Barracuda CloudGen Firewall vs. Cisco Firepower 2100 Series

The firewalls management is made easy through its very good management software. It has a lot of features such as VPN, ATP, IPS, Real-time log views, Active Directory integration, Virus Scanning of traffic / file downloads, High Availability Failover, Qos / Traffic Shaping, and a nice quick glance dashboard.

Incentivized

The Cisco [Firepower] 2100 [Series] is an easy sell for anyone looking. You already know Cisco excels in the security department, but now that firepower lives right on the box and inline with the rest of the firewall data flow you can save yourself a lot of time and headaches. Unless you cant quite afford Cisco's 2100 line, there's not much reason to go with the competition.

Incentivized

• Increased level of network protection against threats.
• Visibility and control of applications that users access.
• URL Filtering to block unauthorized or prohibited websites on the internal corporate network.
• Protection against diverse malware at the edge of the network.
• Firewall redundancy with another backup appliance.

Incentivized

• Nice HTML5 web interface instead of the old java client
• Many added features over the ASA
• Firepower built in and faster than before

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

• Career-wise very familiar with the ASAs, you know, the previous gen firewalls, Pyxis, ASAs, the CHA. As far as being intuitive, those seem to be far more intuitive to learn and figure out what the features and changes and config management, all that stuff is. With Firepower, it's a learning curve and I feel like I have quite a bit of experience with it, and so does my team, but feels like it's not as intuitive, and trying to make changes just always seems harder for some reason. We've gone to some Cisco security training and all that, but even then it's just harder to work with. The other big thing is, and this is a big gripe of mine, I suppose, that on any other firewall, when we have various different manufacturers, if you make a change, you know, a simple change object, object name gets changed or object is deleted or whatever the simplest of change is, it gets implemented instantly.
• With the Firepower system, you have to deploy the change and it'll take about six or seven minutes for the change to actually take, which is insanely different than any other platform where that change is instantaneous. So let's say if I'm making seven different changes for a troubleshooting job I don't know which one of the seven is gonna fix it, I do one by one by one. I'm like, oh, let me try one change, one second, change, third change, four changes. It's going to take seven deploys. And seven deploys mean it's gonna take an hour of just deploy time. So that is a big, big gripe

Incentivized

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

They are very quick to answer the phone and I think I haven’t waited more than 5 minutes in the queue and if you have to hang up they actually call you back when it’s your turn in line. They have a secure tunnel that you can open for them to get into your device and help you with basically anything. It’s pretty magical if you ask me.

Incentivized

We used a much alder Cisco ASA router that was chocking our bandwidth and it couldn’t really be compared. It was clunky and horrible at best. Our WatchGuard was overly complicated and difficult to manage and required a version matching thick client installed locally to manage the firewall. The Barracuda solved a bunch of issues from both of these devices and allows me to really save time and money with its easy to configure the interface and inexpensive yet quality device and interface allow me to feel like I am getting a great value for my security.

Incentivized

• Really neutral given we came from the x series. The move to the x series was a huge positive in terms of time spent managing and the ability to get what needed to be done, well done. The move to the NG was just the next step.
• I will say the one thing, in terms of value, that is given is the firewall admin application. This one program saves a ton of time in configuration versus using the web-based configuration. You can only pick one, and for me, it's a no brainer - turn the web-based config off and use the app.

Incentivized

• It's keeping threats out like a firewall should. Definitely cost wise it is at a higher cost center than other alternatives. Especially when it comes to licensing. Cisco is generally the higher, for perhaps, definitely for good reason, right? I mean, definitely positive impact as far as working as it should that's at cost.

Incentivized