Coming October 25: PeerSpot Awards will be announced! Learn more
Miriam Tover - PeerSpot reviewer
Service Delivery Manager at PeerSpot (formerly IT Central Station)
  • 0
  • 71

What is your experience regarding pricing and costs for Cisco Firepower NGFW?


We all know it's really hard to get good pricing and cost information.

Please share what you can so you can help your peers.

PeerSpot user
13 Answers
PeerSpot user
Security Architect
Real User
15 October 19

Cisco changed its price model with the new FTD line, where the appliances are a bit cheaper but the licensing is a bit more expensive. But that's not only Cisco, a lot of suppliers are doing that. I don't remember a lot of the licensing for Fortinet and Check Point, but Cisco's pricing is high, at times, for what they provide.

Senior Network Engineer at a consultancy with 1,001-5,000 employees
Real User
15 October 19

The one-time cost is affordable, but the maintenance cost and the Smart Net costs need to be reduced. They're too high. A company like ours, that has about 80 firewalls, has to multiple the maintenance cost per device by 80. Cisco should find a way to provide some kind of enterprise support. We don't want to buy support per unit of equipment. It would be easier for everybody.

Network Administration Lead at Forest County Potawatomi Community
Real User
27 September 19

Our subscription costs, just for the firewalls, is between $400,000 and $500,000 a year. In addition, there is Smart Net, but the subscription base is the most substantial. In an environment like ours where you're only looking at a little over 1,000 users, when you start figuring out it all, it's basically $400 a user per year to license our Cisco firewalls. Cisco is very good. From everything I've seen, I truly believe that they lead the industry in all of this, but you do pay for it.

Dave Cooper - PeerSpot reviewer
Network Engineer at CoVantage Credit Union
Real User
12 September 19

We're going to get to a point, not this year and not the coming year, probably going into 2021, where we're going to want to replace the ASA appliances with either virtuals or actual physicals. But the Firepower series of appliances is not cheap. I just got a quote recently for six firewalls that was in the range of over half-a-million dollars. That's what could push us to look to other vendors, if the price tag is just so up there. I'm using these words "fictitiously," but if it's going to be outlandish, as a customer, we would have to do our due diligence and look at other solutions at that point. In addition to that cost, there are licensing fees for some of the individual things like AMP, the IPS/IDS piece. It depends on what you want to use, such as the SSL piece and the VPN piece, which we don't use.

Managing Director at Fasp
Real User
28 August 19

The price of this solution is not good or bad. It is ok.

Senior Network Support & Presales Engineer at a tech services company with 51-200 employees
Real User
25 August 19

The pricing is overrated. Prices for Cisco equipment are always a little bit higher than other vendors. Customers are always complaining about the high prices of Cisco equipment, so it would be very good if these prices can be lowered down, but that's how it is. Cisco equipment usually has higher prices than its competitors.

Learn what your peers think about Cisco Firepower NGFW Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: September 2022.
632,779 professionals have used our research since 2012.
Girish Vyas - PeerSpot reviewer
Architect - Cloud Serviced at a comms service provider with 10,001+ employees
Real User
Top 20
13 May 19

We normally license on a yearly basis. The hardware procurement cost should be considered. If you're virtual maybe that cost is eradicated and just the licensing cost is applied. If you have hardware the cost must be covered by you. All the shipping charges will be paid by you also. I don't think there are any other hidden charges though.

Al Faruq Ibna Nazim - PeerSpot reviewer
Head of Technology at BDPEER Ltd.
Real User
28 March 19

The license in my country is available to subscribe for three years or one year. We wanted to go with the solutions for embedding a two-year subscription, but this was not possible. The Cisco licensing agreement in Bangladesh is different than the one in India and in Dubai. It is not a problem, but if you want to subscribe to the yearly subscription, the original cost is really high. Also, if you go for an anti-virus, you pay for an additional yearly subscription. When we push customers to implement Cisco solutions, they can manage the subscription cost of Cisco internally to access these important solutions long term. Our clients have been able to secure surprisingly efficient service with the Cisco Firepower NGFW firewall solution.

