FireMon Security Manager Reviews

I have been using FireMon Security Manager for around two years in a production environment, mainly for firewall policy review, compliance report, rule cleanup, and change tracking across multiple firewall platforms such as Palo Alto, Fortinet, and SonicWall, in addition to Check Point. Over this time, it has become part of the regular operations for audit and policy governance rather than just a one-time tool.

A very common day-to-day use case for us with FireMon Security Manager is policy review and cleanup before an audit. For example, recently, we had to prepare for an internal security audit, and we used FireMon Security Manager to run a policy analysis across multiple firewalls such as Palo Alto, Fortinet, SonicWall, and Check Point. FireMon Security Manager quickly highlights unused, over-permissive rules, as well as shadow and duplicate rules, allowing us to generate a risk and compliance report from FireMon Security Manager, review the findings with the application owner, and use that output to clean up and optimize the rule base. It also helps us track changes and document what was modified and why, making audit evidence much easier. FireMon Security Manager plays a key role in reducing risk, speeding up audit preparations, and making policy cleanup structured instead of manual and error-prone.

Based on my experience and operational uses, some of the best features FireMon Security Manager offers include centralized policy visibility, which provides a single pane of glass view across all firewall vendors and devices without needing to log into each firewall to understand rules. Another important feature is risk and rule analysis, which highlights risky, unused, shadow, duplicate, and overly permissive rules automatically, saving huge time on manual audits and helping reduce the attack surface. Compliance reporting is also a key feature, with built-in reports for standards such as PCI DSS, ISO 27001, and NIST, ready for auditors and saving weeks of work generating and validating evidence. Additionally, rule cleanup or recertification workflows allow assignment of rules to owners for validation and enforcement of governance. Multi-vendor support is significant as FireMon Security Manager works across various firewalls such as Palo Alto, Fortinet, Cisco, Check Point, and SonicWall. Policy automation is one of the most critical features, as it automates repetitive tasks such as rule assessment, reporting, and compliance snapshots, reducing manual work weekly or monthly.

I rely the most on the policy risk and rule analysis feature of FireMon Security Manager, as this is the most practical and high-impact feature on a day-to-day basis. It quickly shows unused rules, overly permissive rules, shadow rules, and duplicate rules across all firewalls. Instead of manually reviewing thousands of rules, FireMon Security Manager gives a clear prioritized view of what is actually risky or unnecessary, which directly helps in reducing the attack surface, preparing for audits, and keeping the rule base clean without spending days on manual checks. The risk and rule analysis feature is the most valuable, saving time, reducing human errors, and continuously improving the security posture.

One thing that stands out about FireMon Security Manager is how much visibility and control it provides over complex multi-vendor firewall environments, which really changes policy management from a reactive task to a more proactive and governed process.

I wish to see deeper and more customizable reporting and dashboards, as while the standard reports are useful for audits, operational teams sometimes need real-time, flexible views without exporting data. Tighter integrations with ticketing and change management tools would also enhance the workflow from request to implementation. FireMon Security Manager is excellent for policy governance and risk reduction, but better real-time dashboards and stronger workflow integrations would make it even more powerful for daily operations.

There are one or two areas where FireMon Security Manager could be improved to make it even stronger. While FireMon Security Manager overall delivers solid governance and risk insight, it would benefit from more flexible dashboards and deeper integrations to reduce manual steps and improve visibility without relying on external tools.

I rate FireMon Security Manager an 8 out of 10. It is a strong tool for firewall policy management, risk analysis, and compliance, clearly improving our audit process and policy governance. The reason I do not give it a 9 out of 10 is mainly because the dashboard could be more flexible and integration with the firewalls could be smoother. FireMon Security Manager is a reliable and high-value platform for managing and governing firewall policies, especially in a multi-vendor environment, though a few areas can still be improved.

I have been in my current field for more than six years.

FireMon Security Manager has been stable and reliable in our experience. We have not experienced any major crashes, data losses, or serious outages. It runs consistently during day-to-day operations, including policy analysis, reporting, and change tracking. While we do regular maintenance and upgrades during planned windows as any enterprise tool would require, there has been no major technical issues or unplanned downtimes. FireMon Security Manager has maintained steady performance even when scanning multiple firewalls and large rule pages.

FireMon Security Manager's scalability is good and practical for most enterprise environments. It handles increasing workloads and growing numbers of firewalls quite well, provided the underlying infrastructure such as CPU, memory, and database is sized correctly. We started with a moderate number of firewalls and added more over time without any performance degradation. Reports, risk scans, and compliance checks continue to run reliably as the device count increases. The key to scalability is the platform's sizing and how we use it in our environment; larger rule bases and more frequent scans may benefit from additional resources. Proper database maintenance and archiving also help maintain consistent performance. We have successfully scaled from dozens to a couple of hundred firewall devices, and FireMon Security Manager has kept up well through that growth.

The customer support for FireMon Security Manager has been outstanding in our experience. We have interacted with their support team a few times for setup questions and minor tuning issues, with responses being quick, knowledgeable, and very helpful. Issues were understood quickly and resolved without unnecessary back and forth.

