We are a solution provider and the Cisco ASA Firewall is one of the security products that we implement for our customers. My clients use it for security, and also to establish VPN connections.
Network Consulting Engineer at a comms service provider with 201-500 employees
Easy to configure, good VPN capabilities, and the antimalware features provide extra security
Pros and Cons
- "The most important feature is the VPN connection."
- "I would like to see the inclusion of a protocol that can be used to protect databases."
What is our primary use case?
How has it helped my organization?
My client is in the financial sector and all of the connections are doing using the VPN. This type of access makes the connections more secure.
What is most valuable?
The most important feature is the VPN connection.
My clients also use the antimalware features and the scan is very good. It also supports packet inspection and IPS.
Cisco ASA is easy to configure.
The integration with the security features is something that I like.
What needs improvement?
The SecureX ASA administration platform should be improved.
The orchestration of modules should be improved.
I would like to see the inclusion of a protocol that can be used to protect databases. This would be a good feature to have added.
Buyer's Guide
Cisco Secure Firewall
June 2025

Learn what your peers think about Cisco Secure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.
For how long have I used the solution?
We have been working with the Cisco ASA Firewall for approximately three years.
What do I think about the stability of the solution?
I have not had problems with stability, although I have had some small issues with bugs. In general, I can operate without a problem.
What do I think about the scalability of the solution?
It is very easy to scale this product. With SMC, you can control all levels of ASA in a central console. You can simply add a new ASA firewall to protect your network, and you will be able to control it.
We have approximately 300 users.
My clients for this solution are medium-sized organizations.
How are customer service and support?
I have not been in contact with technical support but I use the implementation guide. I have also used the community support and I think that it's okay. The information that I received about the configuration was good.
Which solution did I use previously and why did I switch?
Prior to Cisco ASA, my client was using Fortinet FortiGate. They switched because there were complaints about the connection being slow.
How was the initial setup?
The complexity of the setup depends on the needs and requirements of the client.
When a client does not know exactly what is needed, the complexity increases because the configuration is not clear. You really have to have a good understanding of what the client needs before configuring it.
If the model does not have SMC then it is complex to configure.
The length of time for deployment also depends on the requirements, but it will usually take between three days and one week.
What's my experience with pricing, setup cost, and licensing?
This is an expensive product, although when you buy this solution, you can do many things so it provides good value for the investment.
Which other solutions did I evaluate?
My clients did evaluate other options but ultimately chose this product. Other than the VPN connection, I don't know the reasons for this decision.
What other advice do I have?
I can recommend this product because it is one of the most stable firewalls on the market. The suitability, however, depends on the environment and what is needed.
I would rate this solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner

Administrator at a university with 1,001-5,000 employees
Flexible solution and can be easily integrated with your network hardware
Pros and Cons
- "I have found the stability of this solution really good. This is why I use it."
- "Comparing Cisco solution to others, it is expensive, it would be better for it to be cheaper."
What is our primary use case?
I am doing research on the product and testing it for security.
What is most valuable?
It is a flexible solution and can be easily integrated with your network hardware. It is a very useful product. This product is very popular in the industry and the network security environment is good.
What needs improvement?
It would be a benefit to improve the integration with other similar products from other vendors on the market, for example, Huawei or Fortinet products. Comparing Cisco solution to others, it is expensive, it would be better for it to be cheaper.
For how long have I used the solution?
I have been using the solution for three to four years.
What do I think about the stability of the solution?
I have found the stability of this solution really good, this is why I use it.
What do I think about the scalability of the solution?
The product is scalable.
How are customer service and technical support?
The customer service is really helpful, they do their part in keeping our organization's network from outside intrusion.
Which solution did I use previously and why did I switch?
I have used other solutions in the past, such as Cisco Firepower. I find Cisco products to be superior.
How was the initial setup?
The solution is normally easy to install but if the user has more requirements, as in a more complicated setup, it could take more time.
What about the implementation team?
I did the deployment myself.
What's my experience with pricing, setup cost, and licensing?
The product is very expensive.
What other advice do I have?
I would recommend this product. I suggest this solution to my colleagues because it is a great product and is really stable. When looking at other products in use in other companies this product is superior.
