Try our new research platform with insights from 80,000+ expert users

Cisco Secure Firewall vs McAfee StoneGate [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 30, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
587
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco Secure Firewall
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
456
Ranking in other categories
Firewalls (5th), Cisco Security Portfolio (3rd)
McAfee StoneGate [EOL]
Average Rating
7.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Phil Shiflett - PeerSpot reviewer
Senior Manager, Network Engineering at TTi Power Equipment
Unified policies streamline network management but complex licensing requires attention
Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.
it_user935460 - PeerSpot reviewer
Computer Framework at a healthcare company with 1,001-5,000 employees
It works well with a highly-active cluster.
It is important for us in case of a disaster, or in case of a failure of one server. This means that the high availability is the most important part for us. It is important for us that the system is available and no connection is going to be lost if the system is restarting one note, or something like that. This is the main request for us for a good firewall protection product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The GUI configuration is its most valuable feature"
"If you need real and effective security for your network, do not hesitate to buy a Fortigate appliance."
"Fortinet FortiGate is a very good next-generation firewall."
"It is a reliable solution."
"I would rate FortiGate Next Generation Firewall (NGFW) as a solution a 10 out of 10."
"The SD-WAN feature of Fortinet FortiGate has been most impactful in maintaining our network's integrity."
"FortiGate has led to a reduction in our security budget."
"The solution can scale."
"The AnyConnect remote access VPN gives us an easy way to deploy remote working for our users."
"It is extremely stable I would say — at least after you deploy it."
"It is pretty stable. I haven't seen many issues during the past four years."
"The best return on investment when using Cisco Secure Firewall is the visibility."
"I find the solution reliable and stable, and I can say that there is no downtime."
"The implementation is pretty straightforward."
"Customer service and support are excellent. I would rate their support 10 out of 10."
"Technical support services are excellent."
"High availability is very consistent and provides good firewalling and stability."
"It works well with a highly-active cluster."
"It has given us better application control."
"We did not have issues with scalabiliy."
 

Cons

"I would say 8 out of 10 regarding the stability of Fortinet FortiGate. It requires a lot of bug fixing and what I understand, Fortinet is fast enough to provide bug fixes and patches, but usually I suggest Fortinet should do thorough testing of their releases and software releases and once probably they can reduce the frequency of new releases but make it stable."
"The reporting in Fortinet FortiGate could improve. Customers are having to purchase additional reporting components. When I have used the Sophos solution it is a complete solution, in Fortinet FortiGate you have to use additional tools to have the features needed."
"The solution could be more evenly structured."
"The monitor and the visibility, in this proxy, is very weak."
"I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues. Perhaps in the future, we could effectively use both firewalls to increase the throughput. If there are two boxes, they both should be able to work."
"The graphical user interface of Fortinet's FortiGate product does not function well with text-based interfaces."
"It is somewhat expensive compared to other solutions such as Sophos."
"Its web interface needs to be more stable, and more functional, through the variety of browsers."
"The phishing emails could be improved."
"It would be nice if you didn't have to configure using a command-line interface. It's a bit technical that way."
"They need a VTI. I know it's going to be available in the next software version, which is the 6.7 version. However, the problem with that is that the 6.7 is going to deprecate all the older IKEv1 deployment tunnels. Therefore, the problem is that we have a lot of customers which are using older encryptions. If I do that, update it, it's not going to work for me."
"The only con that I have really seen with it is the reporting structure. FirePOWER is good. It has been a great help because, before that, it was not good at all."
"The initial setup could be simplified, as it can be complex for new users."
"We had an event recently where we had inbound traffic for SIP and we experienced an attack against our SIP endpoint, such that they were able to successfully make calls out... Both CTR, which is gathering data from multiple solutions that the vendor provides, as well as the FMC events connection, did not show any of those connections because there was not a NAT inbound which said either allow it or deny it."
"The dashboard needs to be more intuitive and easier to navigate."
"My experience with the documentation is that sometimes it refers to Cisco ASA instead of Cisco Secure Firewall, and the screenshots are not accurate."
"HA failover is not stable."
"The hardware needs improving as we had a lot of problems with the hard drive reliability, both with the firewall and the intrusion protection system."
"After some experience with the solution, we had to do some redesign, but generally, we were happy with the product."
 

Pricing and Cost Advice

"For our organization, the licensing costs are approximately $7,000 per year."
"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."
"I would rate the pricing a five out of ten"
"Compared to Palo Alto, which we have used in the past, pricing and licensing are okay."
"Fortinet is competitive price-wise."
"Currently, we are paying about $1,500 a month for three sites."
"The solution is cheap."
"We pay for the license of Fortinet FortiGate IPS annually. There are not any extra costs."
"The pricing of Cisco firewalls, in the security market, is fair."
"Cisco's prices are more or less comparable to those of other products."
"The pricing for Cisco products is higher than others, but Cisco is a very good, strong, and stable technology."
"The solution was chosen because of its price compared to other similar solutions."
"You get what you pay for. It's always priced based on what you get and what it can handle. It's acceptable."
"We're using the smart license for this firewall. The models that we have require licensing for remote access."
"The pricing is very good for us, especially since we have a partnership with Cisco. The challenge is the licensing. There are competitors that offer more flexible licensing, such as daily licensing, some offer hourly, but Cisco is locked in for one, three, and five years. We don't have much flexibility, especially if we want to shift applications or shift users at any time. Hopefully, licensing becomes more flexible."
"It is more expensive than the other solutions."
Information not available
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Security Consultant at Webernetz.net - Network Security Consulting
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
12%
Manufacturing Company
9%
Comms Service Provider
7%
University
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business360
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business186
Midsize Enterprise129
Large Enterprise231
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
Ask a question
Earn 20 points
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL
McAfee Next Generation Firewall, Stonesoft, Intel Next Generation Firewall, Intel Security StoneGate
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
Avency, R€SLER Oberfl_chentechnik GmbH, MAUSER Group, CEMEX, Cegedim, Fusion Media Networks
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: March 2026.
884,873 professionals have used our research since 2012.