We did not use a different and dedicated solution before FireMon Security Manager. Most of our work was done manually using native firewall management tools and spreadsheets for reviews and audits, which was time-consuming and error-prone. We adopted FireMon Security Manager to centralize policy management, automate analysis, and improve audit readiness, shifting from a manual process to FireMon Security Manager for saving time, reducing risk, and establishing proper governance in firewall policy management.

Our experience with FireMon Security Manager pricing, setup cost, and licensing has been reliable but not impressive or inexpensive. FireMon Security Manager is typically licensed based on the number of devices or policy targets you connect, such as firewalls and routers, rather than by the seat. This model makes sense for a multi-vendor environment, but costs can scale up quickly if you have hundreds of firewalls. The subscription pricing includes access to the platform and updates, but advanced modules or plugins, such as compliance packs or integrations, may require additional licensing. The initial setup is not trivial; it takes a few days to onboard all firewalls, configure connectors, and tune rule analysis baseline. Initial consulting or professional services can help speed this up, but that adds to startup cost. Once setup and baseline are done, ongoing effort is low and valuable. The cost for us is justified by the audit time saving and policy cleanup efficiency FireMon Security Manager delivers.

We have seen a major return on investment with FireMon Security Manager, especially concerning time saved and risk reductions, though this is not always captured in hard dollar figures. Before FireMon Security Manager, preparing for quarterly or annual audits meant manual reviews, cross-checking rules in spreadsheets, and building documentation, typically involving 30 to 40 engineers per audit cycle. After implementing FireMon Security Manager, policy risk reports, compliance reports, and anomalies are generated automatically, which reduces audit preparation down to 15 to 18 hours per cycle, saving about 40 to 50% of time just on audit-related efforts. Additionally, FireMon Security Manager's risk analysis helps us identify and remove hundreds of unused or risky rules within a week instead of months, thereby minimizing misconfiguration risk, lowering troubleshooting efforts, and strengthening overall security posture. While it is challenging to quantify risk reductions in monetary terms, the improvements in audit and compliance review are direct and visible. The same team now accomplishes more with less manual effort focusing on policy optimization, impact analysis, and governance flow instead of manual rule validation. In one audit cycle, preparation used to take 36 hours, which FireMon Security Manager has reduced to 16 hours, saving 20 hours for one cycle. With four audits per year, that leads to up to 80 hours saved annually, which might even exceed 100 hours. Assuming an engineer's cost per hour, this easily covers a portion of the FireMon Security Manager subscription over time. FireMon Security Manager delivers ROI through significant time savings, cleaner rule bases, and improved risk visibility, especially for organizations with complex multi-vendor firewalls.

We compare total engineer hours spent before versus after FireMon Security Manager and the number of days needed to get audit-ready reports, which explains the 40 to 50% time reductions based on practical ops-based measurement, not just a theoretical number. FireMon Security Manager clearly cuts audit preparation efforts almost in half by automating analysis and reporting.

The 40 to 50% reduction in audit preparation time was mainly based on hours spent by the team. Before FireMon Security Manager, audit preparation involved manually logging into multiple firewalls, exporting rules, checking them in spreadsheets, and building reports, with typically two to three engineers spending several days on this. After FireMon Security Manager, most of this work is automated; risk analysis, compliance checks, and reports are generated directly from the tool. The same preparation now usually takes about half an hour, sometimes even less.

We did a quick market scan before choosing FireMon Security Manager, but we did not find any other solution that met our requirements as effectively for multi-vendor firewall policy management and compliance. Hence, we did not seriously evaluate or shortlist another product.

My main advice for others looking into using FireMon Security Manager is to clearly define your policy management and compliance goals before deployment. This tool is powerful, and you will get the most value from it if you plan its use for risk analysis, rule cleanup, and audit workflows from day one. It is also important to size the platform properly based on the number of devices and rule base size, investing some time in initial tuning and baseline—this upfront effort pays off later with accurate reports and meaningful risk insights. Finally, involve both security and network teams early, ensuring FireMon Security Manager becomes a part of the regular change and governance process rather than just an audit tool.

One thing that stands out about FireMon Security Manager is how much visibility and control it provides over complex multi-vendor firewall environments, which really changes policy management from a reactive task to a more proactive and governed process. I rate this product an 8 out of 10.

Private Cloud

Other

My main use case was managing and reviewing firewall security policies across multiple firewalls from a single console. I primarily used FireMon Security Manager to identify overly permissive rules, generate compliance reports, and improve visibility into firewall configurations. It helped make firewall policy reviews more organized and reduced the manual effort involved in checking rule changes.

A practical example was during a firewall rule cleanup exercise. We had to review existing rules before introducing a new application. Instead of checking each firewall manually, I used FireMon Security Manager to identify unused and overly permissive rules, verify compliance with other security standards, and generate a summary report that made it much easier to decide which rules could be removed or modified, reducing manual review time and helping avoid unnecessary security risks.

The best features FireMon Security Manager offers for me are centralized firewall policy management, compliance reporting, and policy analysis. I also appreciate its ability to identify unused or overly permissive firewall rules and provide clear visibility into policy changes. Those features make firewall reviews more efficient and help reduce manual effort while improving overall security governance.

