Cisco Secure IPS (NGIPS) Reviews

We use this product for IPS detection and reporting purposes.

We have found the IPS detection to be a very valuable feature of this solution. It is easy to use to stop policy violations.

We would like an option to search through the logs to be added to this solution.

We have been working with this solution for three years.

The current version of this solution is proving to be very stable.

We believe this to be a scalable solution.

The technical support for this product is good. They respond to tickets quickly when they are raised, and they generally respond within 24 hours.

The initial setup and configuration of this solution was straightforward.

Licenses for this product are available for either one, or three year terms.

I would rate this solution a nine out of ten.

Customers who are trying to replace their internal firewall with good visibility at the application-level content level use Cisco NGIPS. It has the ability to do packet inspection and the customer can check their users while they're searching the web and going to different websites. Cisco NGIPS has the ability to connect to your firewall with advanced intrusion prevention.  

The most valuable feature of Cisco NGIPS is the centralized user interface. You have the ability to quickly push out configurations across your environment using the Cisco UI. It's a powerful capability of that solution.

Cisco NGIPS could improve its ability to do SSL inspections. Sometimes the ability to do SSL inspection is not scalable and you might not be able to get the installment required if you don't size the right hardware.

I have been using Cisco NGIPS for approximately five years.

Cisco NGIPS is stable, but I there is more that can be done.

Cisco is particularly strong when it comes to firewalls and the IPS, IBS, or next-generation firewalls. When I was working as a system architect we went from Cisco to Palo Alto or Fortinet. I don't know if they've made some recent improvements or maybe it's in the roadmap, but I would say there's still room for improvement with Cisco security appliances.

Cisco NGIPS is scalable. However, the cost to the customer is always high, because it's still a hardware base. After the resource cycle of three or five years, you have to replace them. From that perspective, they are not the greatest solution out there.

Our networking team of approximately 50 people that are mostly using this solution in my organization.

The support from Cisco NGIPS is good.

The initial setup of Cisco NGIPS is of a medium difficulty level.

My advice to others is they should look into other vendors and cloud-based solutions. Solutions that don't require you to refresh and get hardware, because nowadays there are new problems for hardware. It's getting more difficult, try to get a more software-based, cloud-centric model solution.

I rate Cisco NGIPS a six out of ten.

I like Firepower's automation, and the security intelligence is a powerful feature. 

If Firepower had an embedded vulnerability scanner, it could better detect the vulnerabilities on different platforms in the network. It needs to integrate with other solutions to detect these vulnerabilities. It cannot detect system vulnerabilities on its own. A new trend is encrypted security solutions. Firepower can integrate with Cisco products like Stealthwatch, and Stealthwatch can primarily integrate with other Cisco products. 

Firepower APIs that allow it to integrate with other vendors need more flexibility. For example, if I want to integrate with Forcepoint, I can't because Forcepoint cannot integrate with other sandbox vendors. This integration has become essential for the latest security solutions because most customers are now thinking about integrated security solutions. However, not every product is like that. We have to think about the integrated security solutions, so Firepower needs to improve in this area, the integrations with other vendors.

We are a partner with Cisco and we have sold these products to multiple customers. Most of them have given us positive feedback about Cisco Firepower.

We had multiple bugs and issues on the old versions, but the new versions Cisco has recently released are much more stable. However, our customers are still facing many bugs on the system. It has matured noticeably, but we are still facing multiple stability issues on Firepower. There are more than 80 or 90 bugs for each release node. It's a considerable number of bugs. It's much better than before, but there are still too many bugs in the new versions. The R&D team needs to put more work into new releases to minimize the number of bugs.

Cisco has some limitations in clustering if we want to upgrade the hardware currently deployed at customer sites. If Cisco can improve or optimize this clustering limitation, this will add more scalability to Firepower.

Cisco's most powerful support team is based in the United States. Most cases this team handles are solved quickly, but I've had a different experience with the Indian team. It takes too much time to solve the issues. We have different experiences with tech teams in other time zones, and I prefer to communicate cases with a US-based team. It depends on when we open the ticket. Sometimes it will route to the Indian tech team. If we open the ticket between 9 a.m. and 9 p.m. Cairo time, I think it will go to the US team.

