Cisco Secure Firewall
By Cisco
Cisco's NGFW hardware line (renamed from Firepower), running Secure Firewall Threat Defense software with Snort 3 as its built-in intrusion prevention engine. Managed through Secure Firewall Management Center, it integrates natively with Cisco's broader networking gear in Cisco-heavy environments.
Verified Source: 1
- Product type
- Software
- Deployment
- On-premHybrid
- Organization size
- Mid-marketEnterprise
- Pricing tier
- $$$
Capability checklist
NGFWHow Cisco Secure Firewall measures up against the full Next-Generation Firewall taxonomy.
- Application awareness — supported
- Identifies and controls traffic by application, not just by port or protocol.
- Built-in intrusion prevention — supported
- Blocks known exploit attempts and attack patterns inline, without a separate box.
- Encrypted traffic inspection — supported
- Decrypts and inspects TLS traffic to catch threats hidden inside encrypted sessions.
- URL & content filtering — supported
- Blocks access to malicious, risky, or policy-violating web categories.
- Cloud sandboxing — supported
- Detonates suspicious files in an isolated environment to catch unknown malware.
- Centralized policy management — supported
- Manages rules and logs across many firewalls and sites from one console.
- VPN & remote access — supported
- Terminates site-to-site and remote-user VPN connections on the same appliance.
Alternatives
Other Next-Generation Firewall tools with overlapping capabilities, sized for similar teams.