The centralized firewall policy management feature had the biggest impact for me. Before using FireMon Security Manager, reviewing firewall rules across multiple devices was more time-consuming because you had to check each firewall separately. With FireMon Security Manager, I could view policies from one dashboard, quickly identify unused or overly permissive rules, and generate reports for review. It made policy reviews more efficient, improved visibility, and reduced the chance of missing configuration issues during firewall audits or change reviews.

FireMon Security Manager has positively impacted my organization by improving visibility into our firewall environment and making policy reviews more efficient. FireMon Security Manager helped us identify unnecessary or risky firewall rules, simplify compliance reporting, and reduce the time spent on manual reviews. As a result, the team could make policy changes with greater confidence while maintaining a stronger security posture.

One area for improvement I see for FireMon Security Manager would be the user interface. While it is powerful, some workflows can feel complex for new users and require a learning curve. I also think the dashboard could be more customizable, and having more built-in automation and guided policy recommendations would make day-to-day firewall management even more efficient.

I would also like to see FireMon Security Manager have deeper integrations with more third-party security platforms and SIEM tools to simplify workflows. Improving the search and filtering capabilities for large firewall environments would also make it easier to locate specific rules or policy changes quickly. Overall, it is a strong product, but those enhancements would improve the user experience even further.

If I had to suggest one additional improvement, it would be better out-of-the-box dashboards with more customizable reports for different teams. That would make it easier for administrators, security analysts, and auditors to focus on the information most relevant to their roles. Other than that, I was satisfied with the platform.

I have been working in this field for about a year and a half through my internship, university projects, and hands-on cybersecurity labs.

FireMon Security Manager was stable throughout our evaluation. It performed consistently during firewall policy analysis, reporting, and compliance checks without any major issues. We did not experience any significant outages or reliability problems, so I would consider it a dependable platform for day-to-day firewall management.

I found FireMon Security Manager to be highly scalable. During our evaluation, it handled multiple firewalls and policy data from different environments through a single console without any noticeable performance issues. I think it scales well as an organization grows because it centralizes policy management and compliance reporting, making it easier to manage larger and more complex network environments.

I did not have a direct interaction with FireMon Security Manager's customer support, so I cannot fairly rate it. Any support requests were handled by another team. Based on my experience using the product, the available documentation and built-in guidance were sufficient for the tasks I performed, so I did not personally need to contact support.

We did not use another dedicated firewall policy management solution before FireMon Security Manager. Most of our work was done manually using the native firewall management tools along with spreadsheets and internal documentation to track policy changes. We chose FireMon Security Manager because we needed centralized visibility, automated compliance reporting, and more efficient policy analysis, which significantly reduced the manual effort involved.

We did see a return in terms of productivity, although I do not have exact financial figures because this was an evaluation environment. Firewall policy reviews were about 30 to 40 percent faster, compliance reports that previously took close to an hour could be generated in just a few minutes, and the team spent much less time on manual rule validation.

We briefly looked at a few alternatives, including AlgoSec and Tufin. During our evaluation, FireMon Security Manager stood out because of its centralized policy management, clear compliance reporting, and ease of analyzing firewall rules.

I rate FireMon Security Manager an eight out of ten. It is a strong solution for firewall policy management, compliance, and security visibility, and it significantly reduces the effort required for policy reviews. The reason I did not give it a ten is that I think the user interface could be more intuitive, and I would like to see more built-in automation and broader integration with third-party security tools.

I chose eight out of ten because FireMon Security Manager delivers strong value in the areas that matter most: centralized firewall policy management, compliance reporting, and policy analysis. It made firewall reviews faster and gave better visibility into security policies. The reason I did not rate it higher is that the interface has a learning curve, and I think there is room for improvement in workflow automation, dashboard customization, and third-party integrations. With those enhancements, it could easily be a nine or even a ten.

From what I observed, FireMon Security Manager's governance and security were strong. The platform provides role-based access controls, detailed audit trails, and policy change tracking, which help maintain accountability and support compliance. I did not specifically evaluate any AI-driven capabilities, so I cannot comment on the AI itself, but the overall governance and security controls of the platform appeared to be well-designed.

FireMon Security Manager integrates into our broader security stack alongside our firewalls, Microsoft Azure environment, and our SIEM platforms for monitoring and reporting. It became the central point for firewall policy analysis and compliance reviews. In day-to-day operations, it reduced the amount of manual policy checking, made change reviews faster, and gave the team a single place to review firewall configurations. Based on our evaluation, policy review tasks were about 30 to 40 percent faster. It allowed the team to spend more time on security analysis instead of manual validation.

During one policy review, a proposed firewall change included a broad allow-any rule for a troubleshooting request. FireMon Security Manager flagged it as overly permissive and highlighted that it violated our internal policy standards. After reviewing the recommendation, we replaced it with a much more specific rule that allowed only the required application and source addresses. That prevented an unnecessary expansion of network access while still meeting the business requirement.

