Cisco Secure Firewall vs ShieldX comparison

The compared Cisco and Fortinet solutions aren't in the same category. Cisco is ranked #7 in Firewalls , with an average rating of 8.1, and holds a 6.2% mindshare in the category. Fortinet is ranked #13 in MS , and holds a 0.5% mindshare. Additionally, 83% of Cisco users are willing to recommend the solution, compared to 100% of Fortinet users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Cisco Secure Firewall and ShieldX are both highly-regarded in the cybersecurity market. Cisco seems to have the upper hand due to its comprehensive support and versatile security features.

Features: Users highlight Cisco Secure Firewall's robust threat detection, extensive integration capabilities, and comprehensive security features. ShieldX stands out for its unique microsegmentation, simplified management, and innovative features.

Room for Improvement: Cisco Secure Firewall users note the need for more intuitive configurations, faster updates, and improved user experience. ShieldX users seek better scalability, enhanced user documentation, and expanded feature set.

Ease of Deployment and Customer Service: Cisco Secure Firewall is commended for its detailed deployment guides and responsive customer service. ShieldX users find its deployment process more straightforward but desire quicker customer support response times.

Pricing and ROI: Cisco Secure Firewall's pricing is justified given its extensive support and functionalities, though it is on the higher end. ShieldX offers competitive pricing with a strong ROI due to its advanced features, making it preferable for cost-conscious buyers seeking significant returns.

To learn more, read our detailed Cisco Secure Firewall vs. ShieldX Report (Updated: December 2024).

Buyer's Guide

Cisco Secure Firewall vs. ShieldX

December 2024

Download the complete report

Helped 871,408 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

Firewalls Market Share Distribution
Product	Market Share (%)
Cisco Secure Firewall	6.2%
Fortinet FortiGate	20.4%
OPNsense	11.0%
Other	62.400000000000006%

Firewalls

Microsegmentation Software Market Share Distribution
Product	Market Share (%)
ShieldX	0.5%
Illumio	29.4%
Akamai Guardicore Segmentation	26.7%
Other	43.400000000000006%

Microsegmentation Software

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Phil Shiflett

Senior Manager, Network Engineering at TTi Power Equipment

Unified policies streamline network management but complex licensing requires attention

Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.

Read full review

MichaelProcyshyn

IT Director at park holidays uk

Proactively monitors, blocks, and reports what it has blocked; and self-updates meaning there is zero maintenance

The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput. The traffic through our website depends on holiday bookings. It's very quiet in November through January, and then our traffic picks up quite rapidly and, at our peak, we will take in excess of a million pounds of business a day through our website. The UI was also one of the huge selling points. My web development manager was blown away with the detail and the granularity that you can get out of the UI. It is a very strong and informative UI, with the amount of data it provides. Uptime on the system has been 648 days and we do very little to it because it self-updates and alerts. It does everything that we need it to do, so the administration side of it is zero. One of the beauties about ShieldX is that it's such a good "fire-and-forget" product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable aspects of FortiGate NGFW are its top-notch reputation in peer reviews, user-friendly interface, and excellent support."

"UTM/NGFW features and FortiCloud for logs and backups are awesome."

"The most valuable features are SD-WAN, application control, IPS control, and FortiSandbox."

"I haven't configured or experienced any stability issues."

"It is a good source for firewall protection."

"The Fortinet FortiGate local partners were good. I did not have direct contact with Fortinet support."

"I value it's IPS and application control solution."

"Whenever we raise a complaint with FortiGate, their response and resolution times are minimal."

More Fortinet FortiGate pros

"The firewall and policy side are easy to use."

"Network segmentation is the most valuable feature."

"The greatest benefit that this has provided to our organization is that we've been able to adjust the time that it takes to implement firewall changes. It's gone from a week to less than half a day to implement a change, which means that our DevOps team can be much more agile, and there is much less overhead on the firewall team."

"Cisco Secure Firewall's security solutions, advanced malware protection, and DDoS communication are very good."

"Regarding the zero-trust security model, Cisco Secure Firewall helps our company. Our students and staff have the ability to do whatever they need to do with their research. It helps them while keeping security top of mind."

"Implementing Cisco Secure Firewall has saved us time because we rely on most of the out-of-the-box signatures. It has reduced the time and effort spent in configuration within the security network."

"The best features are stability and scalability."

"Strong in NAT and access-lists."

More Cisco Secure Firewall pros

"We were able to see what devices are talking to each other, giving us more visibility."

"The UI was also one of the huge selling points. My web development manager was blown away with the detail and the granularity that you can get out of the UI. It is a very strong and informative UI, with the amount of data it provides."

"It has helped us tighten our security posture. Now, staff can only access things that they should be accessing."

"...It takes the exact same policies that you would apply to your on-premise environment and enables you to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."

"The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput."

"ShieldX has been designed from the very beginning to work well in cloud environments. It understands autoscaling, automation, and auto-configuration. These are the things which are important in today's operating environment."

