Try our new research platform with insights from 80,000+ expert users

AlgoSec vs FireMon Security Manager vs ManageEngine Firewall Analyzer comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of October 2025, in the Firewall Security Management category, the mindshare of AlgoSec is 22.8%, up from 21.0% compared to the previous year. The mindshare of FireMon Security Manager is 17.8%, up from 15.9% compared to the previous year. The mindshare of ManageEngine Firewall Analyzer is 3.3%, up from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewall Security Management Market Share Distribution
ProductMarket Share (%)
AlgoSec22.8%
FireMon Security Manager17.8%
ManageEngine Firewall Analyzer3.3%
Other56.1%
Firewall Security Management
 

Featured Reviews

SAURABH JAMBHULKAR - PeerSpot reviewer
Empowers organizations to reduce change management time by 80% and improve audit efficiency
AlgoSec offers essential features such as risk management, policy optimization, change management, traffic simulation, and compliance auditing. Risk management is crucial for security, enabling deep analysis and threat prioritization, while traffic simulation allows interactive diagnostics for operational traffic management. Change management includes tools for monitoring policy changes and ensuring compliance with security standards, making these features significant for any organization. AlgoSec positively impacts my organization by reducing operation burden, enhancing time efficiency, and saving costs associated with security management. AlgoSec firewall analyzer helps with policy complexity by identifying unused or redundant rules and objects, recommending optimizations such as merging similar rules and removing unnecessary allows. Over time, firewalls can accumulate risky configurations, leading to increased overhead and troubleshooting time, but with AlgoSec, we simplify our rule sets, improve firewall performance, and facilitate faster change implementations.
Ganesh-Khutwad - PeerSpot reviewer
Rapid policy insights with robust dashboards and cross-vendor automation
FireMon Security Manager is excellent for real-time compliance management. It allows us to quickly retrieve any policy needed for testing and easily analyze it for loopholes. If a loophole exists, FireMon provides comprehensive details within the policy manager. It alerts us to firewall rule additions or changes that violate compliance policies. It supports various firewall platforms, including Checkpoint, Zscaler, Fortinet, Cisco, and AWS, and provides centralized management for all configured policies through a single console. FireMon Security Manager provides many features, like whether my firewall is compatible with required standards such as NTP and SNMP. Each compliance included in our RFPs is shown in the UI of FireMon. It gives robust and clear dashboards, making it easier to understand risks because the policies have ratings showing usage, and the number of hit attacks. It streamlines our compliance reporting processes by providing comprehensive risk and compliance assessments. It offers a range of features, including verification of firewall compatibility with protocols like NTP and SNMP, and detection of signal charges. FireMon effectively addresses all compliance requirements outlined in our RFPs. For instance, it can determine if firewalls or proxies within a stack are configured in Secure Mode or Active-Active mode. FireMon Security Manager enables us to generate reports on all these aspects, ensuring thorough compliance monitoring and documentation. FireMon Security Manager is robust and can help automate firewall policy changes across large multi-vendor enterprise environments. FireMon Security Manager helps automate firewall policy changes across various environments, including on-premises, cloud, hybrid, SASE, and SD-WAN. It also simplifies cleaning up firewall rules in our environment. The time required to accurately create, approve, and deploy firewall policy rules has been reduced. Tasks that took 30 minutes can now be completed in just five minutes using FireMon. FireMon provides immediate visibility into our policies through a robust and clear dashboard, making it easy to identify errors or misconfigurations based on the policy rating.
Hoa-Nguyen - PeerSpot reviewer
Implementation supports efficient network management but requires improvement in device handling capacity
The strong points of ManageEngine Firewall Analyzer are many, but I think my favorite feature focuses on the VPN traffic. If I want to manage my policy and optimize it, I find that ManageEngine Firewall Analyzer supports many vendors after Firewall. One aspect I want to improve in ManageEngine Firewall Analyzer is the maximum number of firewalls that can be managed. I learned from the internal support team that one prop server only supports three to five firewalls. I think one prop server can manage a maximum of five because if I have many devices here, the performance of the prop would be very high, considering CPU and RAM usage.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If you go through that compliance report, it will give you whether your firewall is in compliance or not. It will also give you a recommendation whether you need to change it. The compliance has helped us with customers, e.g., internal audit from the quality team and external auditors."
"We are in the process of implementing FireFlow in our daily operation, which will make our lives even easier. The idea is to search the Firewall Analyzer for the equipment between the source and destination, and then automatically jump off to FireFlow and open a ticket. This will then automatically implement what is needed without the need to go into the Firewall itself. This will save us a lot of time and will help us to onboard junior engineers very quickly, getting them up to speed on our network and daily operation in record time."
"I like the traffic simulation too and queries. I'm not sure other solutions provide that. You can also use it to get a network topology and network map of your environment and see what's happening."
"Thanks to Algosec, especially with the FireFlow and AppViz modules, I have managed the regulation compliance I need to adhere to through baseline compliance and checked my compliance with it."
"Implementing firewall rules within our organization has been significantly expedited thanks to AlgoSec."
"It gives control and visibility to the end users."
"The most valuable feature of AlgoSec is its ability to generate comprehensive reports. As a firewall analyzer, it's very useful for reviewing and collecting information at a single point. The tool also helps generate reports automatically, which is beneficial for us."
"The most valuable feature of AlgoSec is integration because it needs the be integrated with vendors' firewalls and other security products. AlgoSec has intelligent policy tuners."
"For the cleanup of firewall rules, it performs really well for us. We utilize it in our regular rule cleanup tasks, several times a year. FireMon is our primary tool when doing that, either by going through its out-of-the-box compliance rules or using it to search for certain things in our rules that we want to prune from our firewalls."
"FireMon Security Manager is a fast and intelligent device that delivers results in under ten seconds, even with thousands of policies."
"Vendor agnostic when it comes to integrating with other product."
"It provides us with a single pane of glass for our on-prem environment, to see configuration. We have not implemented into the cloud yet. We can search for an object group and see where it lives on any firewall in the enterprise or find security rules, no matter what firewall they're on."
"When it comes to real-time compliance management, it is very good because it is able to compare changes in the configuration as well as giving us a timestamp. It also sends email alerts to our environment so we know if someone has made a change on the network. It gives us the whole picture of that change. Whether it is a configuration change or just a small comment, it gives us the before and after snapshot."
"Firewall auditing is very important. We also use the solution for rule traffic analysis, traffic flow discovery and hidden/shadow rules within over 100 firewalls spanning five different brands."
"We also use the solution’s SASE integration capabilities to extend security policy management for cloud firewall management. It helps in creating one consistent rule across multiple platforms and it improves accuracy."
"It is the single place where we go to review all of our firewall changes. The solution makes it easier for us to track all the changes made. It is a central place where we can look at all the firewall rules, because we have three different firewall vendors. It save us time and creates efficiencies by looking at the general picture."
"Firewall Analyzer helps our organization to fulfill the compliance requirement as per ISO 27001, managing the network security effectively."
"Overall the solution does a good job."
"Firewall Analyzer is easy to work with."
"The strong points of ManageEngine Firewall Analyzer are many, but I think my favorite feature focuses on the VPN traffic."
"The most valuable feature of the solution is that it is a very user-friendly tool compared to other solutions."
"I found the reporting to be useful because not only can I go back months, but it lists the individual URLs and the time that a particular person visited."
"The most valuable features of the ManageEngine Firewall Analyzer are the monitoring of the full management of the network elements and the inventory of the infrastructure."
 