We used FireMon Security Manager's reporting capabilities to generate compliance and firewall policy reports before security reviews and audit discussions. The report highlighted policy violations, risky or unused rules, and recent configuration changes in a clear format. That made it easier to explain our security posture to stakeholders and demonstrate that firewall policies were being reviewed and managed consistently without having to prepare reports manually.

Compared to manual methods, FireMon Security Manager made managing a more complex firewall environment much easier. Instead of reviewing policies device by device or maintaining spreadsheets, we had a centralized view of firewall rules, policy changes, and compliance status.

The biggest win was the centralized visibility into firewall policies. It significantly reduced the time spent reviewing rules, improved compliance reporting, and helped us identify risky or unnecessary policies much faster than our previous manual process.

My advice would be to clearly understand your firewall environment and policy management goals before deployment. Take time to organize and review your existing firewall rules first because you will get the most value from FireMon Security Manager when your policies are well-documented.

Overall, I had a positive experience with FireMon Security Manager. Its biggest strengths are centralized firewall policy management, compliance reporting, and policy analysis, all of which helped reduce manual effort and improve visibility. While there is room to improve the user interface and automation, I think it is a solid solution for organizations that need better control over complex firewall environments. I rate FireMon Security Manager an eight out of ten.

Hybrid Cloud

Microsoft Azure

FireMon Security Manager is mainly used for analyzing firewall configuration and rules. It is primarily for firewall analysis and configuration analysis of the firewall.

We work with FireMon Security Manager as a service provider. Our customers have it, but we use FireMon Security Manager on behalf of them.

We use FireMon Security Manager mainly for the on-prem environment, and we primarily use it for our on-prem firewalls.

We are not using FireMon Security Manager for SASE integration right now. We are just using it for firewall management.

We do use FireMon Security Manager for real-time compliance management primarily for that purpose, so we do have a positive impression of that because it can map the compliance against various standards available such as ISO 27001 or PCI DSS. That helps us in automating that compliance check on these firewalls.

We are not using FireMon Security Manager in an automatic fashion for compliance checks. We run it manually and run the tool periodically. We have not kept it for continuous scanning of the environment. However, whenever we run the tool, we do get a warning or an alert saying that this is a firewall rule that will potentially violate, for example, PCI DSS compliance.

FireMon Security Manager does affect our cleanup of firewall rules in a large enterprise environment because it helps us in identifying which rules are remaining unused since the previous FireMon Security Manager check. That helps us in prioritizing and saying that these are so many unused rules and why don't we clean them up.

One advantage of FireMon Security Manager is that it analyzes the firewall configuration against known standards. If there is a known firewall standard or configuration standard in NIST or any of the audit or compliance requirements such as PCI or ISO 27001, it can analyze the firewall configuration against those standards and give us a report of where we are missing so that we can comply with those standards as well.

FireMon Security Manager can also connect to multiple types of firewalls with different vendor firewalls. We use a multi-vendor firewall environment, and the advantage of FireMon Security Manager is that it can connect to different vendors that we use in the environment.

FireMon Security Manager helps to prioritize risks and prioritize fixes. When it points out errors or misconfigurations, it gives us a rating saying that this is a high critical misconfiguration which needs to be fixed first, versus a low-rating misconfiguration which might have a less or reduced impact and which we can fix later on.

We do observe a decrease in errors and misconfigurations that increase risk in the environment with FireMon Security Manager. It points out errors, so we mainly use it for that purpose. We don't use it to manage the firewall, but we use it for analyzing the firewall configuration that will reduce the risk and any kind of errors that are there in the firewall. We could say there is about a twenty percent decrease in errors and misconfigurations due to FireMon Security Manager. The reason is we were using some other tool earlier, so we had done quite a bit of improvements on the firewall. Once we introduced FireMon Security Manager, it found new areas where we could improve and there is about a twenty percent improvement.

FireMon Security Manager does affect our compliance reporting processes. It helps us automate reporting and prioritize all those compliances. This way, it is quite useful.

I think there are some disadvantages and areas for improvement. What is limited or has no capability in FireMon Security Manager is integration with all the cloud-based firewall native vendors. For example, in Azure or in AWS, if you have a Palo Alto firewall, FireMon Security Manager will work fine. However, if you use Azure's own native firewall or AWS's own native firewall capabilities, FireMon Security Manager does not have the ability to analyze the policy of such native cloud-based firewalls. That is a disadvantage that we are seeing because we are also using more and more native services rather than going for third-party services in the cloud environment.

The second disadvantage we see with FireMon Security Manager is some vendors which are now becoming popular, such as Cato Networks. We have one customer who uses Cato quite extensively, but we are not able to use FireMon Security Manager for them to do the policy analysis because it doesn't work with Cato.

I started working with FireMon Security Manager approximately a year ago.

Stability-wise, FireMon Security Manager is not a problem. It is approximately a ninety-nine percent stable product.

We haven't used FireMon Security Manager in a highly scalable manner, so when we factored it in, we haven't really tested its scalability. I am not aware of the scalability of the product or whether it can support thousands of firewalls. We do use it for hundreds of firewalls today, but not in the thousands. I am not sure on scalability.