I rate Cisco ASA Firewall ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cisco Secure Firewall
June 2025

Learn what your peers think about Cisco Secure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.
Administrator at a university with 1,001-5,000 employees
A firewall solution with a straightforward setup and a useful incidence response feature
Pros and Cons
- "I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable."
- "Cisco Firepower NGFW Firewall can be more secure."
What is our primary use case?
Cisco Firepower NGFW Firewall has a lot of environment to use for your network to see what kind of critical threats are coming or going. I use it to find out what this threat is and then formulate a strategy for it. I use it a lot on my simple network to see how it works, inspect the network traffic, and so on.
What is most valuable?
Cisco Firepower NGFW Firewall is a really helpful product for network security. I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is useful.
What needs improvement?
Cisco Firepower NGFW Firewall can be more secure. But no product is 100% secure, so it's a case of always wanting more security. The product is also really expensive. It would help if they provided free academic access to the enterprise edition for students for a whole month, two months, three months, or a year.
For how long have I used the solution?
I have been using Cisco Firepower NGFW Firewall for about two years.
Which solution did I use previously and why did I switch?
I used Cisco ASA Firewall, but in our specific environment and not for the whole network.
How was the initial setup?
It's easy to install Cisco Firepower NGFW Firewall. You can install it on the platform with all the images in one set form. It took me about 20 to 30 minutes to install.
What about the implementation team?
I implemented Cisco Firepower NGFW Firewall on my own.
What's my experience with pricing, setup cost, and licensing?
For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive. But it should be affordable for enterprises and educational institutions.
What other advice do I have?
I would recommend Cisco Firepower NGFW Firewall to potential customers.
On a scale from one to ten, I would give Cisco Firepower NGFW Firewall a ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Gerente de Unidad at Redescomm, C.A.
Comprehensive port blocking capability, good support, and stable
Pros and Cons
- "The most valuable feature is the ability to block almost all of the ports."
- "The graphical interface should be improved to make the configuration easier, to do things with a single click."
What is our primary use case?
We are a Cisco implementor in Venezuela.
Our primary use is to deal with incoming access. We open ports for web servers or special applications that our clients have inside their network. We also use it to provide site-to-site VPN access.
What is most valuable?
The most valuable feature is the ability to block almost all of the ports.
All of the commands work the same way, whether in the graphical interface or when using the command line.
Cisco products have a lot of features.
What needs improvement?
The graphical interface should be improved to make the configuration easier, to do things with a single click.
There should be better integration with open-source products because some of our clients use them. It would be helpful if they integrated well.
For how long have I used the solution?
I have been using the Cisco ASA Firewall for almost 10 years.
What do I think about the stability of the solution?
This is a very stable product.
What do I think about the scalability of the solution?
The scalability is good and it can be used for organizations of all sizes.
How are customer service and technical support?
Technical support is good and we haven't had any problems with documentation that is provided.
Which solution did I use previously and why did I switch?
I also have experience with pfSense.
How was the initial setup?
The initial setup is easy.
Which other solutions did I evaluate?
We have evaluated various open-source solutions for our clients.
The main difference with Cisco is that it is a big company, and their products are very easy to use. They have the best routers, switches, and firewalls.
What other advice do I have?
Cisco ASA is a product that I can recommend for its stability.
I would rate this solution a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Implementer
Information Security Manager at a financial services firm with 501-1,000 employees
Flexible, high quality, and provides good security
Pros and Cons
- "It's a flexible solution and is well-known in the community."
- "In the next release, I would like to see the VPN and UTM features included."
What is our primary use case?
We are using this product to filter network traffic.
What is most valuable?
It's a flexible solution and is well-known in the community. Most professionals are familiar with Cisco products and we prefer to work with products that we know. That is why we chose to work with Cisco firewalls, and also for the quality.
What needs improvement?
In the next year, we are planning to migrate to the Cisco Firepower. Our planned product would be Cisco Firepower 20 or the 40 series.
In the next release, I would like to see the VPN and UTM features included.
For how long have I used the solution?
I have been using the Cisco ASA Firewall for the past ten years.
We have a few different versions that we are using. Some are 5505, 5510, and 5515.
