Try our new research platform with insights from 80,000+ expert users

Cisco Duo vs Cisco Secure Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
Cisco Duo enhances security, boosts staff morale, saves costs, and improves operations, despite perceived productivity impacts.
Sentiment score
7.2
Cisco Secure Firewall offers improved security and efficiency, but cost and ROI vary based on deployment and usage.
I think Cisco Duo offers a good return on investment for startups, newer organizations, or those utilizing cloud-based applications.
I have not seen ROI with Cisco Duo; probably the opposite, because it impedes productivity time to be able to get into the system.
From my point of view, the biggest return on investment when using Cisco Duo is the security and the ease of setting it up.
The biggest return on investment when using Cisco Secure Firewall is that there's no waste in any infrastructure cost and licensing costs for us.
From my point of view, the biggest return on investment when using Cisco Secure Firewall is the single pane of glass, which is a huge plus for us.
The biggest return on investment for me when using Cisco Secure Firewall is reliability and robust network design.
 

Customer Service

Sentiment score
7.5
Cisco Duo's support is highly rated for expertise and solutions, but some users note delays and improvement needs.
Sentiment score
7.5
Cisco Secure Firewall support is highly rated for knowledgeable assistance, though response times and access vary based on contracts.
They got back to us quickly, were nice, and gave us what we needed.
Other support sections have failed miserably because of the lack of response time.
I would rate the technical service and customer support of Cisco Duo a ten out of ten.
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
They have expertise and provide solutions for the most difficult problems.
 

Scalability Issues

Sentiment score
8.1
Cisco Duo is scalable, easily integrates across sites, and supports thousands of users without disruptions, adapting to various applications.
Sentiment score
7.2
Cisco Secure Firewall offers scalability and integration, though licensing complexity and scalability challenges in growth may concern some users.
I believe Cisco Duo is very scalable because it is cloud-based.
We started out with just the basics, getting a token, and then we changed to push, and now, we have added the offline mode.
It scales easily because it is just tied into our identity provider, and it grows along with that.
Scalability presents a challenge.
Compared to FortiGate and Palo Alto, it lags in configuration and other aspects.
Even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow.
 

Stability Issues

Sentiment score
8.4
Cisco Duo is highly stable and reliable, with minimal downtime and quick issue resolution, maintaining productivity efficiently.
Sentiment score
7.2
Cisco Secure Firewall is highly reliable with minimal outages, though occasional upgrade issues are typically fixed with updates.
When there is a bigger problem, we get notifications from Cisco Duo saying, 'Hey, we have a problem,' and that has helped us.
It is very reliable, easy to use, and I don't have too many issues with it.
There has been no downtime, crashes, or performance issues with Cisco Duo.
We have often encountered split-brain scenarios during failover processes and code upgrades, which have been persistent problems for us.
We work with a cluster with high availability, so if something goes wrong, we have it functioning.
Cisco Secure Firewall offers exceptional performance and stability.
 

Room For Improvement

Cisco Duo needs telephony credit, integration, deployment, and user interface improvements, plus better licensing, documentation, and older app compatibility.
Cisco Secure Firewall faces criticism for its complex GUI, high costs, and demands better features, integration, and performance improvements.
Cisco should allow easier integration with third-party equipment because Cisco's own equipment is expensive.
There needs to be consideration for how to launch Cisco Duo with a handheld device that is not native, where you can install the application.
There has to be a way to make the whole process of push notifications easier, so that when I have my phone with me, I do not have to do anything.
My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time.
Firepower Management Center is quite out of date compared to other vendors.
The integration between Cisco products themselves presents difficulties, such as SD-WAN configuration.
 

Setup Cost

Cisco Duo's pricing is competitive, flexible, straightforward, and suited for large enterprises, with premium support and moderate setup costs.
Cisco Secure Firewall is costly but offers robust support and reliability; licensing complexity can be mitigated by smart licensing.
The approximate cost is around eighty dollars per user.
Licensing is straightforward and convenient for higher education because student populations are included.
I am pleased that the prices remained stable after Cisco acquired the solution.
It's good to have them, however, it costs us a lot.
It's considered a premium, but people pay that price for Cisco.
There are a lot of in-place contracts for us that provide the benefit of discounts.
 

Valuable Features

Cisco Duo is praised for its versatile multi-factor authentication, integration, user-friendly interface, and adaptability to hybrid environments.
Cisco Secure Firewall provides robust security, scalability, and central management, with intuitive tools for efficient threat protection and network monitoring.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
A valuable feature of the solution is its hybrid structure, which involves proxy agents running on-premises while other services are on the cloud.
What stands out positively about Cisco is their training and support, which has effectively prepared engineers to work with their products.
This is very important to my organization, as we work extensively with security because we are a bank, so we can keep the data safe.
Cisco Secure Firewall allows me to safeguard Layer 7 or Layer 3 and manage the security rules with the business needs of my organization.
 

Categories and Ranking

Cisco Duo
Ranking in Cisco Security Portfolio
3rd
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
74
Ranking in other categories
Single Sign-On (SSO) (2nd), Authentication Systems (2nd), ZTNA as a Service (6th), Multi-Factor Authentication (MFA) (2nd)
Cisco Secure Firewall
Ranking in Cisco Security Portfolio
4th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
428
Ranking in other categories
Firewalls (6th)
 

Mindshare comparison

As of June 2025, in the Cisco Security Portfolio category, the mindshare of Cisco Duo is 6.9%, up from 3.2% compared to the previous year. The mindshare of Cisco Secure Firewall is 6.5%, up from 5.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cisco Security Portfolio
 

Featured Reviews

Patrick Stevenson - PeerSpot reviewer
Centralized authentication simplifies logins and saves time
There aren't any new features or functionalities in Cisco Duo that my company has started using recently; we use it primarily for the authentication portion. There are other features we can use, yet we haven't turned those options on yet, so that's more a matter of time than anything. We have many different vendors and types of devices that we require MFA for login. That said, Duo helps bring all of those accounts into one system, in conjunction with ISE, you have one username, one password, and you access all the devices instead of having every device have its own credentials. It lowers the number of passwords you need to have. Cisco Duo is on the right track for improvement. A lot of their devices already integrate with it now. They keep adding features for more devices that interact natively with it, instead of having to have a third-party server to reach out to Duo. I would rate Cisco Duo overall about an eight out of ten; it's a strong product.
Phil Shiflett - PeerSpot reviewer
Unified policies streamline network management but complex licensing requires attention
Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.
report
Use our free recommendation engine to learn which Cisco Security Portfolio solutions are best for your needs.
857,162 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Computer Software Company
21%
Manufacturing Company
9%
Financial Services Firm
6%
Government
6%
Educational Organization
41%
Computer Software Company
14%
University
5%
Manufacturing Company
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What do you like most about Duo Security?
They are users who, as mentioned before, utilize RDPAP and MDPAP. It includes functionalities related to finance, specifically in single sign-on.
Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fortigate is very stable, reliable, and consistent. We like that we can manage the e...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco ecosystem, it is very simple to handle. This solution has traffic inspection ...
 

Also Known As

Duo Security
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
 

Overview

 

Sample Customers

Information Not Available
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
Find out what your peers are saying about Cisco Duo vs. Cisco Secure Firewall and other solutions. Updated: April 2025.
857,162 professionals have used our research since 2012.