Cisco Secure IPS (NGIPS) Reviews

We have a Cisco ASA firewall, which is like a standard firewall. We upgraded to Firepower Threat Defense, and it is like a next-generation capability, like NGIPS and NGAV, and has that kind of functionality. It also improves network security and threat defence.

It has helped to improve our cybersecurity and our network security posture.

The FTD has a GUI interface, which is very easy to work around with all the configurations. It is a client-based software based on Java. Now we have the GUI web interface, and it's very interactive and easy to navigate.

Cisco NGIPS runs the backend as a Snort engine, so it is like they customize it with Cisco. So they need to have an engine for threat defence.

We have been using this solution for two years and are using version 9.6. It is deployed on-premises.

It is a stable solution.

It is scalable. NGIPS is based on our user base, so we have around 2000 users. We require two network and security administrators for deployment and maintenance. We do not plan to increase usage because we have already upgraded.

I rate the technical support a ten out of ten.

Positive

We updated from Cisco ASA to NGIPS FTD.

The initial setup is a bit complex because it requires a lot of configuration, firewall and zoning. The deployment was done in-house. We just purchased a box and installed it on our own.

We have seen a return on investment in improving security and defending the threats in our network.

I do not have details about the licensing costs. It has a user-based license and a different model license because it is modular software.

I rate this solution an eight out of ten. From a recommendation perspective, before deploying the NGIPS solution, you need to work with your internal environment. It can minimize the load on the NGIPS, so you should do your IPS signature before moving to production.

It should have a network and content processor and a security process for additional features. Other OEMs have these capabilities to enhance the throughput and performance.

We predominantly use this solution to place the perimeter on the firewall, which helps us filter out inbound and outbound traffic.

Cisco is tightly engaged with threat defence called Talos, which has more threat intelligence. In addition, they are dedicated to working on updating their IPS signatures.

We have been using this solution for almost five years. It is deployed both on-premises and cloud, and we are using the latest version, Cisco 12.X.

It is a stable solution.

It is a scalable solution. We have over 100 clients.

The technical support is sound and clear.

The initial setup is pretty straightforward, and it's like a plug-and-play. The graphical user interface is understandable, and their documentations are clear. In addition, they have an SOP document that can be used as a guide.

There is an annual licensing cost. It is not a cheap solution, but it's cost-effective. Aside from costs, Cisco NGIPS provides great security. Cisco is providing more discounts to its end customers to survive in the security market.

I rate this solution a ten out of ten. I would recommend this solution. When you compare Cisco NGIPS to other solutions, it is salable and technically sound. Other solutions have very limited services and threat intelligence.

Regarding additional features, they should speed up their technology to the market because, compared with other security vendors, Cisco is a little behind on the Gartner and technical front. In addition, the integration can be more secure.

My company is a system integrator and we deploy Cisco NGIPS in various contexts, typically in the banking environment and in other high-level security scenarios, depending on our customer requirements. 

We normally work with the most current models of Cisco products such as the Catalyst 9000 Series switches and 1000 Series routers.

The top features of Cisco NGIPS, which have been working very well, include stateful inspection and the access list-based security configuration. But from my perspective, the best part of Cisco NGIPS is the licensing process, which is very easy and straightforward. It's essentially copy-paste licensing.

The other aspect that I like is the technical support, who are highly capable. They were very good to us during the times that we used them and they tend to reply immediately to queries, even though you might not get the right engineer to help you right away. Tickets are usually assigned to junior staff at first but they do have escalation procedures, so if the support member can't solve the issue then they will immediately escalate it to higher management.

The feedback from some of our customers is that they weren't interested in Cisco because it was too complicated to deploy, especially in cloud-related areas.

Something else that our customers have commented on is that, in the current release of Cisco NGIPS that we are using, there have been some issues when they have tried to synchronize Cisco's hardware products with Cisco's management software.

If I recall correctly, the problems came from Cisco's Firepower Management software after we had proposed to our customers to use virtual machines as a cost-saving measure. After setting up the VMs, the software would start crashing, and it greatly disturbed the customers. It is possible that this was related to power issues because most of the time it would crash on power-on or power-off, but at other times it would crash due to incoming firewall traffic. I hope that in future releases, these problems will be solved.

In general, the ASA level features are working very well in Cisco products, but when it comes to the Next-Generation product, it has been somewhat unstable. To remedy this situation, Cisco needs to make the software more stable, easier to manage, and easier to update (possibly with an auto-updating mechanism). The small intricacies of the software product make the system more complicated than it needs to be for our engineers and our customers. 

I have used Cisco NGIPS for four years.

Cisco's stability issues have caused several of our customers to complain directly to the vendor, and if these issues persist into the future I will not be able to continue recommending Cisco NGIPS to our customers. In terms of cost, security, compatibility, and flexibility, there are a lot of products doing better than Cisco, so why would customers keep buying Cisco if they can get better products with more stability? Cisco has to think of their global market first and foremost and fix their issues based on their findings. In our country, Cisco has a good name because they got here first, but a lot of customers have shifted, in terms of security, to other products such as Fortinet and Palo Alto, which have their own Next-Generation firewalls.