Customer service from FireMon Security Manager is good in terms of responding to any issues or any errors that we face. In terms of using the product as is and its customer support, I would say it is good enough. I would rate support at about an eight on the scale from zero to ten, with ten being the best.

We were using some other tool earlier. We had done quite a bit of improvements on the firewall. Once we introduced FireMon Security Manager, it found new areas where we could improve and there was about a twenty percent improvement.

Deploying FireMon Security Manager is quite easy to deploy.

We bought FireMon Security Manager directly from a reseller. We did not buy it through AWS Marketplace.

FireMon Security Manager is worth buying and worth its money in terms of return on investment. As long as you have the firewalls in your environment which are supported by FireMon Security Manager, it is worth the investment.

It does save time and money both because otherwise you would have to review the firewall configuration by hand or manually, whereas FireMon Security Manager automates it. In terms of money, you will have to reduce the number of people who are involved in the firewall review. FireMon Security Manager is also a lower-cost product than AlgoSec.

I am comparing FireMon Security Manager to a product such as AlgoSec, something which operates in the same market. AlgoSec is one big example where we did an evaluation.

Cost-wise, it is very competitive if I compare it with its peers. The pros are that in terms of the tool capability, it is as good as any of the best of the market tools and cost-wise, it is lower. FireMon Security Manager is affordable compared to its competitors.

Time-wise, I am not sure how to measure it, but from a procurement perspective, because this is procured by the customer directly, we don't have visibility in terms of what was used and what was the cost of AlgoSec versus FireMon Security Manager. However, from a product perspective, our recommendation was that both were equal, and FireMon Security Manager slightly better. Cost-wise when FireMon Security Manager was better, I think the client went with FireMon Security Manager itself.

When I mentioned time saving, I meant that it saves time for when accurately creating, approving, and deploying firewall policies.

What organizations should remember is primarily to look at the compatibility of FireMon Security Manager with the firewalls that they have in their respective environments. In their environment, if they have only, for example, Palo Alto, Cisco, or FortiGate firewalls, and all of them are supported by FireMon Security Manager, however, if they use a very unusual firewall or a cloud-native firewall, they should check whether FireMon Security Manager supports those firewalls and then take a call accordingly. My overall rating for this product is eight out of ten.

Our main use case for FireMon Security Manager is centralized firewall policies, visibility, and risk management in a large environment with close to 200 firewalls. FireMon Security Manager helps us identify risky or unused rules, maintain compliance, and support audit without manual policy review.

On a day-to-day basis, we use FireMon Security Manager to review firewall rules, changes, and identify unused or risky rules. For example, before or after a change window, we run policy analysis to check overly permissive access and confirm whether the rule is still required. This helps us reduce risk and stay audit-ready in the large environment. We use FireMon Security Manager daily to analyze rule changes, spot unused rules, and prepare clean reports for audit without manual checks.

FireMon Security Manager helps standardize firewall policies and review access. Instead of relying on individual firewall expertise, we use FireMon Security Manager as a single source of truth to consistently assess risk, track changes, and support compliance in large, regulated environments.

The best features of FireMon Security Manager are centralized firewall visibility, policy risk analysis, and compliance reporting. It provides a single view across all firewalls, helps quickly identify risks and unused rules, and generates audit-ready reports, which is extremely useful in large, regulated environments. Change tracking is also very helpful, as it shows who changed what and when, reducing the risk of misconfiguration.

The change tracking feature has helped our team by giving clear visibility into what rule was changed, when it was changed, and whether it introduced any risk. This has reduced troubleshooting time and helped us quickly validate changes during audit and incident review. Policy risk analysis and unused rule identification are also very valuable, especially in large environments, as they have helped us continuously reduce risk and keep firewall policies clean.

The reporting and dashboard visibility are worth highlighting. FireMon Security Manager makes it easy to share clear, understandable reports with auditors and management, which saves time and reduces back-and-forth during review.

FireMon Security Manager has had a very positive impact on our organization by reducing manual effort and improving overall security posture. It helped us gain centralized visibility across a large firewall environment, reduce risk and unused rules, and significantly shorten the time required for audit and policy reviews. It has also improved change control and accountability, which reduced configuration errors and operational risk.

FireMon Security Manager is a strong platform. However, it could be improved with a more intuitive user interface and faster initial onboarding for new users. Simplifying some workflows and dashboards would help teams get value more quickly, especially in large environments. More guided recommendations for rule cleanup would also make day-to-day operations even easier.

I have been using FireMon Security Manager for the last 1.5 years.

I have not faced any issues with FireMon Security Manager. It has been more than one year and the solution is still running perfectly fine.

We are managing a large number of firewalls with the client where the solution is installed. As the environment grew, FireMon Security Manager continued to handle policy analysis, reporting, and change tracking reliably without performance issues. Even with the increased workload, the platform remained stable and consistent, which is critical in large, regulated environments.

The customer support is outstanding.

We have seen a clear return on investment with FireMon Security Manager. It significantly reduced the time spent on manual firewall policy review and audit preparation. Tasks that earlier required multiple team members and several days can now be handled by fewer people in a much shorter time. The biggest ROI has been time savings and operational efficiency rather than direct cost savings. It allows the same team to manage a much larger firewall environment without increasing headcount.

