I often work with financial sector companies such as banks as well as retail organizations.
Security Consultant at IKUSI
Good integration with helpful technical support and very good administration capabilities
Pros and Cons
- "The solution offers very easy configurations."
- "The initial setup can be a bit complex for those unfamiliar with the solution."
What is our primary use case?
What is most valuable?
The solution offers very easy configurations.
The administration of the solution is very good.
The product integrates well with other products.
What needs improvement?
The initial setup can be a bit complex for those unfamiliar with the solution.
There are better solutions in terms of border security. Palo Alto, for example, seems to be a bit more advanced.
The cost of the solution is very high. Fortinet, as an example, has good pricing, whereas Cisco has very high costs in comparison.
For how long have I used the solution?
We've used the solution recently. We've used it at least over the last 12 months or so.
Buyer's Guide
Cisco Secure Firewall
October 2025

Learn what your peers think about Cisco Secure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
868,787 professionals have used our research since 2012.
What do I think about the stability of the solution?
The stability of the solution is pretty good. I don't recall having issues with this aspect of the solution.
What do I think about the scalability of the solution?
This particular product does not have high availability and therefore scalability is limited.
You need a pretty sizable solution for a center.
We have about 300 clients using this solution, and therefore the amount of people on the solution is very high, however, I don't have the exact number of users across all clients. For solutions providers, we have IT solutions for maybe around 5,000 users.
How are customer service and support?
I have experience working with technical support from Cisco. It's very easy to contact them and talk with them. There were times we worked using email, for example, for communication. We also worked with Cisco engineers in Mexico directly. We're very satisfied with the level of service so far.
Which solution did I use previously and why did I switch?
We also work with Fortinet and Palo Alto, for example. As a reseller, we work with many solutions.
How was the initial setup?
I did not directly implement the solution. I don't have the right type of expertise. You need to know a bit about what you are doing, otherwise, the initial setup is a bit complex.
You may need, for example, a separate management device for this kind of solution. It's quite difficult to handle if you don't have in-depth knowledge.
What's my experience with pricing, setup cost, and licensing?
The cost of the solution is quite high. It's very expensive compared to other options. For example, Fortinet is much more reasonably priced.
What other advice do I have?
I am working for a Cisco seller in Mexico, and we have a relationship with Cisco. We are a gold partner. We ensure that the development is of the proper sizing for our clients.
I would rate the solution at a nine out of ten. We've had a very good experience so far. The only downside is that it's not as advanced as, for example, Palo Alto. That said, if you have the right skills to manipulate the configuration capabilities, Cisco is quite good.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Senior IT Analyst at a insurance company with 51-200 employees
Comparable pricing, stable, with good and responsive technical support
Pros and Cons
- "There are no issues that we are aware of. It does its job silently in the background."
- "The initial setup could be simplified, as it can be complex for new users."
What is our primary use case?
We use this solution for our firewall and intrusion prevention system.
What is most valuable?
The most valuable feature is that I have 16 public IP addresses that tunnel through into servers inside.
There are no issues that we are aware of. It does its job silently in the background.
What needs improvement?
The initial setup could be simplified, as it can be complex for new users.
For how long have I used the solution?
We have been working with this solution for a couple of years.
What do I think about the stability of the solution?
It's stable. If there is ever a problem, it never seems to be the firewall.
What do I think about the scalability of the solution?
This particular model can't quite handle the bandwidth we need. We're actually replacing it shortly with the new higher capacity model.
How are customer service and technical support?
Technical support is good. They are responsive.
How was the initial setup?
The initial setup was somewhat complex at first.
What about the implementation team?
We had help from an integrator, which was Dell. They were helpful.
What's my experience with pricing, setup cost, and licensing?
The price is comparable.
What other advice do I have?
We are just at the beginning of the deployment of Arctic Wolf for managed detection and response. We don't have a lot of information yet, as we are onboarding it now.
We wanted to have someone watching and we couldn't set up the SOC by ourselves because we need six security dedicated people to man it at all times. With a staff of 80, it was too much. We engaged Arctic Wolf to be our 24/7 eyes on the potential risks that are happening. They can alert us and we can deal with it.
