Armis vs. Barracuda CloudGen Firewall

We started an entirely new network segregation implementation for security policies. Armis was unparalleled at helping us find rogue static IP-assigned devices in our old network and helped us identify what they were so we could tackle the challenge of moving everything to the new network VLANs. Another use case is finding a specific device or a specific user account to track their activity. The layout is phenomenal, and the data is easy to understand and drill down into for further information. The new AVM (Asset Vulnerability Management) section is awesome to help us find the out-of-date devices or other risks on the network to figure out where we are most vulnerable and at risk. If you're looking for a way to have Armis auto patch vulnerabilities - that's only on the radar from what I've heard - but currently, it is an amazing tool for finding and detailing the CVEs and other risks. You can create policies to block specific risky behaviors, but currently, at the time of writing, there isn't any automated patching or remediation to known CVEs found on a device.

Incentivized

The firewalls management is made easy through its very good management software. It has a lot of features such as VPN, ATP, IPS, Real-time log views, Active Directory integration, Virus Scanning of traffic / file downloads, High Availability Failover, Qos / Traffic Shaping, and a nice quick glance dashboard.

Incentivized

• Analyzing Traffic
• Detecting Device Types
• Finding vulnerabilities by pure magic!
• Searching through all the data - intuitive and no programming required!
• Alerts and policies for anything you can imagine
• Reports and dashboards customizable to any extent you can imagine
• Integrates with so many systems and ties all your data together in one screen
• Create automated processes to handle events automatically by event/data/device etc.

Incentivized

• Increased level of network protection against threats.
• Visibility and control of applications that users access.
• URL Filtering to block unauthorized or prohibited websites on the internal corporate network.
• Protection against diverse malware at the edge of the network.
• Firewall redundancy with another backup appliance.

Incentivized

• I've requested integration with Mosyle Manager for our Apple MDM products - it is on the radar but slow going - Mosyle has an API and a free 30-day trial, so implementation shouldn't be difficult - but honestly, other than that - Armis support has been astonishing, and there are so many integrations already - it's small potatoes.
• Considering Armis has all the data collected and parsed - it would be nice to see a back-end system for those of us who are true nerds and want to really dig into the Syslog data and analyze packets directly - however, building some quick queries is probably easier if you know what you are looking for anyway - which is probably why this is a backward way of my own thinking and no fault of Armis at all. They make the interface so easy to use it's not necessary, but it hurts my inner geek.

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

They are very quick to answer the phone and I think I haven’t waited more than 5 minutes in the queue and if you have to hang up they actually call you back when it’s your turn in line. They have a secure tunnel that you can open for them to get into your device and help you with basically anything. It’s pretty magical if you ask me.

Incentivized

Armis is kind of a total conglomeration of a ton of different tools/systems, and depending on how you want to set it up can do almost anything a lot of these other tools can do - and in some cases, even better. It doesn't do software deployment or other things like SCCM I have listed, but the reporting side is so much better than SCCM's interface. As far as data breaches, user/device activity tracking, vulnerability outlook, network scanning, device identification, and agentless miracles of magic - Armis is the king.

Incentivized

We used a much alder Cisco ASA router that was chocking our bandwidth and it couldn’t really be compared. It was clunky and horrible at best. Our WatchGuard was overly complicated and difficult to manage and required a version matching thick client installed locally to manage the firewall. The Barracuda solved a bunch of issues from both of these devices and allows me to really save time and money with its easy to configure the interface and inexpensive yet quality device and interface allow me to feel like I am getting a great value for my security.

Incentivized

• Armis helped with multiple projects saving incalculable time since we've gotten it
• Network analysis is a breeze
• Device traffic reports and alerts is one click easy peasy
• Blocking devices or specific traffic is super easy and helpful - if you have the right integrations for those options

Incentivized

• Really neutral given we came from the x series. The move to the x series was a huge positive in terms of time spent managing and the ability to get what needed to be done, well done. The move to the NG was just the next step.
• I will say the one thing, in terms of value, that is given is the firewall admin application. This one program saves a ton of time in configuration versus using the web-based configuration. You can only pick one, and for me, it's a no brainer - turn the web-based config off and use the app.

Incentivized