We performed a comparison between AlgoSec and Cisco Defense Orchestrator based on real PeerSpot user reviews.
Find out in this report how the two Firewall Security Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The Firewall Analyzer component has excellent compatibility with the solution, and it's highly useful and easy to manage."
"We have reduced the attack surface of risky rules, improved our compliance scores, and streamlined our firewall change flow all thanks to AlgoSec Firewall Analyzer."
"The automation of the firewall rule deployment, working together with our ticketing system, is the most valuable feature of this solution. The needs as required by a user request are automatically validated and configured in the specified firewalls without any human action."
"The features that are most valuable are the interactive topology map and the traffic simulation queries."
"The training provided by AlgoSec helps a lot in the development of employees who work with the tool."
"The Compliance module is one of the best features which can help anyone to perform security review with predefined security matrix configurations. The compliance module can save a lot of time for security reviews and provide full visibility of the risk required in firewall change requests."
"The features that I like are the monitoring and the alerts. It provides real-time monitoring, or at least close to real-time. I think that is important. I like its way of organizing, also. It is pretty clear. I also like their reporting structure - the way we can use AlgoSec to clear a rule base, like covering and hiding rules."
"It lowers the burden of the security department."
"The most valuable feature is the Intrusion prevention."
"If we have a firewall go down, I can hop into CDO, pull the latest configuration off and apply it. That's really good. It helps save time."
"For this product, they are very uncharacteristically interested in resolving whatever issue the customer reports. They're really attentive, and they address whatever we bring up as quickly as they can. That's been a very positive aspect of the product."
"The ability to do operations on multiple firewalls at once is valuable because it saves time and mental effort. The solution's ability to make bulk changes makes it very convenient to manage things at once on multiple targets."
"We have quite a few Active Stone by pairs. If they fail over... I'll see that there's a change on it and I'll have a look. The only change on it is that now this one is the standby, it took over the active role. I can go into that firewall and find out what happened... and troubleshoot based on that. That's pretty cool too."
"I like the upgrade feature. That is pretty valuable to me because I have dual ASAs and when I go through CDO it does it for me pretty well. It's all done in the back-end and I don't really have to be involved. I just initiate, pick the image, and I pick when I want it done and it just does it, whether I have a single ASA or have a dual ASA."
"If our server is blocked, this solution shows us why it is blocked and allows us to update the network routing."
"The initial setup was straightforward. We spun up the VM onsite. We generated the key that it needed to talk to the Cloud Orchestrator. After that, as I started adding devices, it was relatively quick and easy."
"Fireflow needs to be a little more user-friendly."
"All our firewalls were renamed, and AlgoSec saw these devices as new devices. As a result, all the reports from the same device but with the old hostname were no longer connected. AlgoSec did not clean up the old reports as well. After a few days, it depleted its own storage, and then, the server became inaccessible."
"We would like to see them utilize the cloud to help with performance improvement, and with various processes needed on a daily basis."
"I would like to see enhanced dashboards or build meaningful reports for executive consumption."
"The risky rules reporting should have more information available in the risky rules report - especially when you export the data into a .CSV format. .CSV format being a text-based visualization, some information and formatting cause the reports to lose meaning and only become just another character in the file since it cannot port over some properties (like severity represented by colors)."
"In an environment that is very large, with many firewalls and routers, it is sometimes impossible to buy all of the licenses."
"I would rate the support as six or seven out of 10."
"A simple tutorial about the initial configuration on Youtube could provide a lot of help."
"The main thing that would useful for us would the logging and monitoring. I have to check it out, to get the beta, because I don't have access to them... I wanted CDO to be a central place so where I could do everything but right now I don't think that's possible. I really don't want to go back and forth between this and FMC. Maybe the logging portion, when I look at it, will give me some similarities."
"I'd like CDO to be the one-stop-shop where we could do all the configurations easily. It would be nice, for ASA upgrades, if we could do them from a central repository and not have to reach out to Cisco. That would be a definite plus."
"It should have more features to manage FirePOWER appliances."
"We had some MX devices that were blocking Windows Update from happening. We found out it was a Meraki issue, but it would have been nice if it had been flagged for us: "Hey, these updates are failing because the MX is blocking it." It wasn't a huge problem, but there was a loss of our time as well as the fact that the updates didn't get pushed out... It would have been nice if CDO had let us know that that was an issue."
"They need to work on the user interface. It needs to be improved to make it more user-friendly."
"If I make a change locally to the firewall, CDO gives an alarm or an error message and says there's a change in compliance: "The firewall has this configuration but the last time it was compiled it had that configuration." That view of new changes versus the old could be better... I had to log in manually, locally on the firewall, to check which version, which configuration was actually running. I couldn't see it in CDO."
"It would be a better product if it incorporated device control for third-party products easily."
"The dashboard needs to be more customizable to provide better reporting for our network."
Earn 20 points
AlgoSec is ranked 1st in Firewall Security Management with 173 reviews while Cisco Defense Orchestrator is ranked 14th in Firewall Security Management. AlgoSec is rated 9.0, while Cisco Defense Orchestrator is rated 8.2. The top reviewer of AlgoSec writes "Helps identify risks, reduce attack surfaces, and streamline policy changes". On the other hand, the top reviewer of Cisco Defense Orchestrator writes "Provides visibility into entire infrastructure and bulk changes save time and resources". AlgoSec is most compared with Tufin Orchestration Suite, FireMon Security Manager, Skybox Security Suite, Palo Alto Networks Panorama and VMware NSX, whereas Cisco Defense Orchestrator is most compared with Palo Alto Networks Panorama, Tufin Orchestration Suite and Azure Firewall Manager. See our AlgoSec vs. Cisco Defense Orchestrator report.
See our list of best Firewall Security Management vendors.
We monitor all Firewall Security Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