We like to use the integrator just to make sure that the firewall is set up correctly. If you don't have people dedicated to the firewall, then you can't do it in-house.
I would rate the Cisco firepower NGFW Firewall a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cisco Secure Firewall
October 2025

Learn what your peers think about Cisco Secure Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
868,787 professionals have used our research since 2012.
Acting Director, Office of Talent Management at a government with 10,001+ employees
The UI needs improvement, as does the SNMP configuration, but the feature set is good
Pros and Cons
- "The feature set is fine and is rarely a problem."
- "Cisco makes horrible UIs, so the interface is something that should be improved."
What is most valuable?
The feature set is fine and is rarely a problem.
What needs improvement?
Cisco makes horrible UIs, so the interface is something that should be improved. Usability is poor and it doesn't matter how good the feature set is. If the UI, whether the command-line interface or GUI, isn't good or isn't usable, then you're going to miss things. You may configure it wrong and you're going to have security issues.
Security vendors have this weird approach where they like to make their UIs a test of manhood, and frankly, that's a waste of my time.
The SNMP implementation is incredibly painful to use.
For how long have I used the solution?
I have been using Cisco Firepower NGFW Firewall within the past year.
Which solution did I use previously and why did I switch?
I work with a lot of different IT products including three different firewall solutions in the past 12 months.
What other advice do I have?
Everything has room for improvement.
I would rate this solution a five out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior MIS Manager at a tech company with 201-500 employees
Stable with great security and good scalability
Pros and Cons
- "The solution is excellent for enterprise-level networks."
- "If the implementation was easier, it would be a lot better for us."
What is our primary use case?
We tend to use the solution as it's forced on us by corporate. Our company wants us to use it.
What is most valuable?
The solution is stable. We haven't had any issues in that sense.
The security of the hardware is excellent. Cisco is very serious in its approach to security.
We have a high level of trust in Cisco and its products.
The solution is excellent for enterprise-level networks.
What needs improvement?
The solution is difficult to use. There's more required than a typical firewall. It's different than, for example, Palo Alto and Fortinet, which we find are easier to set up.
If the implementation was easier, it would be a lot better for us.
It would be such a great product for us if it was easier to manage.
For how long have I used the solution?
I've been working with the solution for more than ten years. It's been a long time. It's been over a decade at this point.
What do I think about the stability of the solution?
The solution is quite stable. We have no problems with bugs or glitches. It doesn't crash or freeze. It's good.
What do I think about the scalability of the solution?
We've found the solution to be scalable. A company shouldn't have any issues with expanding it if it needs to.
We have about 300 users on the solution currently. We do plan to continue to use Cisco in the future.
How are customer service and technical support?
We use third-party technical support that's offered and we're quite satisfied with the level of attention we receive.
Which solution did I use previously and why did I switch?
I have knowledge of Palo Alto and Fortinet.
While those two are easier to set up and control, nothing compares to Cisco in terms of security. They're very strong in that regard. We also find Cisco to be more stable.
However, we only use Cisco firewalls in our organization. We don't use anything else.
How was the initial setup?
The implementation is not so straightforward. It's rather complex and we have a lot of trouble with it.
The implementation took us about one month.
We plan to implement an updated version next month as well.
We need three to eight people to handle the setup.
What about the implementation team?
I did not handle the implementation by myself. Rather, it's done by another team including the original support from Singapore and with license support from headquarters in Japan.
However, our team does handle the implementation in-house, and we can handle the setup for clients as well.
What's my experience with pricing, setup cost, and licensing?
We do need to purchase licenses. Those come from headquarters in Japan. They handle the details in terms of pricing. I'm not sure of the overall costs.
What other advice do I have?
We're both a customer of Cisco and a reseller.
This month we plan to upgrade from our existing hardware.
Overall, we've been happy with the results we've gotten. I would rate the solution at a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT manager at IRPC PCL
Very simple to deploy and stable
Pros and Cons
- "Simple to deploy, stable."
