Anyone watching this BS?
9 replies (most recent on top)
Cisco security is a joke.
ASA and firepower worse pieces of dog p-o p out there, palo makes a firewall, that does firewall stuff, thats why customers buy them. How can we have a security platform without a good firewall? Very sad as the answer is so obvious but we keep throwing good money afterbad in security.
Ex Cisco&TAC myself and advocate. Now customer; we ripped out our complete Cisco ASA and FTD suite last year. Why? Support. Our Account Team is good but sad to say TAC for firewall in general was a train wreck. Worst scenario was had a suspected HA / hardware issue on our FTD, TAC brought BU on for debug; the BU ran debugs and tweaked config...only to have everything needing to be rebuilt.
BU made the change and then bolted from call. Amazing.
That was event that made us switch. My management did not trust me after that for a while, as I trusted the BU as ex TAC myself.
We ripped it all out at next refresh.
Sad to see, Cisco you really f'd up the whole firewall portfolio. Now you have lost it forever.
@@1mvz+1lFh8Gdw
Same happened with me. FP is a dog's breakfast of cobbled together solutions. ASA was a winner and Cisco missed the NGFW boat.
Pro Tip: If it says "architecture" it actually means "very confusing set of products (all with different CLIs, GUIs, licensing schemes etc) that do no not integrate together but let's use big TOGAF words that imply they do". On the [very] rare occasions when such an "architecture" is successfully sold, wait for all the P1 and CAP cases. Been there and done it.
As an account team SA, I gave up on Cisco security shortly after we boggled the Sourcefire "integration" with the first Firepowers that were utter dog cr@p.... circa 2015-2016ish? I had a large commercial customer due for a 2M ASA refresh and we went against Palo. PAN had made good inroads, but the customer gave us a chance after numerous meetings (and begging) with customer management.
Everything about it went wrong and sideways. I virtually slept at the customer for a week, and we had 12 cases open at one point, one that almost went CAP. Customer then (for good reason) abruptly pulled the plug. Management's response? "What went wrong? How did you let this happen? That was a forecasted 2M deal!! We're going to blame the SE for this...." OMG... it's like the blind leading the blind. Nobody ever wants to see the truth sitting in front of them.
It was at that point that I realized Cisco had lost its way in security... it's a shame from so many years of ASA success. There have been a few good acquisitions along the way -- DUO, OpenDNS -- but niche products marketized as full solutions is not going to cut it. That's just the way it is at Cisco.
I took a shot every time someone used the word "pivot"
Pretty soon Security Game Day will evolve into St. Patrick Beer Ba-f Bar Game Day.
Should have acquired PA whilst it was small. Missed the boat.
I've got great news Mr customer - Cisco makes firewall boxes and they're great. Login to the sleek and modern FMC interface. Sorry there are no SDWAN features. Any bets on how long these PAN ex-patriot execs will stay?