"One of the nice things about Firepower is that you can set it to discover the environment. If that is happening, then Firepower is learning about every device, software operating system, and application running inside or across your environment. Then, you can leverage the discovery intelligence to get Firepower to select the most appropriate intrusion prevention rules to use for your environment rather than picking one of the base policies that might have 50,000 IPS rules in it, which can put a lot of overhead on your firewall. If you choose the recommendations, as long as you update them regularly, you might be able to get your rule set down to only 1,000 or 1,500, which is a significant reduction in a base rule set. This means that the firewall will give you better performance because there are less rules being checked unnecessarily. That is really useful."
"Firepower has been used for quite a few enterprise clients. Most of our clients are Fortune 500 and Firepower is used to improve their end to end firewall functionality."
"The implementation is pretty straightforward."
"The feature set is fine and is rarely a problem."
"The dashboard is the most important thing. It provides good visibility and makes management easy. Firepower also provides us with good application visibility and control."
"I have access to the web version of Cisco Talos to see the reputation of IP addresses. I find this very helpful. It provides important information for my company to obtain the reputation of IP addresses. The information in Talos is quite complete."
"Its Snort 3 IPS has better flexibility as far as being able to write rules. This gives me better granularity."
"The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable."
"Very reliable solution with good scalability and straightforward implementation."
"Five out of five ROI."
"The installation is easy, we have not had any complaints from our customers."
"The only firewall able to monitor traffic from a CCTV network. Can detect unauthorized devices plugged into the network, which standard firewalls can't do."
"It has been stable so far."
"One feature I would like to see, that Firepower doesn't have, is email security. Perhaps in the future, Cisco will integrate Cisco Umbrella with Firepower. I don't see why we should have to pay for two separate products when both could be integrated in one box."
"The change-deployment time can always be improved. Even at 50 seconds, it's longer than some of its competitors. I would challenge Cisco to continue to improve in that area."
"Web filtering needs improvement because sometimes the URL is miscategorized."
"I would like it to have faster deployment times. A typical deployment could take two to three minutes. Sometimes, it depends on the situation. It is better than it was in the past, but it could always use improvement."
"Its interface is sometimes is a little bit slow, and it can be improved. When you need to put your appliance in failover mode, it is a little difficult to do it remotely because you need to turn off the appliance in Cisco mode. In terms of new features, it would be good to have AnyConnect VPN with Firepower. I am not sure if it is available at the moment."
"The price and SD-WAN capabilities are the areas that need improvement."
"There is limited data storage on the appliance itself. So, you need to ship it out elsewhere in order for you to store it. The only point of consideration is around that area, basically limited storage on the machine and appliance. Consider logging it elsewhere or pushing it out to a SIEM to get better controls and manipulation over the data to generate additional metrics and visibility."
"We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond."
"SSL VPN license cost is not cheap."
"Licensing is not cheap."
"They have a very good technical support team, but I think there are some communication issues due to language differences."
More Cisco Firepower NGFW Firewall Pricing and Cost Advice →
Hillstone E-Series is ranked 32nd in Firewalls with 2 reviews while Hillstone T-Series is ranked 30th in Firewalls with 2 reviews. Hillstone E-Series is rated 9.0, while Hillstone T-Series is rated 7.0. The top reviewer of Hillstone E-Series writes "Efficient call processor and overall amazing ROI". On the other hand, the top reviewer of Hillstone T-Series writes "Customizable reports with advanced threat protection". Hillstone E-Series is most compared with Fortinet FortiGate, Sophos XG, Palo Alto Networks NG Firewalls, OpenVPN Access Server and Palo Alto Networks WildFire, whereas Hillstone T-Series is most compared with Fortinet FortiGate, Cisco ASA Firewall, Palo Alto Networks WildFire and Sangfor NGAF. See our Hillstone E-Series vs. Hillstone T-Series report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
