Try our new research platform with insights from 80,000+ expert users

Cisco Duo vs Cisco Secure Firewall comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.3
Cisco Duo enhances security with multifactor authentication, offering cost savings and ease of use despite minor productivity impacts.
Sentiment score
7.3
Cisco Secure Firewall boosts ROI with enhanced security, cost reductions, and compatibility, proving its value and efficiency over time.
I think Cisco Duo offers a good return on investment for startups, newer organizations, or those utilizing cloud-based applications.
I have not seen ROI with Cisco Duo; probably the opposite, because it impedes productivity time to be able to get into the system.
From my point of view, the biggest return on investment when using Cisco Duo is the security and the ease of setting it up.
The biggest return on investment when using Cisco Secure Firewall is that there's no waste in any infrastructure cost and licensing costs for us.
From my point of view, the biggest return on investment when using Cisco Secure Firewall is the single pane of glass, which is a huge plus for us.
The biggest return on investment for me when using Cisco Secure Firewall is reliability and robust network design.
 

Customer Service

Sentiment score
7.2
Cisco Duo's customer support garners mixed reviews, with praise for some aspects but noted variability in responsiveness and improvement needed.
Sentiment score
7.5
Cisco Secure Firewall's customer service is praised for its knowledgeable support, though initial response times and experiences vary.
They got back to us quickly, were nice, and gave us what we needed.
Other support sections have failed miserably because of the lack of response time.
I would rate the technical service and customer support of Cisco Duo a ten out of ten.
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
They have expertise and provide solutions for the most difficult problems.
 

Scalability Issues

Sentiment score
8.0
Cisco Duo excels with scalable, seamless integration and adaptability, making it ideal for organizations of varying sizes and needs.
Sentiment score
7.3
Cisco Secure Firewall offers scalable solutions with adaptable clustering, despite some licensing concerns, enhancing integration and management ease.
I believe Cisco Duo is very scalable because it is cloud-based.
We started out with just the basics, getting a token, and then we changed to push, and now, we have added the offline mode.
It scales easily because it is just tied into our identity provider, and it grows along with that.
Scalability presents a challenge.
Compared to FortiGate and Palo Alto, it lags in configuration and other aspects.
Even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow.
 

Stability Issues

Sentiment score
8.4
Cisco Duo is highly reliable, with minimal downtime and efficient issue resolution, earning consistent positive user feedback.
Sentiment score
7.4
Cisco Secure Firewall is stable, with some VPN issues; recent updates improve stability, highlighting the importance of proper configuration.
When there is a bigger problem, we get notifications from Cisco Duo saying, 'Hey, we have a problem,' and that has helped us.
It is very reliable, easy to use, and I don't have too many issues with it.
There has been no downtime, crashes, or performance issues with Cisco Duo.
We have often encountered split-brain scenarios during failover processes and code upgrades, which have been persistent problems for us.
We work with a cluster with high availability, so if something goes wrong, we have it functioning.
Cisco Secure Firewall offers exceptional performance and stability.
 

Room For Improvement

Cisco Duo aims to improve integration, simplify authentication, enhance compatibility, and refine pricing and user experience across platforms.
Cisco Secure Firewall is hindered by complex UI, licensing issues, outdated features, and needs improvements in scalability and integration.
If you don't have internet access, you can't access your computer, only local access is available.
Cisco should allow easier integration with third-party equipment because Cisco's own equipment is expensive.
There needs to be consideration for how to launch Cisco Duo with a handheld device that is not native, where you can install the application.
My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time.
Firepower Management Center is quite out of date compared to other vendors.
The integration between Cisco products themselves presents difficulties, such as SD-WAN configuration.
 