Since using FireMon Security Manager, we have seen a clear reduction in manual effort. Firewall policy reviews and audit preparation that earlier took days now take a few hours, especially when dealing with a large number of firewalls. This has helped the team focus more on analysis and decision-making instead of manual rule checking. It significantly reduced the time spent on manual policy reviews and audit preparation, making the process faster and more efficient.

Our experience with FireMon Security Manager's pricing and licensing is that it is on the higher side, but justified for a large, regulated environment. The setup cost and licensing made sense given the scale, compliance requirements, and the value it delivers in reducing manual effort and audit risk.

I evaluated several solutions available in the market, including Tufin and AlgoSec. However, I would not recommend any other solution besides FireMon Security Manager.

My advice would be to clearly understand your firewall scale and compliance requirements before deployment. FireMon Security Manager delivers the most value in large or regulated environments, so proper planning, clean onboarding, and stakeholder alignment will help you get benefits faster. It works best at scale, so plan the deployment properly and align it with audit and compliance goals. FireMon Security Manager is a strong choice for large environments, especially where compliance and audit readiness are critical. I rate this solution an 8 overall.

On-premises

The main case of FireMon Security Manager is firewall policy management and compliance.

For an example, an application team requested access from a vendor network to an internal server. Before approving it, I used FireMon Security Manager to simulate the rule and analyze the risk. It showed that the requested access was too broad and would violate our internal policy. Using FireMon Security Manager, I identified the overly permissive access, narrowed the rule to a specific source, destination, and the port, checked the rule conflict and the redundancy, verified it met compliance requirements. Then I approved the least privilege rule instead of the original one. This prevented unnecessary exposure and kept the firewall policy clean.

Here are the best features which are offered by FireMon Security Manager: firewall policy analysis and optimization, risk impact and analysis, change management automation, compliance monitoring and reporting, and visibility across multiple firewalls.

Policy analysis and risk impact made the biggest difference for my team. It quickly identifies overly permissive or unused firewall rules, helping us reduce risk, clean up policies, and save time on manual reviews.

FireMon Security Manager has improved our organization by reducing risk, saving time, and improving compliance. It helps us quickly identify overly permissive rules, automate policy reviews, and maintain audit-ready reports. As a result, firewall changes are safer, manual effort is lower, and the overall visibility across the network is much better.

We saw about a forty to fifty percent reduction in the time spent on manual firewall rules reviews after using FireMon Security Manager. Compliance also improved. Audit preparation time dropped by sixty percent. Additionally, we reduced overly permissive or unused rules by roughly twenty-five to thirty percent.

The UI can be improved, including UI performance and navigation, and faster data refresh. Easier initial setup would be beneficial for new users. These areas can be improved by FireMon Security Manager.

I have been working in my current field for almost five years.

FireMon Security Manager is very stable.

Scalability is very good.

Customer support is moderate.

I chose eight out of ten because FireMon Security Manager delivers strong value in the policy analysis, risk visibility, and the compliance automation. It significantly reduced manual efforts, improves firewall rules, and makes audits much easier.

I have a partner business relationship with this vendor.

My experience with pricing and licensing for FireMon Security Manager was generally positive, but on the higher side. The cost is typically subscription-based and depends on the number of devices or firewalls being managed. It was on the higher side.

My advice is that if you are not an enterprise customer, then this solution is particularly not for a small customer because it is a use case for the enterprise customer, such as Bajaj, banks, and similar organizations. FireMon Security Manager is not the right fit for smaller organizations. I would rate FireMon Security Manager eight out of ten.

On-premises

My main use case for FireMon Security Manager is continuous firewall policy monitoring and compliance management, and I typically use this solution for analyzing firewall rules across multiple firewalls such as FortiGate or Palo Alto, identifying risky or non-compliant configurations and maintaining a clean and optimized rule base.

A specific example of how I use FireMon Security Manager for firewall policy monitoring or compliance management is that I regularly audit firewall rules. FireMon scans policies across devices, highlights unused rules, overly permissive access, and any rule that violates compliance, allowing me to review and clean up rules based on its recommendations.

The best feature FireMon Security Manager offers is the policy analysis feature, as it deeply inspects the firewall rules, and it also works with different firewall brands, making these two things very useful.

FireMon's deep inspection of firewall rules helps me in my daily work by deeply analyzing the firewall rules of all the firewalls integrated with the solution, evaluating the logic and behavior of the rule base, including rule usage, such as rule relationships and whether any shadow or redundant or overlapping rules are present, and it provides the risk level of open ports defined by any rule or exposure, making its compatibility with different firewall brands significantly beneficial for my team.

FireMon Security Manager has positively impacted my organization by being helpful in analyzing firewall policies, better controlling risks, reducing risky configurations, and improving the compliance readiness environment.

It improved compliance readiness as I have seen a better environment and found the solution enables faster policy reviews, typically involving less time in this solution because it works automatically, meaning I do not have to do anything manually.

FireMon Security Manager is working well and providing great features with full visibility across all firewalls, so I do not see any improvement needed at this time.

I have two years of experience using FireMon Security Manager.