"The Adaptive Intention Engine is fantastic. It allows us to develop security policies using the language of our internal customers. It's machine-learning applied to security workflows. That allows us to much more easily construct the policies that will protect those workflows."

Cons

"The routing capability on the FortiGate devices has room for improvement."

"I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues."

"The solution is expensive."

"It claims it does DLP, but the degree and level of controls are very basic."

"To the best of my knowledge, Fortinet does not have a CASB solution and Fortinet does not have a Zero trust solution."

"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."

"The product's data guard feature should support a USB port when the internet connection is unavailable."

"Lacks training for new features."

More Fortinet FortiGate cons

"My impression of the visibility and control capabilities of Cisco Secure Firewall in managing encrypted traffic is that it can improve."

"I wouldn't give them a ten. Nobody is perfect. I'll give them a nine because they help me with any issues I've had."

"Other firewalls, upgrading is a very easy task; from the graphical user interface, you just need to import the firmware versions into it and install it. In this firewall, you need to have a third-party solution in both. It's a process. It's a procedure, a hard procedure, actually, so there is no straightforward procedure for upgrading."

"Intrusion prevention, we currently need to apply deep bracket inspection manually to use web filtering."

"The configuration in Firepower Management Center is very slow. Deployment takes two to three minutes. You spend a lot of time on modifications. Whereas, in FortiGate, you press a button, and it takes one second."

"If the implementation was easier, it would be a lot better for us."

"Cisco Firepower is not completely integrated with Active Directory. We are trying to use Active Directory to restrict users by using some security groups that are not integrated within the Cisco Firepower module. This is the main issue that we are facing."

"The ASA has become a bit old and needs updating."

More Cisco Secure Firewall cons

"We are having some issues with their LDAP and integrating it with the Active Directory. We can't seem to set it up."

"There should be a bit more customer care, with regular review meetings on it or regular reports. It would be nice to have a quarterly or biannual review of what ShieldX has blocked."

"They need to be consistent in performance and capabilities over time, given the fact that this is new and I want to see where this goes in the next year or so. As the vendor continues to evolve and add future functionality, we want to make sure that we are still keeping up with the integrations, etc. Time will be the key factor here. The proper support for some of the latest technologies, Docker containers, etc. They need to keep up with threat landscape, so we will see how the security get layered. This is what we are going to be keeping an eye on."

"With any kind of tool like ShieldX, where you're in the cloud instead of a traditional firewall, you're using CPU resources in those environments to provide the protection. So there's a cost associated with CPU resources. I'm pressing upon them to make the product much more efficient and use less CPUs to do the same thing."

"I would like better reports and in-depth reporting."

Pricing and Cost Advice

"Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not."

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."

"It is more affordable than Check Point and Palo Alto. Another thing is that all the features and the OS remain the same irrespective of the size of the device. Pricing-wise, Fortinet typically provides one-year support with the firewall appliance. There is also an option for three years which is how their licensing works."

"The licensing scheme of Fortinet is better than Cisco. It is more logical."

"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."

"Although the solution's pricing is high, compared with other products, it may be cheap."

"There is no challenge in Fortinet FortiGate pricing."

"If the price of the license in Fortinet FortiGate was less expensive it would be better."

More Fortinet FortiGate pricing and cost advice

"Cisco smart licensing is a hassle for a disconnected environment."

"The pricing could always be cheaper."

"Pricing varies on the model and the features we are using. It could be anywhere from $600 to $1000 to up to $7,000 per year, depending on what model and what feature sets are available to us."

"The licensing scheme is completely confusing, and they need to streamline it. They have classic licensing and a new type of licensing now. Also, the licensing for the actual firewall is separate from the one for TAC support."

"Licensing with Cisco Secure Firewall isn't too difficult. However, pricing seems high. We had been using a Meraki solution, and Cisco Secure Firewall seems more expensive than Meraki, even though Meraki is also cloud-based."

"The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case."

"Licensing, recently, has been getting more complicated. In particular, the Smart Licensing that came out is quite complicated. I don't know what's going on.... They call it Smart, but it's complicated. I prefer the traditional license where you buy it once."

"Our subscription costs, just for the firewalls, is between $400,000 and $500,000 a year."

More Cisco Secure Firewall pricing and cost advice

"For other security professions who are looking for something which is low in cost that does microsegmentation, they should look at ShieldX. It might not be the big name out there, but it does everything that you are looking for in microsegmentation at a very low price."

"We are actually expecting our costs to drop in the coming year, but it is just a matter of the licensing expiring. That is going to happen in the next six months or so. Then, we will start to see a decrease in overall spend."

"For a three-year deal we paid £55,000 plus tax... But, and this is a big "but," this was over two years ago. ShieldX had only just hit the market. We were the first company in Europe to buy ShieldX."

