"I like the firewall features, Snort, and the Intrusion Prevention System (IPS)."
"I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable."
"Firepower NGFW has improved my organization in several ways. Before, we were trying to stamp out security threats and issues, it was a one-off type of way to attack it. I spent a lot of manpower trying to track down the individual issues or flare-ups that we would see. With Cisco's Firepower Management, we're able to have that push up to basically one monitor and one UI and be able to track that and stop threats immediately. It also gives us a little more granularity on what those threats might be."
"If configured, Firepower provides us with application visibility and control."
"It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective."
"One of the most valuable features is the AMP. It's very good and very reliable when it comes to malicious activities, websites, and viruses."
"The integration of network and workload micro-segmentation helps a lot to provide unified segmentation policies across east-west and north-south traffic. One concrete example is with Cisco ACI for the data center. Not only are we doing what is called a service graph on the ACI to make sure that we can filter traffic east-west between two endpoints in the same network, but when we go north-south or east-west, we can then leverage what we have on the network with SGTs on Cisco ISE. Once you build your matrix, it is very easy to filter in and out on east-west or north-south traffic."
"Feature-wise, we mostly use IPS because it is a security requirement to protect against attacks from outside and inside. This is where IPS helps us out a bunch."
"The most valuable features are reporting, the Sensei plugin, and firewall capabilities."
"The interface and the dashboard are the most valuable features of this solution."
"I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed."
"OPNsense is easy to scale when running on the hardware."
"The most valuable features in OPNsense are reporting and visibility."
"We have found pretty much all the features of the solution to be valuable."
"The system in general is quite flexible."
"The solution is good for a basic firewall for a small business or for home use."
"This is a capable appliance and the standard features work well for us."
"The solution can scale well."
"The initial setup could be simplified, as it can be complex for new users."
"FirePOWER does a good job when it comes to providing us with visibility into threats, but I would like to see a more proactive stance to it."
"The price and SD-WAN capabilities are the areas that need improvement."
"The performance should be improved."
"I would like to see improvement when you create policies on Snort 3 IPS on Cisco Firepower. On Snort 2, it was more like a UI page where you had some multiple choices where you could tweak your config. On Snort 3, the idea is more to build some rules on the text file or JSON file, then push it. So, I would like to see a lot of improvements here."
"The configuration in Firepower Management Center is very slow. Deployment takes two to three minutes. You spend a lot of time on modifications. Whereas, in FortiGate, you press a button, and it takes one second."
"This product is managed using the Firepower Management Center (FMC), but it would be better if it also supported the command-line interface (CLI)."
"It would be great if some of the load times were faster."
"I would like to see better SD-WAN performance."
"The solution would not be suitable for anything large-scale."
"There are issues with stability and reliability."
"The solution could be more secure."
"The ability to set the VPN IP address would be a welcome addition."
"The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform."
"The interface needs to be simplified. It is not user-friendly."
"The logging could improve in OPNsense."
"Sometimes it reboots when you least expect it, and that's the main issue."
"Although manageable, the user interface is a little bit slow and could be improved."
More Cisco Firepower NGFW Firewall Pricing and Cost Advice →
More Zyxel Unified Security Gateway Pricing and Cost Advice →
OPNsense is ranked 13th in Firewalls with 11 reviews while Zyxel Unified Security Gateway is ranked 9th in Unified Threat Management (UTM) with 2 reviews. OPNsense is rated 8.0, while Zyxel Unified Security Gateway is rated 6.0. The top reviewer of OPNsense writes "A solution that detects and blocks malicious content with good reporting and visibility, but the reliability needs improvement". On the other hand, the top reviewer of Zyxel Unified Security Gateway writes "Low cost but unresponsive technical support and very unstable performance". OPNsense is most compared with pfSense, Untangle NG Firewall, Sophos XG, Sophos UTM and Fortinet FortiGate-VM, whereas Zyxel Unified Security Gateway is most compared with Fortinet FortiGate, pfSense, Fortinet FortiOS, WatchGuard Firebox and Cisco ASA Firewall.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