FireMon Security Manager is stable.

FireMon Security Manager's scalability is excellent, as it can handle multiple firewalls at a time.

Customer support is excellent in their technical knowledge, and they are able to solve complex technical issues.

I would rate customer support a nine out of ten.

I have not switched from a different solution, as I have been using FireMon Security Manager since the beginning.

I purchased FireMon Security Manager through the AWS Marketplace.

I have seen a great return on investment, as I am able to save time for my team along with money savings.

I have seen that audit preparation has been reduced to a few hours compared to previously taking days or weeks, resulting in almost 60 to 70% time savings, and it has reduced the efforts in rule analysis and cleanup by 40 to 50%.

I have not evaluated other options before choosing FireMon Security Manager.

My advice to others looking into using FireMon Security Manager is that any mid-sized organization with a hybrid environment, especially those with multi-vendor firewalls, should consider this solution as a game changer, as it helps in compliance readiness, policy analysis, or policy cleanup, so I highly recommend considering this solution as one of the best options. I would rate this solution an eight out of ten overall.

Public Cloud

Amazon Web Services (AWS)

FireMon Security Manager is used to centrally manage multiple firewalls, enforce security policies, monitor threats, and simplify day-to-day firewall administration.

FireMon Security Manager allows us to manage multiple firewalls from a single console, making policy updates and monitoring very easy, and troubleshooting much faster and more consistent.

FireMon Security Manager is deployed in our organization on-premises within our data center.

The best features of FireMon Security Manager are centralized policy management and security policy analysis, which is very useful, along with compliance reporting and clear visibility across all the managed firewalls. These features help us to simplify firewall management and improve security.

FireMon Security Manager has positively impacted our organization by improving our firewall management by increasing visibility, reducing configuration errors, streamlining policy changes, and helping maintain compliance.

FireMon Security Manager could be improved with a more user-friendly interface. Otherwise, the performance and the deployment are perfect.

We have not switched solutions; we started with FireMon Security Manager only.

FireMon Security Manager is a pretty stable solution.

Scalability-wise, FireMon Security Manager is a very good solution that can handle our organization's growth.

Customer support for FireMon Security Manager is very supportive, and they are able to provide support and troubleshoot issues at any time.

We have not evaluated other options before choosing FireMon Security Manager.

FireMon Security Manager provides a very good return on investment because we are able to save our time and money.

FireMon Security Manager helps reduce configuration errors by identifying duplicate, unused, and overly permissive firewall rules before changes are implemented. This reduces the risk of misconfiguration and keeps security policies consistent across all firewalls.

Regarding FireMon Security Manager's AI capabilities, its governance and security appear very well-designed. They provide controlled access, support compliance, and policy validation, which is very helpful.

The data that FireMon Security Manager provides is very accurate and reliable, with reliable output.

I recommend clearly defining your firewall management and compliance requirements before deploying FireMon Security Manager and taking advantage of its policy analysis and compliance features. This will help the organization to achieve a compliance-ready environment and gain proper visibility.

I rate this product 9 out of 10.

On-premises

FireMon Security Manager is a highly intelligent and useful device that consolidates all our security policies, including those for Zscaler proxies, into a single console. This centralized view eliminates gaps and inconsistencies between policies, simplifying policy review and analysis.

FireMon Security Manager is excellent for real-time compliance management. It allows us to quickly retrieve any policy needed for testing and easily analyze it for loopholes. If a loophole exists, FireMon provides comprehensive details within the policy manager.

It alerts us to firewall rule additions or changes that violate compliance policies. It supports various firewall platforms, including Checkpoint, Zscaler, Fortinet, Cisco, and AWS, and provides centralized management for all configured policies through a single console.

FireMon Security Manager provides many features, like whether my firewall is compatible with required standards such as NTP and SNMP. Each compliance included in our RFPs is shown in the UI of FireMon. It gives robust and clear dashboards, making it easier to understand risks because the policies have ratings showing usage, and the number of hit attacks.

It streamlines our compliance reporting processes by providing comprehensive risk and compliance assessments. It offers a range of features, including verification of firewall compatibility with protocols like NTP and SNMP, and detection of signal charges. FireMon effectively addresses all compliance requirements outlined in our RFPs. For instance, it can determine if firewalls or proxies within a stack are configured in Secure Mode or Active-Active mode. FireMon Security Manager enables us to generate reports on all these aspects, ensuring thorough compliance monitoring and documentation.

FireMon Security Manager is robust and can help automate firewall policy changes across large multi-vendor enterprise environments.

FireMon Security Manager helps automate firewall policy changes across various environments, including on-premises, cloud, hybrid, SASE, and SD-WAN. It also simplifies cleaning up firewall rules in our environment.

The time required to accurately create, approve, and deploy firewall policy rules has been reduced. Tasks that took 30 minutes can now be completed in just five minutes using FireMon.

FireMon provides immediate visibility into our policies through a robust and clear dashboard, making it easy to identify errors or misconfigurations based on the policy rating.