Cisco NGIPS is not that easy to scale, in my opinion. However, it can be upgraded, depending on the design. When you propose a design to customers, you have to check their expansion capability in terms of various factors such as how much time and how much employees would have to be involved.

When it comes to the VM products, some of them might not be scalable unless you upgrade your product to the latest version, in which case you have to upgrade the versions one by one. For example, your current version might 5.1 and you are aiming to upgrade to version 10.1. In this case, you would have to upgrade each intermediate version until you reach 10.1.

Cisco's tech support is very good and it was a pleasant experience whenever we used them. They tend to reply immediately, although when it comes to the technical capability of the support you might not get an appropriately skilled engineer to help you right away. However, they do have escalation procedures such that the junior staff will escalate any unsolved issues to higher management.

The ease of installation depends on the engineer. If they aren't trained in Cisco NGIPS or they aren't skilled enough, it's not easy to implement. You have to implement with a highly skilled engineer because it's not simple to deploy Cisco products.

We had one project where we implemented Cisco NGIPS along with a few other products and it took perhaps a week to fully deploy. 

The annual licensing tends to be expensive, but in terms of implementing the licenses, it's a very uncomplicated process and as easy as copy-paste in its straightforwardness.

Regarding the affordability of the licensing, if you buy licenses on a yearly or quarterly basis, you might not find much return on investment, but at the same time you will have a better product with regular upgrades and less network interruptions, so this has to be weighed against the costs.

I have decided not to update our use of Cisco NGIPS unless they can solve their issues related to software stability, and thus I cannot fully recommend Cisco NGIPS to other customers at this time.

I would rate Cisco NGIPS a seven out of ten.

We use it at the end and the center as the core and apply a lot of policies to the firewall.

Using Cisco Firepower has helped us.

We like the Cisco product, the concept, and the tech intelligence. We are much more comfortable with Cisco products. It's a reputable organization, and we trust the products.

The next Cisco NGIPS release should include more features for production ideas and more intelligence for IDS and IPS features.

We have been using this solution for two years. 

We initially had some difficulty loading pages due to certain rules regarding performance and stability. On some websites, we had to click more than once. These issues were quite easy to fix.

Regarding scalability, the solution is not that good.

They're nice people. We don't have any issues with them. They are quick to respond, but sometimes it takes time to solve the issues.

Positive

We previously used Check Point and Cyberoam. We switched because the license expired.

We initially had some difficulties, but now we have no problems.

A Cisco vendor in Nepal helped us configure the product properly. We didn't have a strategy. The vendors supported us from the very beginning. After working with them, we had no problem using the product.

It took almost a month and a half to install the system.

I would rate our ROI as eight out of 10, with 10 being the highest ROI.

Cisco NGIPS licensing is yearly. 

I would rate the pricing four out of 10, one being very expensive and 10 very cheap. 

I would give Cisco NGIPS an overall rating of eight out of 10, 10 being the best.

We have a department of almost 50 people in our company using Cisco NGIPS. 

We have 10 people to maintain the product.

We want to cover all the systems and networks of our organization. 

I use Cisco NGIPS as a firewall.

The most valuable features of Cisco NGIPS are protection and reporting.

We have a separate management controller for Cisco NGIPS. If they have not done it already they should integrate Cisco NGIPS with the Cloud Portal.

The solution has some bugs that sometimes take time to resolve.

I have been using Cisco NGIPS for approximately two years.

The stability of Cisco NGIPS has been good since we have been using it.

The scalability of Cisco NGIPS is good.

Cisco has better technical support than other competitors, such as Check Point IPS or Palo Alto. Cisco has very good support, they are always ready to help their customer if there are any production issues.

Cisco NGIPS should add a technical person to the chat support. They correctly do not have a specialist. The knowledge base of the chat agent should be better.

I have used Check Point IPS solutions.

The implementation of Cisco NGIPS is straightforward.

You have to do your own implementation of the Cisco NGIPS hardware, but for the configuration, Cisco support can be involved from day one. That's what I have experienced. There was some exception but I have involved the Cisco support team from day one when I started configuring my firewall.

We have seen a return on investment by using Cisco NGIPS.

There is a license required to use Cisco NGIPS and it can be a one or three-year license.

I would advise others to use the support from Cisco, they are helpful.

I rate Cisco NGIPS an eight out of ten.

This product automatically blocks any form of threat in a network. Once a threat is detected, it will notify the IT team. It will show the full threat, the target destination, and perhaps a loophole that the intruder used.

What it reports depends on how you have configured it.

It's able to map the solutions that you have, detailing how they are connected. It gives you visibility in terms of what's happening without your network.

This is the leading Cisco solution across Sub-Saharan Africa.