Cons

"It can be optimized. There is a lot of RPA and we have scripts in AlgoSec that need recertification. With AlgoSec Firewall Analyzer, we can see lots of objects and lots of rules that tell us we need to clean the equipment. It will give us a solution but it doesn't always work. The solution that it gives us is not always accurate from the scripts."
"have also heard a few qualms about the technical support and that it could be improved. However, this doesn't detract from the value the tool brings to our business."
"The only problem I have with AlgoSec is just its level of support, not with the product. Not with the organization or the documentation or anything else, but if I need any additional support, the only problem is the time it takes to get it."
"I would like to see more object-based reports on groups and object usage."
"In terms of additional features in the next release, more integration with SD-WAN would be valuable."
"We see a very high demand for using containers and Dockers and therefore there is a need for managing access control to these platforms. I checked AlgoSec’s roadmap and, for now, there are no plans for developing these features."
"There is no visibility for the changes made to the NAT rule policies."
"The product is severely lacking in vendor support."
"Some of the core functionality in our environment doesn't seem to work. We will get buggy code releases. They need to work on their Q&A of every code release."
"FireMon could improve its end-user practices. As an end user, I am just trying to catch up on all the alerts. There are so many, and you still have to go through them and document what was found."
"Policy Planner requirements section is good, but could use some improvement to allow flexibility to enter different types of requests (modifying an existing policy, object or service group, for example) in a structured task format that can be auto-verified."
"While I like the reporting, I think that has the biggest room for improvement. Right now, as a user of FireMon, if I create a report, I am the only one who can see it inside FireMon. If someone on my team creates a report, they are the only person who can see that report on FireMon. It doesn't matter if you're admin in FireMon or not. The way we have to do it now is that we have created a service account user and that service account user runs all the reports. This way, all the reports, which are running, are just run under a single user so we can always access them. This definitely needs to change so users can see other users' reports or we can share reports within FireMon."
"We have had some stability issues that are affecting operations. We rely heavily on this solution and if it isn't working then we have to create rules manually."
"The stability has been fairly decent, but there have been a few issues. My coworker has had some issues in the past where he has had to work with support."
"When it comes to documentation, they need to start putting together a basic command manual. With Cisco, you can look up a command and it gives you examples of three or four different ways that command can be used. It tells you how to put it into the GUI and the CLI. FireMon does need to start doing that."
"FireMon could be made more user-friendly when it comes to creating filters or conducting traffic analysis."
"ManageEngine Firewall Analyzer can improve by having better monitoring of all features from firewalls. We are using Kibana in order to monitor parts that this solution does not record. For example, having more correlation and proactive monitoring in some activity or scenario."
"One aspect I want to improve in ManageEngine Firewall Analyzer is the maximum number of firewalls that can be managed. I learned from the internal support team that one prop server only supports three to five firewalls."
"If there is a need to get some customized report or anything, ManageEngine Firewall Analyzer takes some time."
"It would be awesome if the product could monitor services for applications."
"The stability is so-so. There are always memory issues, but the solution is working great apart from that."
"The solution lacks a lot of features that other products have in the marketplace."
 

