, with hundreds of applications total.

Cisco Hybrid Mesh Firewall optimizes the experience in a hybrid or distributed enterprise setup. It has improved considerably with centralized management enhancements, making the experience much better now.

The challenges I face with hybrid or distributed enterprise networks include typical obstacles such as legacy applications, visibility constraints, and the difficulty of determining how applications actually function versus how they are described to work.

I rate this solution an 8 out of 10.

On-premises

Other

My main use case for Cisco Hybrid Mesh Firewall is to leverage the capability of observing and controlling East-West traffic.

In the current environment, basically everything is Northbound to Southbound because I want all the traffic to be routed through firewalls, full firewalls. So with the introduction of Cisco Hybrid Mesh Firewall, I'm reducing the East-West traffic by getting it routed via Cisco Hybrid Mesh Firewall because it does scan and inspect the traffic and hence reduces the North-South traffic.

The primary use case is basically the reduction of traffic from North-South up to 60%, and then leveraging the capability of Cisco Hybrid Mesh Firewall for macro-segmentation.

I am using Cisco Hybrid Mesh Firewall together with Cisco Splunk. Currently, Cisco Splunk is used for observability, and Cisco Hybrid Mesh Firewall is integrated to send logs to Splunk.

The best feature that Cisco Hybrid Mesh Firewall offers is the capability to provide macro-segmentation.

Macro-segmentation is helping to reduce North-South traffic in my environment.

I have not deployed the policy enforcement yet; it is just the observability and control. Cisco Hybrid Mesh Firewall has positively impacted my organization so far as I aim to improve the East-West traffic and reduce the traffic traversing North-South; however, it is too early to comment. Even though it is still early, I have noticed easier management as an initial outcome.

I think Cisco Hybrid Mesh Firewall can be improved if it can be linked to a unified dashboard within the Cisco stack, where it can monitor the traffic, not only at the switching level but also be able to integrate with Tetration to monitor the agent traffic and provide recommendations for further optimization in terms of East-West and North-South.

Integration with other tools would be beneficial if Cisco Hybrid Mesh Firewall can provide visibility to the traffic of third-party endpoint agents as well, such as Illumio and CrowdStrike EDR, providing that data back into Tetration for some intelligence would be good.

As for improvements needed for Cisco Hybrid Mesh Firewall that I have not already mentioned, documentation and support is pretty good.

I have been using Cisco Hybrid Mesh Firewall for the past three months.

Cisco Hybrid Mesh Firewall is stable.

Based on my current understanding, its scalability is pretty good and meets the requirements that I have.

So far, customer support has been very good.

I did not previously use a different solution before Cisco Hybrid Mesh Firewall; it is the first attempt to improve East-West traffic.

As for return on investment, I have not seen any yet as it is too early to comment.

My experience with pricing, setup cost, and licensing is that it is pretty good.

Before choosing Cisco Hybrid Mesh Firewall, I did not evaluate other options.

On a scale of 1 to 10, I would rate Cisco Hybrid Mesh Firewall a nine.

What stands out for me is basically the capability of macro-segmentation and improving East-West traffic; it is still not a ten as it is in early stages, and I need to observe for the next six months to see if I am getting what I was looking for.

Cisco Hybrid Mesh Firewall is deployed in my organization as an on-premises private cloud. Private cloud, in this case, means on-premises cloud basically, and I use Dell and Cisco.

Private Cloud

Other