"If configured, Firepower provides us with application visibility and control."
"The most valuable feature is stability."
"Firepower NGFW has improved my organization in several ways. Before, we were trying to stamp out security threats and issues, it was a one-off type of way to attack it. I spent a lot of manpower trying to track down the individual issues or flare-ups that we would see. With Cisco's Firepower Management, we're able to have that push up to basically one monitor and one UI and be able to track that and stop threats immediately. It also gives us a little more granularity on what those threats might be."
"The most valuable features of this solution are the integrations and IPS throughput."
"The most valuable feature is the Intrusion Prevention System."
"Another benefit has been user integration. We try to integrate our policies so that we can create policies based on active users. We can create policies based on who is accessing a resource instead of just IP addresses and ports."
"The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable."
"The feature set is fine and is rarely a problem."
"The features that are most valuable within the firewall are the IPS as well as the Unified Communications. We also really like the dynamic grouping."
"Cisco has the best documentation. You can easily find multiple documents by searching the web. Even a child can go online and find the required information."
"It is a very stable product. I've not had any issues with it. It is a super product, and I won't need to change it anytime soon."
"I like all of the features."
"It is a very user-friendly product."
"I have found the stability of this solution really good. This is why I use it."
"Technical support services are excellent."
"I like the ASDM for the firewall because it is visual. With the command line, it is harder to visualize what is going on. A picture is worth a thousand words."
"Juniper supports their products very well."
"The command line in Juniper SRX is extremely powerful, in my opinion. It's one of the best command lines I've used in networking products."
"The technical support is quite good."
"The IPSec configuration is going well."
"The reason that we picked Juniper SRX is for the scalability, the fit for purpose, the tools that are available, the ongoing support and the ability to monitor, but particularly for the virtual routers in our data centers so that we can quickly upscale them when needed, when we need more throughput."
"We're primarily using Juniper's EPA feature, but not the other things. We use it to manage different points of firewalling of routing."
"The features that I have found valuable are the ones for the main purpose we are using Juniper - its firewall to protect our network for our internet access."
"Technical support is good. They quickly respond, and they even have local help here. They can actually give you an answer very quickly."
"The initial setup could be simplified, as it can be complex for new users."
"We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond."
"This product is managed using the Firepower Management Center (FMC), but it would be better if it also supported the command-line interface (CLI)."
"One of my colleagues is using the firewall as an IPS, but he is worried about Firepower's performance... With the 10 Gb devices, when it gets to 5 Gbps, the CPU usage goes up a lot and he cannot manage the IPS."
"The ability to better integrate with other tools would be an improvement."
"Web filtering needs improvement because sometimes the URL is miscategorized."
"My team tells me that other solutions such as Fortinet and Palo Alto are easier to implement."
"Its interface is sometimes is a little bit slow, and it can be improved. When you need to put your appliance in failover mode, it is a little difficult to do it remotely because you need to turn off the appliance in Cisco mode. In terms of new features, it would be good to have AnyConnect VPN with Firepower. I am not sure if it is available at the moment."
"The stability is not the best."
"We have more than one Cisco firewall and it is difficult for me to integrate both on the single UI."
"When comparing the graphical interface of this solution to other vendors it is more difficult to configure. There is a higher learning curve for administrators in this solution."
"The annual subscription cost is a bit high. They should try to make it comparable to other offerings. We have a number of Chinese products here in Pakistan, which are already, very cheap and have less annual maintenance costs compared to Cisco."
"In the future, I would like to be able to use an IP phone over a VPN connection."
"In the next release, I would like to see the VPN and UTM features included."
"Some individuals find the setup and configuration challenging."
"I have worked with the new FTD models and they have more features than the ASA line."
"The training videos that are available need to be improved, and made more educative."
"We purchased three devices and all three have been replaced under RMA."
"The interface could be more user-friendly."
"It could be more secure."
"The configuration is difficult and it should be easier."
"As a networking person, I don't really have any major issues with this device. Based on my experience of using it in a cluster, it could be more stable. I had an incident when one of the SRXs in a cluster couldn't learn ARP. It is a good solution, but firewalls don't seem to be an area of development for Juniper. They are focusing on data centers, routers, and switches, not firewalls."
"Junos Space should be improved to be on par with FortiGate's solution for managing firewalls and routing."
"It was very difficult to deal with and required a lot of support, and the UI is very poor."
More Cisco Firepower NGFW Firewall Pricing and Cost Advice →
Cisco ASA Firewall is ranked 6th in Firewalls with 65 reviews while Juniper SRX is ranked 14th in Firewalls with 37 reviews. Cisco ASA Firewall is rated 8.0, while Juniper SRX is rated 7.8. The top reviewer of Cisco ASA Firewall writes "Packet inspection with ASDM works well, but upgrading requires notable planning and effort". On the other hand, the top reviewer of Juniper SRX writes "This best in class Next-Gen firewall is elegant in its ease-of-use and architecture". Cisco ASA Firewall is most compared with Fortinet FortiGate, Palo Alto Networks WildFire, Meraki MX, pfSense and Sophos XG, whereas Juniper SRX is most compared with Fortinet FortiGate, Palo Alto Networks WildFire, pfSense, Meraki MX and Check Point NGFW. See our Cisco ASA Firewall vs. Juniper SRX report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
