Cisco Firepower 1000 Series vs. Stormshield Network Security

Cisco Firepower 1000 Series is best and required for every organization. It will give you more control [over] incoming and outgoing traffic and more visibility on user traffic. Sandbox is one of the best features [that] provides you [with] deep-level packet scans and gives you multilayered security. It can stop any malware attack on your organization. The support of Cisco is very fast and lots of documentation are available on the Cisco website.

Incentivized

• My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
• Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.

Incentivized

• ACLS in gui are PIA cant see object details
• Objects in ACLs dont show IP addresses
• Have to renames every object to name+ip to make acl GUI useable
• Speed to data can use improvement.
• Health warnings should allow you to resolve you have to dig n search in some cases.

It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall

Incentivized

Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.

Incentivized

At the beginining there were some bugs

Incentivized

Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.

Incentivized

Where's the 0 option... It sucks if you do not have an active Cisco contract. From my experience, trying to get the original batch of encryption licenses added was a nightmare and without it the firewalls are not secure. Just include basic security by default and don't require a registration.

Incentivized

Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.

Incentivized

We use both devices for different purposes. Both have their benefits, which we try to bring to best use in our environment. This makes it hard to compare them. All I can say for sure is, that they work quite well as a team, each leveling out the others flaws.

Incentivized

• This product has kept hackers, malware, and viruses at bay for large hospitals and small alike. Very valuable data can reside behind this so long as it is set up correctly.
• The value is great with SnortV3. Very versatile if you need a hybrid scenario with Multi-Cloud support.

Incentivized