FireMon Security Manager is a fast and intelligent device that delivers results in under ten seconds, even with thousands of policies. Its user-friendly interface allows for easy viewing and searching of network policies, including proxies, all on one console. By eliminating loopholes between policies, it simplifies review and analysis, while also automating policy changes and supporting multiple vendors. The system provides alerts and notifications for streamlined implementation and features a robust dashboard for clear risk assessment.

Although configuration is not the most difficult aspect of FireMon, a basic understanding of cloud computing and firewall principles is necessary for successful implementation. Therefore, simplifying the configuration process would be a significant improvement.

The support response time has room for improvement.

I have been using FireMon Security Manager in the testing phase for six to seven months.

I would rate the stability of FireMon Security Manager nine out of ten. It provides a stable environment with excellent scalability.

I rate the scalability of FireMon Security Manager a nine out of ten. It offers extensive scalability options, providing more flexibility than other vendors.

The technical support is good, but sometimes it takes some time.

Positive

The deployment required some additional knowledge and took eight to nine days, but my team handled it efficiently.

My team, consisting of around 20 people, handled the deployment because not everyone had access to the firewall policy manager.

Other vendors have policy managers, but they are not as fast as FireMon Security Manager.

I would rate FireMon Security Manager nine out of ten.

I recommend FireMon Security Manager because it consolidates all devices into a structured serial and single port.

On-premises

I use FireMon in my work. I work in security and compliance, so I use it to monitor security and compliance within the firewalls.

The most effective feature is the general reporting on compliance. It has helped me bring all the firewalls into better alignment with the compliance requirements in my environment. The general long-term compliance monitoring has been the most beneficial aspect to me.

For one company I work with, I use Fortinet, and FireMon is not able to understand the zones that Fortinet uses. Part of that compliance piece does not provide me with the necessary information. Another company I work with uses Meraki as a firewall system, and in this case, FireMon can see everything much better and provides me with a fuller report.

I have used the solution for two years.

In terms of stability, FireMon has been stable. I have not had any problems in that regard.

I think the capabilities are good and potentially useful. The issue for me started with Fortinet not being able to see things correctly. It lost its appeal in terms of what it could do for me from a security standpoint, so I do not pay as much attention to it. I use other tools to focus more on the security side of things. If I have the time to look at Meraki, it might handle that better and be much more useful. I understand the concepts behind FireMon and what it does. If it can see and interpret everything correctly, it would do exactly what I want, and it would be very helpful.

Their technical support is an eight out of ten. It is not perfect, but I have high standards because I provide so much technical support within my enterprise. An average or no real appeal would be a five. An eight signifies they are doing a good job. They do not always have the answer, but I cannot expect everyone to always have the answer. As long as they eventually provide the answer, I am happy.

Positive

The setup was not complicated. It was pretty straightforward.

There were not any challenges. It was just straightforward.

Comparatively, FireMon has a very good price and is below the general competition in cost. I have not seen any additional fees beyond the general contract fees for the usage I have. So, I have not encountered any hidden costs.

I rate FireMon a seven out of ten. It is good, but I have not found it as useful as I hoped when I first evaluated it. This is generally because it does not interpret the Fortinet zones correctly, which diminishes its appeal. That is why I rate it a seven. However, looking at the Meraki side, it may do exactly what I expected initially.

Hybrid Cloud

Other

Whenever I have a project or implementation, I use FireMon Security Manager for firewall cleanup or reporting. When I have an assessment project, I need to ensure the complexity of the firewall rules and identify unused rules from my side. It helps me to generate these reports and clean up the firewall itself.

It automatically warns us when new firewall rules, and changes to existing ones, violate compliance policies before they are deployed. This is important because I need to know who made the changes or when a change was made. It helps with tracking.

It has helped with the compliance reporting processes in an effective way.

It has helped to clean up firewall rules to some extent. It is not 100% percent but meets the needs.

It has decreased errors and misconfigurations that increase risk in an environment. There has been about a 90% reduction.

The most valuable feature for me is its capability for cleanup and managing the complexity of security products. It provides me with performance indicators like the complexity of the device itself and also identifies unused rules. In time, it helps in an effective way.

A feature that could be improved is support for more devices, not just the firewall. It would be beneficial if they expanded to other devices like switches, routers, and other security devices, perhaps including proxies. Although I know it supports F5 LTM, supporting more products would be advantageous.

I have been working with it since 2015, but I do not use it frequently. I sometimes implement it for a customer and use it when needed.

Sometimes, there is a problem related to the sizing itself. If we have many devices added or if the firewall complexity is huge, we might experience some lag in processing. It may relate to the hardware specifications.

If we need to add more devices or more FireMon instances, I believe scalability is good from their side.

I have contacted customer service, but it was a long time ago.

Neutral

I have worked with alternatives such as AlgoSec. FireMon is more user-friendly and has better reporting.

The setup is easy. I do not remember the exact details, but it does not take too much time, one or two days maximum.

Its pricing is good. Compared to others, it is not so expensive.

For those looking to buy this solution, it is important to study the devices to be added to ensure correct specifications or hardware. This will satisfy their needs and expectations from FireMon. If there are many devices to be added, they should consider the appropriate hardware specs and VM.

Overall, I would rate this solution a nine out of ten.

On-premises