Cisco ASA 5500-X with FirePOWER Services vs. WatchGuard Network Security

The scenario implemented by our teams was for edge protection. We also created a DMZ network for access to some servers and services. Our firewall has a remote SSL VPN license that allows remote access for several employees working from home or traveling on business. We created web access networks with content filtering, specific application protection with AVC, IPS, and protection against malware and external intruders. Cisco ASA with FirePOWER Services is one of the best solutions in the market that we researched for a long time to protect our data and access from intruders.

Incentivized

Watchguard is well suited for small businesses without significantly complex networks and infrastructure. WatchGuard firewalls perform well on IPv4 networks and offer basic security features that match other vendors that target the small business market. WatchGuard firewalls are less appropriate for mid-sized business and larger. There is limited IPv6 support, and the firmware often lacks some or all of more advanced features that businesses that size often need.

Incentivized

• Cisco ASA 5500-X with FirePOWER Services are very well suited for most environments.
• Cisco ASA 5500-X with FirePOWER Services have a variety of networking features including NextGen, web content filtering, data analysis, high availability failover, packet inspection, context-based ACL, and other features to protect your networks.
• It's easy to deploy and manage.

Incentivized

• Incoming Torrent attempts were blocked, but outgoing (by a user) were permitted. Similarly, other direct attempts were summarily blocked.
• provides full administrative support for analysis of usage and scope.
• strong Wi-Fi support and security - area wi-fi maps
• They think of all the things secure and I don't have to worry about it.
• I have not identified anything else that needs improvement - I am well satisfied.

Incentivized

• URL Filtering feature could be easier to utilize for beginners
• I'd like to see a visual of VPN networks setup and show the functioning or malfunctioning status to assist in making troubleshooting easier
• Recommendations on ACLs for beginners based on their account creation date

Incentivized

• Better integration with VoIP services, such as templates for policies handling traffic for Bria or Asterisk endponts and servers.
• Get webblocker to work without breaking secure websites.
• Lower cost on endpoint agents for antivirus and include application control and webblocker with the agents.
• Make the cost per endpoint with TDR and Netowrk access control lower than the cost of Antivirus licensing that is not integrated.
• Make it easier to set up network access control and VLAN assignment by device, perhaps with templates.
• Get webblocker and application control working with QUIC.

Incentivized

Ever since we installed Cisco ASA 5500-X with FirePOWER Services we have never had to deal with an attack. We can see in the logs almost every day hackers attempting to break into our networks and failing. We also have the ability to blacklist every IP address that attempts to break into our firewalls

Incentivized

I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions

Incentivized

Cisco firepower provides automatation for an organisations security operations to detect and stop the most advanced threats fast. It also assists in preventing attacks in using intelligence and innovative solutions.

Incentivized

Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.

Incentivized

We have never had an outage caused by firewall failure. We have had a few outages caused by the internet failing or cloud applications going offline but never a firewall breaking down. When making changes we have a very strong change control, major software updates are always carried out out of working hours. At places where we have two firewalls in HA, we are able to do upgrades in working ours and the users will never know that an upgrade is taking place, that how great these firewalls are

Incentivized

Availability has always been a strong point of this product, it is rare that watchguard does not have a solution for customers' network monitoring needs.

Incentivized

The Cisco ASA 5500X with Firepower performance needs consideration before deploying. Although the solution is Pay as you grow, adding additional features to the system has a negative impact on overall throughput. I would more like now only to deploy the Cisco FPR units as they have better performance and will last the test of time.

Incentivized

The performance of WatchGuard Network Security is very good, in the years that we have used the solution we have only had a single error and Watchguard itself was able to solve it. Furthermore, when purchasing any product, the partner always evaluates the capacity of the solution to recommend the most appropriate product for our needs.

Incentivized

I would recommend the purchase of the Smartnet 24x7 service in the case of a unit and the Smartnet 8x5NBD in the case of only one appliance installed on site. This service is important to always have the latest firmware updates, corrective updates and especially the hardware warranty and maintenance service in case of problems. The service is done by phone or on the official Cisco website and I can say that it is very good and efficient.

Incentivized

For something that is considered business critical they should be far more responsive. Security isn't something to take lightly in today's work environment and so long as its working you are happy. But when it doesn't and you need that professional assistance, they weren't always there and I ultimately resolved my issues with the help of Google.

Incentivized

We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.

Incentivized

Online training is good for learning how to use the product. It does not teach security strategy because that is not its intent.

Incentivized

We implemented a centralized management of all our Cisco ASA 5500-x with FirePOWER Services so that we can have a holistic view of all our sites in London and other European countries. This also helps when making changes, instead of login on to each firewall we can use Firepower Management Center (FMC) to central deploy changes across all devices

Incentivized

I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.

Incentivized

The network is homogenous to Cisco and the integration with Cisco products is very easy (e.g. Identity Services Engine). As I am a certified engineer in Cisco Security, it feels very easy to handle Cisco products especially as more and more support docs are available across the internet and Cisco portal. The support from Cisco is also on the very next level. Even the community support for issues on the Cisco community is better than the support provided by the different vendor firewalls.

Incentivized

I think the solutions are comparable, but the cloud management piece is critical for MSPs these days. We need to be able to schedule and push out updates as soon as they are stable and ready. Insurance companies and government regulations mandate this.

Incentivized

This product is very scalable since previously everything related to Watchguard was on premises but that has now changed with the inclusion of watchguard cloud. Now the product has evolved to have full control of firewalls at the cloud level.

Incentivized

• As an integrated appliance, we saved costs on getting other security technologies.
• It provided secure access to our remote users, saving costs and time as our users could get access to the network anywhere and anytime.
• Since we have other Cisco devices, integration was seamless.
• Integration with Active Directory meant we did not need to create addition user accounts.

Incentivized

• at least 3-5X a year (that I know of), this device has single-handedly prevented members of our staff from inadvertently connecting to services they did not intend and could have resulted in security disruption
• although you can never rule out human-behaviour-engineered threat, it's helpful to know that our network has a higher level, enterprise-class control and monitoring behind it
• any time our network might be showing signs of abnormal performance, the WatchGuard control panel is the first place I turn to help identify the level of concern. It can quickly set my mind at ease and help to identify the specific device that might be out of compliance

Incentivized