What do I think about the stability of the solution?
It's stable. We have not had any issues with stability.
What do I think about the scalability of the solution?
It's a scalable solution. We have five or six users in our organization.
How are customer service and technical support?
We have not contacted technical support because we have not had any issues.
Which solution did I use previously and why did I switch?
Previously, we did not use any other solutions. Our company is almost 11 years old and have been using this solution for ten years. We have been using this solution from the beginning.
How was the initial setup?
I have not been present for most of the deployments, but from my experience, the deployment is not complex for organizations like ours because we have less equipment and infrastructure.
In Ethiopia, most of the deployments, especially in government organizations, are on-premises because of government policy.
Our policies are limited and not complex.
Overall, I would say that it's pretty straightforward. While I was not a part of the deployment and had to guess, I would say it may have taken a week to deploy.
We require a team of four or five to maintain this solution.
What other advice do I have?
In summary, this is a good product and I recommend it.
I would rate this solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Systems Administrator\Ag. IT Manager at a construction company with 201-500 employees
It secures my network and is very stable
Pros and Cons
- "It is a very stable product. I've not had any issues with it. It is a super product, and I won't need to change it anytime soon."
- "Its configuration through GUI as well as CLI can be improved and made easier."
What is our primary use case?
I am using Cisco ASA as my firewall. I use it for security purposes to block access and for VPN. It is on the perimeter, so basically, it secures my network.
What is most valuable?
It is a very stable product. I've not had any issues with it. It is a super product, and I won't need to change it anytime soon.
What needs improvement?
Its configuration through GUI as well as CLI can be improved and made easier.
For how long have I used the solution?
I have been using this solution for more than five years. I am using the Cisco ASA 5505 model.
What do I think about the stability of the solution?
It is very stable.
How are customer service and technical support?
I manage it myself. If I can't, then I get somebody else. I don't have any support from Cisco.
How was the initial setup?
The initial setup was slow. It took a day or two.
What about the implementation team?
Unfortunately, there were not too many skilled guys who could install it. I had to get a third party for installation and configuration. I had to get somebody qualified in Cisco Security, and he was the only person who could actually configure it well.
What's my experience with pricing, setup cost, and licensing?
I just bought it off the shelf, and I'm using it with my previous one, so I have not spent that much.
What other advice do I have?
I would definitely recommend this solution. You just have to learn how to configure it. It is a Cisco solution, and there is not much to be improved. I plan to keep using it and expand its usage.
I would rate Cisco ASA Firewall an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Lead Network Engineer at a tech services company with 51-200 employees
A recommended firewall solution that is straightforward, stable, and reliable
Pros and Cons
- "We are mostly using it for remote access, so the remote access feature is the most valuable, but all other features are also needed and required. It is also a very straightforward and reliable solution."
- "We don't have any serious problems. The firewall models that we have are quite legacy, and they have slower performance. We are currently investigating the possibility of migrating to next-generation firewalls."
What is our primary use case?
We mostly use it for remote access. We also use this firewall between different segments of our enterprise network.
We have legacy models of this solution. We are using models 5510 and 5520.
What is most valuable?
We are mostly using it for remote access, so the remote access feature is the most valuable, but all other features are also needed and required. It is also a very straightforward and reliable solution.
What needs improvement?
We don't have any serious problems. The firewall models that we have are quite legacy, and they have slower performance. We are currently investigating the possibility of migrating to next-generation firewalls.
For how long have I used the solution?
We have been using Cisco ASA Firewall for around one hour and a half years.
What do I think about the stability of the solution?
It is quite stable. We didn't have any issues or crashes, so we find it to be a solid solution.
How are customer service and technical support?
We don't have Cisco support because these models are excellent.
How was the initial setup?
It has moderate complexity. I didn't have any prior experience in configuring these firewalls. That's why I found its initial setup to be of moderate complexity, but now, I have got used to using and maintaining these devices.
What's my experience with pricing, setup cost, and licensing?
We're using the smart license for this firewall. The models that we have require licensing for remote access.
What other advice do I have?
I would absolutely recommend this solution. It is a very straightforward and reliable solution. I would definitely like to propose and offer this solution to other colleagues.