Setup Cost

Cisco Duo offers competitive pricing, flexible payment options, and cost-effective scalability with straightforward licensing and free trials available.
Cisco Secure Firewall has high pricing and complex licensing, with significant ongoing costs despite potential discounts.
The approximate cost is around eighty dollars per user.
Licensing is straightforward and convenient for higher education because student populations are included.
I am pleased that the prices remained stable after Cisco acquired the solution.
It's good to have them, however, it costs us a lot.
It's considered a premium, but people pay that price for Cisco.
There are a lot of in-place contracts for us that provide the benefit of discounts.
 

Valuable Features

Cisco Duo provides robust multi-factor authentication and efficient access management, ideal for secure, flexible remote and hybrid work environments.
Cisco Secure Firewall offers comprehensive security with robust access control, scalability, and advanced protection features, enhancing enterprise security.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
A valuable feature of the solution is its hybrid structure, which involves proxy agents running on-premises while other services are on the cloud.
What stands out positively about Cisco is their training and support, which has effectively prepared engineers to work with their products.
This is very important to my organization, as we work extensively with security because we are a bank, so we can keep the data safe.
Cisco Secure Firewall allows me to safeguard Layer 7 or Layer 3 and manage the security rules with the business needs of my organization.
 

Categories and Ranking

Cisco Duo
Ranking in Cisco Security Portfolio
4th
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
Single Sign-On (SSO) (4th), Authentication Systems (2nd), Access Management (5th), ZTNA as a Service (5th), Multi-Factor Authentication (MFA) (2nd)
Cisco Secure Firewall
Ranking in Cisco Security Portfolio
3rd
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
429
Ranking in other categories
Firewalls (7th)
 

Mindshare comparison

As of October 2025, in the Cisco Security Portfolio category, the mindshare of Cisco Duo is 8.2%, up from 3.5% compared to the previous year. The mindshare of Cisco Secure Firewall is 6.9%, up from 6.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cisco Security Portfolio Market Share Distribution
ProductMarket Share (%)
Cisco Secure Firewall6.9%
Cisco Duo8.2%
Other84.9%
Cisco Security Portfolio
 

Featured Reviews

Thomas Botts - PeerSpot reviewer
Managing security policies effectively with seamless authentication
The feature of Cisco Duo that I prefer the most is the policies, being able to control what we need to within the policies. You can get pretty granular. There isn't a lot of training that goes on in school districts. Email is an easy way where many people give out their credentials, so the level of protection is something that we definitely need in a school district. Cisco Duo's strong security authentication system has been easy when logging in, although the teachers don't appreciate it as much. We have it configured so users essentially just hit accept. If it sees any sort of built-in risk, then it steps up authentication. It's pretty easy. I appreciate it. I've encountered advantages with Cisco Duo in that it has stopped significant pushback from teachers. It has prevented credential sharing and unauthorized access. We've seen a huge decrease since we've rolled it out across the entire district.
Phil Shiflett - PeerSpot reviewer
Unified policies streamline network management but complex licensing requires attention
Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.
report
Use our free recommendation engine to learn which Cisco Security Portfolio solutions are best for your needs.
869,202 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Manufacturing Company
10%
Government
6%
Financial Services Firm
6%
Computer Software Company
20%
University
8%
Manufacturing Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise16
Large Enterprise36
By reviewers
Company SizeCount
Small Business180
Midsize Enterprise126
Large Enterprise212
 

Questions from the Community

How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What do you like most about Duo Security?
They are users who, as mentioned before, utilize RDPAP and MDPAP. It includes functionalities related to finance, specifically in single sign-on.
What is your experience regarding pricing and costs for Duo Security?
My experience with the pricing, setup cost, and licensing of Cisco Duo is honestly above my pay grade. I don't know any of that.
Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fortigate is very stable, reliable, and consistent. We like that we can manage the e...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco ecosystem, it is very simple to handle. This solution has traffic inspection ...
 

Also Known As

Duo Security
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL
 

Overview

 

Sample Customers

Information Not Available
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
Find out what your peers are saying about Cisco Duo vs. Cisco Secure Firewall and other solutions. Updated: September 2025.
869,202 professionals have used our research since 2012.