Ali Abdo - PeerSpot reviewer
Technical Manager at a comms service provider with 1,001-5,000 employees
Real User
28 January 19

It's more expensive than Fortinet and Juniper. The price is high compared to other vendors. In general, for the license, it's not that expensive.

Senior Data Scientist & Analytics at a tech services company with 11-50 employees
Real User
22 January 19

Based on the services that you will get, especially the AMP license, the price is very reasonable. The license system is also good but it's not very impressive. It's a very regular licensing system. They call it a smart license which means that your device will connect to the internet. This is a little bit of a headache for some customers. It doesn't make the customer happy because most of the customers prefer not to connect their firewall or system to the internet.

Technology Associate at a financial services firm with 1-10 employees
Real User
16 August 18

We pay a lot of money for it. For big organizations who are used to throwing around a lot of money for absolutely surety, this would probably be a good fit for them. For the average SME, this particular firewall system, as well as Cisco in general, this product would not be a good fit for them.

Support Engineer at a tech services company with 51-200 employees
30 July 18

It is a great solution for medium or big enterprises, not so much for small businesses, mainly due to the financial costs. Cisco Firepower is a great solution, but it is expensive compared to others that can provide similar benefits for much less.

Assistant Manager (Infrastructure) at SISTIC
09 November 17

Base hardware cost are average. Additional hardware modules are priced higher than the base module. They also offer very clear licensing and pricing.

Related Questions
Steve Chiyenda - PeerSpot reviewer
IT Supervisor at Blantyre Netting Company Limited
May 20, 2022
Hi peers, A week ago I lost my data through the malware from which I failed to recover as the file got corrupted.  Now, I want to work with a firewall and so am looking for suggestions on whether I should purchase Cisco Firepower or Sophos XG. Which one is a good match for an SMB? What would you recommend?
2 out of 3 answers
Bennett Gomonda - PeerSpot reviewer
Pre-Sales Support Engineer at Skyband Corporation
18 May 22
I prefer Sophos. I find it easy to use and it has better features on malware and threat management.
Carlos Roberto Da Silva - PeerSpot reviewer
Pre-Sales Director at 4 IT Solution
19 May 22
I recommend Sophos XGS firewall. It will offer the best solution for malware protection.  Also, I recomend Sophos CIXA with XDR (Sophos Endpoint), so you can use Syncronized Security.
EricHe - PeerSpot reviewer
System and Network Administrator at a insurance company with 1,001-5,000 employees
Nov 02, 2017
I am trying to pick between Palo Alto 5060 or Fortigate FG-1500D. Any input will be much appreciated. We have over 100 branches with non-PA, and non-FG firewalls and we are trying to pick 5 of those to act as a gateway to tunnel all branches of traffic to those firewalls.
See 2 answers
COO/CTO at a pharma/biotech company with 11-50 employees
01 November 17
I have used Fortigates for 6 years. Like you, similar experiences augmented by an additional support subscription due to my early learning curves. What I did not realize was the speed compromises with all the security apps active - if I have a Verizon FiOS true Gig subscription, my speed was tapered down to 100 Mbps or less. That is a 90% reduction. With 6 users multiplied by cell phones accessing the same WiFi, you can imagine the data speeds we were actually working with. So, I picked WatchGuard, the T70 specifically. The data speeds with everything turned on remains near the subscription (1 Gig) and I have the same types of protections as the Fortigate. It is too early to report the reliability and other specs since this has changed only in the last week, but the specs tell me a lot that helped me to understand what I missed on my first go-around with Fortigate. Don't get me wrong, I had zero issues over the last 6 years to Fortigate's credit. However, that speed compromise doesn't work for me. Perhaps I missed something, but my support knows the product and there were no adjustments available, other than turning certain features off. I couldn't afford that security risk, not these days.
MaheshPatel - PeerSpot reviewer
Sr. Corporate Marketing Executive at Amity Infosoft Pvt. Ltd.
02 November 17
my Suggestion is go with FortiGate
Download Free Report
Download our free Cisco Firepower NGFW Firewall Report and get advice and tips from experienced pros sharing their opinions. Updated: September 2022.
632,779 professionals have used our research since 2012.