- "Technical support takes a long time to respond."
What is our primary use case?
Our primary use case of Cisco ASA Firewall is to protect our environment. We are customers of Cisco and I'm a network engineer.
What is most valuable?
The solution is simple to deploy and stable.
What needs improvement?
Technical support could be improved, they take a long time to respond.
For how long have I used the solution?
I've been using this solution for 10 years.
What do I think about the stability of the solution?
This is a stable solution.
How was the initial setup?
Initial setup was relatively simple, it took around six months and I deployed myself.
What other advice do I have?
I would rate this solution a nine out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network Administrator at a manufacturing company with 10,001+ employees
Accurate CLI, knowledgeable support team, valuable features
Pros and Cons
- "To be honest, all of the features that are provided, all the other vendor will also have. One feature we did find valuable was the CLI, it is more accurate. Additionally, I was happy with the customization, dashboards, access lists and interface."
- "It is hard to collaborate with our filtered environment."
What is our primary use case?
We utilize the solution for our IT security.
What is most valuable?
To be honest, all of the features that are provided, all the other vendor will also have. One feature we did find valuable was the CLI, it is more accurate. Additionally, I was happy with the customization, dashboards, access lists and interface.
We frequently use the Bottleneck feature we purchased specialized from Cisco.
What needs improvement?
It is hard to collaborate with our filtered environment.
If Cisco could combine the Bottleneck feature of ASA, their platform called Umbrella, and the other team they have that has similar malware protection into one, this would be perfect.
For how long have I used the solution?
I have been using the solution for almost three years.
What do I think about the stability of the solution?
The solution is stable. However, It does have some bugs, but Cisco always fixes them really quickly. Sometimes we have to restart and it would be better if the bugs could be fixed without having to reload.
What do I think about the scalability of the solution?
The scalability is not perfect.
How are customer service and technical support?
The support has been great and responsive. Most of their engineers are very professional and knowledgeable.
How was the initial setup?
The setup is easy to do if you are familiar with these type of installs, if not then it could be difficult.
What's my experience with pricing, setup cost, and licensing?
We have a perpetual license for all of our firewalls. For some of the features, we purchase them on demand. The pricing is decent but it could always be cheaper, we would be happier.
Which other solutions did I evaluate?
We will probably change to a higher version in the near future or migrate to a next-generation firewall which would include IPI and some other new features. This makes sense because our current firewall ends the support in several years.
Cisco FirePower, the next-generation firewall, is much better for stability.
What other advice do I have?
I have used many versions of the software over the years, versions 8.6 to 9.1 and 9.9 to 9.12.
Keep in mind before purchasing the solution, if you do need to scale the solution then ASA is probably not right for you.
I rate Cisco ASA Firewall an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Network Security Engineer at a tech services company with 201-500 employees
Good UI but too expensive and not very stable
Pros and Cons
- "The user interface, the UI, is excellent on the solution."
- "The stability is not the best."
What is our primary use case?
I primarily use the solution for the IPsec only.
What is most valuable?
The user interface, the UI, is excellent on the solution. Let's say you want to check the real-time locker - you can create it by the UI using ADSM.
What needs improvement?
The VPN portion of the solution isn't the greatest.
The stability is not the best.
The solution is far too expensive.
For how long have I used the solution?
I've been working with the solution for about six months, or maybe a little bit less than that.
What do I think about the stability of the solution?
I haven't found the stability to be very good. The IPsec stability leaves a lot to be desired. They really need to work on the solution's stability capabilities.
In ASA, I built the IPsec between ASA and Fortigate due to the fact that most of the time I have to restart the timer to flow the data.
What do I think about the scalability of the solution?
We only have two to three users who directly deal with the solution within our company. Overall, we have between 100-200 employees. We haven't really scaled it.
I personally would prefer not to use ASA going forward. However, I don't know if the company itself has any plans to increase usage or not.
How are customer service and technical support?
While I've dealt with Cisco technical support in the past on other solutions, I have not contacted them in regards to this specific product.