Cisco doesn't have any plans to develop this kind of solution more. Cisco ASA Firewall will not be developed in the future. The next-generation firewall is the next step in the development of the Cisco firewall. For this reason, we are investigating the possibility of migrating to another product.
I would rate Cisco ASA Firewall a nine out of ten. We are very happy with this solution. It is very straightforward and reliable, but it is quite a legacy solution and lacks performance.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Owner/CTO at FS NETWORKS
Good solution that is easy to implement
Pros and Cons
- "The initial setup is easy."
- "In terms of what could be improved, I would say the UTM part should be more integrated for one price, because if you buy ASA from Cisco, you need to buy another contract service from Cisco as a filter for the dictionary of attacks. In Fortinet, you buy a firewall and you have it all."
What is our primary use case?
Our primary use case is for perimeter security.
We are using the enterprise version. Cisco has many versions. Maybe we are using the old version of ASA because it needs to be the freeware. In each freeware, there are different types of things. Maybe it is the standard version because the other version cost a lot. I need to combine it with another solution like an open source standard solution of the ASA firewall from Cisco.
What is most valuable?
Firewalls are about blocking. ASA is for blocking, but it does not have the intelligence like Fortinet to detect attacks. If I could use ASA to detect attacks, maybe we could buy another service from Cisco although it's very expensive. I would choose Fortinet, but my clients like ASA support. I prefer Fortinet because Fortinet has a UTM and it's a good firewall.
What needs improvement?
In terms of what could be improved, the UTM part should be more integrated for one price, because if you buy ASA from Cisco, you need to buy another contract service from Cisco as a filter for the dictionary of attacks. In Fortinet, you buy a firewall and you have it all.
I would like to see all the features like Fortinet has. If I buy ASA, I would like to see a Fortinet-like interface.
It would be good if Cisco could improve their web interface to configure the equipment. Cisco is very reliable and very secure, but has to compete with Fortinet which is very hard.
On a scale of one to ten, I would give Cisco ASA Firewall a nine.
For how long have I used the solution?
I have been using Cisco ASA Firewall for about 15 years.
What do I think about the scalability of the solution?
We have maybe 100 - 200 end users using the solution.
How are customer service and technical support?
I would give their technical support an eight out of ten because of their response time.
Let me give an example. When I have a problem, and I contact support, maybe there is a guy from India or from another country answering me. This is very slow. The people look at the ticket and increase the time for response.
How was the initial setup?
The initial setup is easy. Firewalls are like programming. If you know programming, you know every language. Firewalls are the same. If you know the security and blocking the perimeter, it's the same for all the firewalls. The difference with the different firewalls are the functionalities. Learn the functionalities in every brand.
What other advice do I have?
My advice to anyone considering Cisco ASA Firewall is that you need a lot of money to implement the Cisco solution. But it's a good solution. If you want to go to Cisco, you need a lot of money.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide
Download our free Cisco Secure Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Popular Comparisons
Fortinet FortiGate
Netgate pfSense
Sophos XG
Cisco Umbrella
Cisco Identity Services Engine (ISE)
Palo Alto Networks NG Firewalls
Check Point NGFW
Azure Firewall
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Sophos XGS
Fortinet FortiGate-VM
SonicWall NSa
Buyer's Guide
Download our free Cisco Secure Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What Is The Biggest Difference Between Cisco ASA And Fortinet FortiGate?
- Cisco Firepower vs. FortiGate
- How do I convince a client that the most expensive firewall is not necessarily the best?
- What are the biggest differences between Cisco Firepower NGFW and Fortinet FortiGate?
- What Is The Biggest Difference Between Cisco Firepower and Palo Alto?
- Would you recommend replacing Cisco ASA Firewall with Fortinet FortiGate FG 100F due to cost reasons?
- What are the main differences between Palo Alto and Cisco firewalls ?
- A recent reviewer wrote "Cisco firewalls can be difficult at first but once learned it's fine." Is that your experience?
- Which is the best IPS - Cisco Firepower or Palo Alto?
- Which product do you recommend and why: Palo Alto Networks VM-Series vs Cisco Firepower Threat Defense Virtual (FTDv)?