The most valuable feature is that it is able to detect any form of infiltration. It does this in an automated fashion so that you don't have to do anything to it. Once it is properly configured, it will act on its own.

The visibility that it gives you is very good. You're able to know what has happened within your network.

The way it pushes policy rules is very good. It makes sure that your information is reliable, and that you have the right visibility and the right intelligence.

I would like to see a more user-friendly interface. This is true for Cisco in general, with many of the products that they have.

We have been selling Cisco NGIPS for approximately four years.

This is a very stable product. In Sub-Saharan Africa, it is used by every six or seven banks out of ten.

This solution is very easy to scale, depending on your organization's roadmap. I have had customers that are using it and scaling very fast, especially in the financial sector.

Being a clustered solution, you can have 500, 1,000, or 10,000 users. In fact, one of my customers has 20,000 users of NGIPS. I have another organization that has 1,200 users. The size of the solution is set based on the number of users.

The technical support from Cisco is good, and it is not expensive. Over the past couple of years, they have really improved when it comes to service delivery.

I have worked with a variety of security solutions. I have worked with products from Trend Micro, Cisco, and others.

This product is straightforward to install. A CCMP can complete the deployment in one day.

One skilled person is suitable for deployment.

This is a very affordable product.

This is a product that I can recommend anytime. I have sold millions of dollars of it, every year. 

I would rate this solution an eight out of ten.

The Cisco NGIPS and IGS are used as network firewalls for IPS and IGS protection. I have both the Cisco Firepower and Cisco Meraki solutions in different customers' locations. They have the capability of the NGIPS built into it. We have different customers that they are using it. For example, on Edge, data centers, and campus networks.

Among all the different solutions I have worked with, such as Palo Alto many other firewalls. Cisco has the support, documentation, and design. The documentation is widely available and it can help you a lot with implementation. It makes the implementation much easier.

What I don't like about Cisco recently is they keep changing the names, which makes it hard for customers and sometimes even us as engineers to know what is the solution they are speaking about. For example, with AMP, now they call it Secure Endpoint and I don't know if in the next couple of years they're going to change it to something else. They should keep the names the same.

I have been using Cisco NGIPS for approximately 10 years.

Cisco NGIPS is stable, however, it is nothing special.

The scalability of Cisco NGIPS I am not too familiar with. The solution can do clustering and other operations. With the Orchestrator, I haven't worked with it yet but I hope that will help to make standard policies all run better. The most important part about scalability is how do you want to apply the same policy all around and across the different locations that you have. This is something that is not easy with any firewall unless you have a Secure Orchestrator. I don't see any issues with the scalability at this time.

The support from Cisco NGIPS is very good.

I have used many other solutions, such as Palo Alto.

I would rate the price of Cisco NGIPS a three out of five.

They are very expensive in some places and not reasonable at times for many customers. I have had customers choose another solution because of the high price.

When speaking about the features of Cisco NGIPS, what makes the feature good is dependent on what the customer likes and the skillset that they have. I cannot say what is the best feature because it depends on the use case.

There are times I see customers spend a lot of money on something which they really don't use. Whether this solution is good or not depends on what exactly the customer wants to implement and protect. They should pick the right solution with the skillset that they have.

I rate Cisco NGIPS nine out of ten.

We use Cisco as a firewall. It is an intrusion detection and prevention solution.

The malware detection, threat defense, sandboxing, VPN, and mail security have all been valuable features of Cisco NGIPS.

The performance of CISCO Firepower could be improved. 

We moved from Sophos to Cisco before the pandemic. During the pandemic, there was an increase in VPN connections. We had a layer of security within CISCO Umbrella, and now with Cloud. The firewall protects the internal system, but we needed to add another layer of security for the endpoints that are outside the local area network. We needed another product to cover this lack of security.

We prefer to have integration with the points that are outside our local area networks using the same brand using one single console. Because the firewall only protects the people inside the network, we required another solution.

I would like to see Cisco NGIPS include home office support in one single product.

Our organization has been using Cisco NGIPS for two years.

Cisco NGIPS is stable most of the time.

This solution is not easily scaled. I would like Cisco NGIPS to be easier to scale. With the increase in work from home, we needed to add another layer of security to ensure we can meet the demand of stability, high availability, and connection.

Our company has two layers of support with Cisco. One is the local support, which is very good. The second support is directly from Cisco. They are quick to respond and have quick solutions to the problems.

We moved from Sophos to Cisco Firewall because we were looking for better integration between all the appliances and data center. All of our core switches, our wireless system, and other tools are the Cisco brand, meaning that all our monitoring options are integrated under Cisco.

We hired a professional service to install this solution.

With the increase in work from home, companies may need more than just a firewall. I recommend anyone considering Cisco NGIPS evaluate all the demands from their in-home offices and determine if their solution needs to be bigger, or wider, for security and performance.

I would rate this product a 9 out of 10, particularly if you work in a LAN environment.