That said, my past experience with Cisco technical support has been very positive and I found them to be very helpful in general. I just can't speak to this specific product.
How was the initial setup?
I was pretty junior when the solution was initially implemented in the organization. For that reason, I did not take an active role in implementing the solution. I wouldn't be able to really discuss the setup specifics or the level of difficulty.
I'm not exactly sure who handles maintenance, if any, within our organization.
What's my experience with pricing, setup cost, and licensing?
The licensing is quite expensive. I don't have the exact amount, however, it's my understanding that it's a very pricey solution. There's a lot of competition out there, including from Fortigate, which offers just as good, if not better products.
What other advice do I have?
I'm not overly familiar with ASA. I only work with it on an administration level.
I work with the latest version and I use the ASDM version server.
I wouldn't recommend that an organization choose ASA as a solution. They should look into other options.
Overall, I would rate the solution at a six out of ten. We haven't had the greatest experience.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
General Manager at MS Solutions Ltd.
Secure, stable, user-friendly, and the partner support is good
Pros and Cons
- "The most valuable feature is that it's secure."
- "In the future, I would like to be able to use an IP phone over a VPN connection."
What is our primary use case?
We are using the ASA in our network to create a VPN between six places. We also use it for servers and data synchronization.
What is most valuable?
The most valuable feature is that it's secure.
It is really stable and I've never had an occasion that due to this firewall, I have had issues with the network, a breakdown, or otherwise.
This is a user-friendly product. Once you have a specialist who can configure it properly, you'll be pretty protected everything you want is in it.
What needs improvement?
In the future, I would like to be able to use an IP phone over a VPN connection.
For how long have I used the solution?
I have been working with Cisco ASA Firewall for at least seven years.
What do I think about the stability of the solution?
The stability is good.
What do I think about the scalability of the solution?
We have not tried to scale our network. It was established a long time ago and nothing has changed since then.
How are customer service and technical support?
I have been auditing their partners in Bulgaria and I am in contact with them on a regular basis. I have not had any real issues with my equipment but overall, I think that the support is perfect.
Which solution did I use previously and why did I switch?
We were using the ASA 5505 and our network is faster now, so we are now in the process of upgrading our network to the 5506 model. The 5505 is a 100 megabit product, which is very low.
What about the implementation team?
We had a company that set everything up for us. They have Cisco engineers and I'm paying them annually for next-business-day support. They do all of the maintenance for us.
What's my experience with pricing, setup cost, and licensing?
They have a lot of different models but most of them are really expensive. This is the main thing because, for us, the price is important.
What other advice do I have?
Overall, I am pretty satisfied with this product and I recommend it.
I would rate this solution a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner

Buyer's Guide
Download our free Cisco Secure Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2025
Popular Comparisons
Fortinet FortiGate
Netgate pfSense
Sophos XG
Cisco Umbrella
Cisco Identity Services Engine (ISE)
Palo Alto Networks NG Firewalls
WatchGuard Firebox
Cisco Meraki MX
Check Point Quantum Force (NGFW)
Azure Firewall
SonicWall TZ
Sophos XGS
Cisco Secure Network Analytics
Fortinet FortiGate-VM
Buyer's Guide
Download our free Cisco Secure Firewall Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What Is The Biggest Difference Between Cisco ASA And Fortinet FortiGate?
- Cisco Firepower vs. FortiGate
- How do I convince a client that the most expensive firewall is not necessarily the best?
- What are the biggest differences between Cisco Firepower NGFW and Fortinet FortiGate?
- What Is The Biggest Difference Between Cisco Firepower and Palo Alto?
- Would you recommend replacing Cisco ASA Firewall with Fortinet FortiGate FG 100F due to cost reasons?
- What are the main differences between Palo Alto and Cisco firewalls ?
- A recent reviewer wrote "Cisco firewalls can be difficult at first but once learned it's fine." Is that your experience?
- Which is the best IPS - Cisco Firepower or Palo Alto?
- Which product do you recommend and why: Palo Alto Networks VM-Series vs Cisco Firepower Threat Defense Virtual (FTDv)?