"The most valuable feature is the access control list (ACL)."
"You do not have to do everything through a command line which makes it a lot easier to apply rules."
"Its Snort 3 IPS has better flexibility as far as being able to write rules. This gives me better granularity."
"Firepower NGFW has improved my organization in several ways. Before, we were trying to stamp out security threats and issues, it was a one-off type of way to attack it. I spent a lot of manpower trying to track down the individual issues or flare-ups that we would see. With Cisco's Firepower Management, we're able to have that push up to basically one monitor and one UI and be able to track that and stop threats immediately. It also gives us a little more granularity on what those threats might be."
"A good intrusion prevention system and filtering."
"The customer service/technical support is very good with this solution."
"One of the nice things about Firepower is that you can set it to discover the environment. If that is happening, then Firepower is learning about every device, software operating system, and application running inside or across your environment. Then, you can leverage the discovery intelligence to get Firepower to select the most appropriate intrusion prevention rules to use for your environment rather than picking one of the base policies that might have 50,000 IPS rules in it, which can put a lot of overhead on your firewall. If you choose the recommendations, as long as you update them regularly, you might be able to get your rule set down to only 1,000 or 1,500, which is a significant reduction in a base rule set. This means that the firewall will give you better performance because there are less rules being checked unnecessarily. That is really useful."
"We get the Security Intelligence Feeds refreshed every hour from Talos, which from my understanding is that they're the largest intelligence Security Intelligence Group outside of the government."
"The installation is easy, we have not had any complaints from our customers."
"Very reliable solution with good scalability and straightforward implementation."
"Five out of five ROI."
"The VPN functionality is really good. Overall, the whole device is very easy to manage. The software that comes with it is also good."
"SonicWall NSSP is stable and scalable too."
"It has been delivering results efficiently. Its configurations and updates have been easy. It is also user-friendly."
"The product line does not address the SMB market as it is supposed to do. Cisco already has an on-premises sandbox solution."
"It's mainly the UI and the management parts that need improvement. The most impactful feature when you're using it is the user interface and the user experience."
"Implementations require the use of a console. It would help if the console was embedded."
"Cisco Firepower NGFW Firewall can be more secure."
"The initial setup could be simplified, as it can be complex for new users."
"We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond."
"The change-deployment time can always be improved. Even at 50 seconds, it's longer than some of its competitors. I would challenge Cisco to continue to improve in that area."
"One issue with Firepower Management Center is deployment time. It takes seven to 10 minutes and that's a long time for deployment. In that amount of time, management or someone else can ask me to change something or to provide permissions, but during that time, doing so is not possible. It's a drawback with Cisco. Other vendors, like Palo Alto or Fortinet do not have this deployment time issue."
"SSL VPN license cost is not cheap."
"The user interface, the GUI, could be improved."
"No security product is foolproof against hackers, intruders, and other such things. As a security product, they have to keep pace in terms of protection from new hackers and intruders."
"Its reporting functions can be improved. It has decent reporting, but you got to pay a lot more money for it. That's where it begins to fall apart. It comes with minimal zero reporting unless you buy some extra modules. With those extra modules, you can get all the data, but it takes a while to put together what you need for your customer. It is for technical people, but there is no executive summary of the reporting."
More Cisco Firepower NGFW Firewall Pricing and Cost Advice →
Hillstone E-Series is ranked 32nd in Firewalls with 2 reviews while SonicWall NSSP is ranked 26th in Firewalls with 3 reviews. Hillstone E-Series is rated 9.0, while SonicWall NSSP is rated 9.6. The top reviewer of Hillstone E-Series writes "Efficient call processor and overall amazing ROI". On the other hand, the top reviewer of SonicWall NSSP writes "Good VPN functionality, very good support, easy to manage, and meets all of our needs". Hillstone E-Series is most compared with Fortinet FortiGate, Hillstone T-Series, Sophos XG, Palo Alto Networks NG Firewalls and OpenVPN Access Server, whereas SonicWall NSSP is most compared with . See our Hillstone E-Series vs. SonicWall NSSP report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