"ShieldX also enables us to migrate to cloud environments faster. That is an important part of it for sure because it takes the exact same policies that we would apply to our on-premise environment and enables us to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."

"ShieldX ensures that we can have the separation needed for our environment to avoid drastically increasing the cost on the licensing side. From this perspective, it's been very positive and helpful."

"We are very happy with the pricing and licensing. It's about getting a site-wide license. One of the challenges that we've had with our previous vendor had been the cost of licensing."

"Security policies are now applied as applications are going up. Because it's automated, we don't have the three to four week delay. The insertion of applications in the cloud for us dropped from an average of three to four weeks to a couple of days."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

871,408 professionals have used our research since 2012.

Comparison Review

it_user206346

Security Consultant at Webernetz.net - Network Security Consulting

Mar 11, 2015

Cisco ASA vs. Palo Alto Networks

Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

19%

University

Manufacturing Company

Comms Service Provider

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	180
Midsize Enterprise	126
Large Enterprise	212

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

Which is better - Fortinet FortiGate or Cisco ASA Firewall?

One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...

See all answers

How does Cisco's ASA firewall compare with the Firepower NGFW?

It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...

See all answers

Which is better - Meraki MX or Cisco ASA Firewall?

Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...

See all answers

Ask a question

Earn 20 points

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 18% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks WildFire vs Cisco Secure Firewall

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Cisco Secure Firewall

Compared 8% of the time

Netgate pfSense vs Cisco Secure Firewall

Compared 4% of the time

OPNsense vs Cisco Secure Firewall

Compared 4% of the time

Cisco Meraki MX vs Cisco Secure Firewall

Compared 3% of the time

More Cisco Secure Firewall Competitors

Illumio vs ShieldX

Compared 100% of the time

More ShieldX Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

October 2025

Download Fortinet FortiGate product report

Buyer's Guide

Cisco Secure Firewall

October 2025

Download Cisco Secure Firewall product report

Buyer's Guide

ShieldX

September 2025

Download ShieldX product report

Also Known As

No data available

Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL

APEIRO, ShieldX APEIRO

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Cisco Secure Firewall provides comprehensive network security with advanced features such as application visibility, URL filtering, and malware protection. It combines a user-friendly interface with robust VPN capabilities, making it a reliable choice for varying network environments and industry applications.

Cisco Secure Firewall offers exceptional protection with its integration into Cisco's broader ecosystem, ensuring enhanced threat detection and policy unification. Despite its complexity in command-line interfaces and management, Cisco Secure Firewall remains a potent tool for safeguarding data. It is widely adopted for edge security, VPN services, perimeter defense, and traffic segmentation, especially in hybrid settings. Essential sectors like banking and telecom benefit from its stable connectivity and centralized security management. Though there are challenges with costs and support for third-party APIs, the firewall's scalability and high availability provide comprehensive support for protecting network assets.

What are the key features of Cisco Secure Firewall?

Application Visibility: Offers in-depth visibility of application traffic to monitor and protect against threats.
Advanced Malware Protection: Protects against known and emerging malware threats with powerful detection capabilities.
URL Filtering: Manages and restricts access to websites, enhancing organizational data security.
VPN Capabilities: Ensures secure remote access and encrypted communication through strong VPN features.
Integration with Cisco Ecosystem: Enhances security measures with seamless integration with Cisco's suite of security tools.

What benefits and ROI should be expected from Cisco Secure Firewall?

Comprehensive Protection: Offers multi-layered security for diverse network environments, increasing overall data protection.
Performance Efficiency: High availability and scalability lead to improved network performance and resource management.
Management Simplification: Centralized security management streamlines policy deployment across networks.
Enhanced Threat Detection: Integration capabilities improve threat detection and mitigation for better security posture.

Cisco Secure Firewall is widely implemented across sectors like banking, education, ISPs, and telecoms. It fortifies data centers and network edge security, delivering strong protection for client access, hybrid environments, and intrusion prevention. In these industries, firewall solutions ensure secure connectivity and manage RTU traffic effectively, leveraging centralized management and integration with Cisco's security tools.

Cisco

The ShieldX Elastic Security Platform dynamically scales to deliver comprehensive and consistent controls to protect data centers, cloud infrastructure, applications and data no matter where they are or where they go to make the cloud more secure than on-premise deployments. Our frictionless approach leverages agentless technology as well as the ShieldX Adaptive Intention Engine which autonomously translates and enforces intention into a set of comprehensive controls - microsegmentation, firewall, IPS and more - making security the easiest thing you do in the cloud.

Fortinet

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.

Iowa State University

Buyer's Guide

Cisco Secure Firewall vs. ShieldX

December 2024

Free Report: Cisco Secure Firewall vs. ShieldX

Find out what your peers are saying about Cisco Secure Firewall vs. ShieldX and other solutions. Updated: December 2024.

DOWNLOAD NOW

871,408 professionals have used our research since 2012.

See our Cisco Secure Firewall vs. ShieldX report.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.