Pricing and Cost Advice

"Use the entire suite for its best benefits."
"Quality has a price."
"The solution has a high cost, but the reduction in operation pays the investment."
"The pricing could be better."
"I find the price too expensive. It looks a bit like SAP, so it does have standard functionality out of the box, but you will spend a lot of money if you want to customize it. However, the price is not as extreme as SAP or Oracle, but the actual implementation does turn out to be expensive."
"I compared the prices of AlgoSec with Tufin and FireMon. I don't recall the exact cost, but it was within budget and not very expensive. In addition to standard licensing fees, we didn't have any significant additional costs. We did hire new people for the change management process, but that's not a technology issue."
"The licensing is very easy to set up, with flexible licensing methods such as subscription and perpetual."
"When I have active and standby firewalls, if I do an analysis of the active firewall and by mistake, I also do an analysis of the secondary or standby firewall, it'll consume two licenses from the total number of licenses I have. So, I need to change the license and make the active firewall secondary. They need to improve how they are counting the number of licenses."
"Regarding additional costs, if you want things like Policy Optimizer, extra features, that's extra."
"Relative to what it offers, the price is fair."
"This is an expensive solution. The cost of three modules for three years was approximately one million."
"The pricing was very good during our initial year, but they increased it this year a little bit. The price is okay. It is not cheap, but it is still average."
"FireMon is cheaper than AlgoSec."
"It's a good value. From a licensing standpoint... it's very simple to understand, and gives us a good bang for the buck."
"Its pricing is good. Compared to others, it is not so expensive."
"Pricing model seems fair."
"ManageEngine Firewall Analyzer is less expensive than some of their competitors, such as Cisco. The price is one of the reasons why we use ManageEngine Firewall Analyzer."
"Needs to work on pricing."
"I know that the price of the products is flexible. There have been different types of products, like professional and enterprise-based ones, and depending on the requirements, customers can choose their products."
report
Use our free recommendation engine to learn which Firewall Security Management solutions are best for your needs.
869,095 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
16%
Manufacturing Company
8%
Healthcare Company
6%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
11%
Comms Service Provider
7%
Computer Software Company
19%
Comms Service Provider
10%
Healthcare Company
10%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business57
Midsize Enterprise31
Large Enterprise175
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise9
Large Enterprise44
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise10
 

Questions from the Community

What do you like most about AlgoSec?
AlgoSec's ability to integrate with various security and networking solutions enhances its overall value.
What is your experience regarding pricing and costs for AlgoSec?
Pricing and licensing for AlgoSec depend entirely on custom quotes based on the organization's specific needs. My exp...
What needs improvement with AlgoSec?
One improvement I see for AlgoSec is implementing an optimized rule cleanup and recertification process to address th...
What do you like most about FireMon?
I like the Security Manager console where we can see any changes that have been made or pull the results of an assess...
What is your experience regarding pricing and costs for FireMon?
Comparatively, FireMon has a very good price and is below the general competition in cost. I have not seen any additi...
What needs improvement with FireMon?
For one company I work with, I use Fortinet, and FireMon is not able to understand the zones that Fortinet uses. Part...
What do you like most about ManageEngine Firewall Analyzer?
The most valuable feature of the solution is that it is a very user-friendly tool compared to other solutions.
What is your experience regarding pricing and costs for ManageEngine Firewall Analyzer?
The pricing and overall licensing cost of ManageEngine Firewall Analyzer is very cost-effective compared to global co...
What needs improvement with ManageEngine Firewall Analyzer?
To improve ManageEngine Firewall Analyzer, they need to implement Zero Touch Provisioning (ZTP) support for firewalls...
 

Overview

 

Sample Customers

Maersk, Delta Airlines, Chevron, General Motors, T-Mobile, Chevron, AT&T, BP, Bell Canada, HCA Healthcare, Morgan Stanley, Unilever, Nationwide Insurance Enterprise, US Bank, Microsoft 
Convey, MGM Resorts International, Southwest Airlines, Alkami, Costco, Aetna, IBM, Verizon, Wells Fargo
WFP, NYC.gov, Sony Pictures, Franklin Security Bank, ITC INFOTECH
Find out what your peers are saying about AlgoSec, Tufin, Palo Alto Networks and others in Firewall Security Management. Updated: September 2025.
869,095 professionals have used our research since 2012.