Signature tuning is automated in Cisco Firepower. This is the most powerful feature, which most vendors don't have. It makes deploying the solution straightforward for the customer and us implementers as well. So the automation and the fine-tuning are effortless in Firepower.

Cisco Firepower is a good investment because one product can cover such a large part of the NIST security framework.

The weakness of Cisco Firepower is the cost. Some of the customers see it as very expensive. 

I would rate Cisco Firepower NGIPS nine out of 10. For any customers thinking about implementing this solution, I would suggest being aware of the security areas they want to cover. They need to consider the NIST cybersecurity framework and focus on each area of this framework to make sure that there are no security gaps in their environment. Firepower covers three main areas of this framework: detection, response, and identification. 

Our primary use case is securing the network. It has a deep learning intelligence ability to filter packages and traffic coming to networks and to different workstations in networks. 

This solution is deployed on-premises. 

The most valuable feature is its IPS ability. You are able to balance security and connectivity. 

The CLI, the console line interface, of the FTD could be improved. It's very complex, so without a GUI, it doesn't work well. I would like it to be more simple. 

As far as additional features or next releases, I think the price could be cheaper. 

We have been using this solution for more than eight years. 

This product is stable. 

This product is very scalable. 

Cisco's technical support is very, very fast. 

Before implementing Cisco, we used Fortigate and Check Point. 

The installation is straightforward. You have to install the device, but if you want to actually manage it, you need a GUI for it. For deployment, you will need two engineers, maximum. 

We implemented this solution through an in-house team and deployed it ourselves. 

We pay for the IPS license to use this solution. 

I rate this product a nine out of ten, and would recommend this product to others who are considering using it. 

We use this solution for traffic inspection and searching.

It's coming to its end of life. We will be considering another solution because it is no longer scalable.

While it is stable, I would like it to be even more stable.

I have been using this solution for 10 years.

Cisco NGIPS is a stable solution. We have not had any issues since we have been using it.

It is no longer scalable because it has gone end of life.

We have approximately six locations. We have close to 2,000 users.

We are satisfied with the technical support.

I was not involved in the installation.

We have a team of four of five, including four engineers, and one supervisor to maintain this solution.

It could be less expensive.

We do pay for licensing yearly, but since it is at its end of life, there are no license implications until we purchase a new solution.

I would recommend this solution to others.

I would rate Cisco NGIPS an eight out of ten.

Our customers use it for VBN and network as well.

I've found the performance and stability to be the most valuable features of Cisco NGIPS. It is scalable as well.

The price could be improved.

I've been providing this solution for about five years.

It is a stable solution.

It is scalable.

My experience with technical support has been okay.

Installation is straightforward and took half a day.

The pricing could be improved. Our customers have a yearly license.

It is a good product, and I would recommend it. I would rate it at eight on a scale from one to ten.

We use this product to prevent unwanted traffic and to define policies.

The tracking intelligence feature is very good. This solution provides us with the opportunity to detect threats in real-time. 

Some Next-Generation Firewall solutions come with Intrusion Prevention. It would be nice if Cisco NGIPS included that. 

I have been using this solution for almost one year. 

Cisco's support is unmatched. There are very few companies that can match their support. 

Overall, on a scale from one to ten, I would give this solution a rating of nine. 

We replaced an ASA with Firepower managed by FMC with NGIPS, and we're also using it for advanced security, like anti-malware protection and IPS. 

We used to have different solutions integrated together between Cisco and non-Cisco, or Cisco and a third party. We now have an all-in-one which is kind of nice. 

I believe the IPS is a valuable function, because they update the signatures all the time and it's very granular. This is a good, stable solution and it's always up to date with all the security features.

I think the GUI user interface could be improved and the login is not very user friendly. They could maybe improve on that. 

The stability is good, we haven't had any problems. 

I think scalability is good although we only have a couple of people in our company that use it - the IT Manager and myself.  

The technical support is very good. I've never had issues with Cisco support, they're the best. 

The initial setup is straightforward, it took a few hours. As the consultant, I deployed the solution. 

I'm not sure of the licensing costs, I know we have a three-year subscription. 

Compared with other solutions, this is very good. 

I rate this product a nine out of 10.