FireMon Security Manager for AWS

What do you like best about the product?

What I like best about FireMon Policy Manager is the depth of visibility it gives you into firewall policies across a multi-vendor environment. Being able to pull every rule from Palo Alto, Cisco, Fortinet, and Check Point devices into a single normalized view, and then actually query that data with SIQL, has been a huge time-saver compared to the manual auditing we used to do. The real-time change detection and automated compliance assessments mean we catch drift and risky configurations before they become audit findings, rather than during them.

What do you dislike about the product?

The UI is probably my biggest gripe. While it's functional and packs in an enormous amount of capability, it can feel dated in spots compared to more modern SaaS-style interfaces, and the learning curve for new users is steeper than I'd like.

What problems is the product solving and how is that benefiting you?

Policy Manager solves the fundamental problem of firewall sprawl, over time, environments accumulate thousands of rules across dozens of devices from different vendors, and nobody has a clear picture of what's actually in place, what's being used, and what's quietly creating risk. Before tools like this, answering a simple question like "does any rule allow telnet from an untrusted zone?" meant logging into multiple consoles, exporting configs, and stitching the answer together by hand. With Policy Manager, that's a single query and a few seconds of work.

What do you like best about the product?

What I like most about Policy Manager is how it centralizes and streamlines policy administration across the organization. Another big plus is that FireMon support can create custom scripts for us when we need them.

What do you dislike about the product?

It takes some time to get used to learning FireMon and to find the things you’re looking for.

What problems is the product solving and how is that benefiting you?

We are able to run reports for compliance and audit with Policy Manager and connect to our devices.

What do you like best about the product?

What I really appreciate about FireMon Policy Manager is how it handles the "messy" reality of modern networks. In the real world, most companies don’t rely on just one firewall brand; you usually end up with a mix of Palo Alto, Check Point, Fortigate, and maybe some cloud-native security groups in AWS or Azure. What I like is that Policy Manager treats them all the same—it acts as a universal translator so you aren’t jumping between five different consoles just to check a single rule. The UI is built for power users, so while there’s a bit of a learning curve, the performance and AI-driven insights make it worth it by spotting risky "policy drift" before an auditor does. It’s definitely an investment, but the ROI hits home when you realize you’ve traded weeks of manual cleanup and "audit panic" for a streamlined, automated workflow backed by a support team that truly understands the tech.

What do you dislike about the product?

While FireMon is incredibly powerful, it isn’t without its frustrations, and most of them stem from its “enterprise-first” design. The biggest hurdle is the steep learning curve: it’s a “power user” tool, so if you aren’t in it every day, the interface can feel overwhelming—and in some places, even a bit “basic” or dated, especially around the reporting engine. It’s also fairly resource-heavy, needing a lot of RAM and CPU to keep everything running smoothly, which can be a real headache for infrastructure teams.

In day-to-day use, maintenance and troubleshooting can feel clunky as well. The underlying architecture is complex, and when something goes sideways, the logs can be surprisingly ambiguous. That often leaves you wishing for more “self-service” visibility, instead of having to call support. Essentially, it’s like driving a high-end semi-truck: it’ll carry any load you give it, but it’s definitely not a “point-and-click” sports tool.

What problems is the product solving and how is that benefiting you?

The core problem FireMon solves is the "rule bloat" and fragmentation that naturally happens as a company grows. In a typical setup, you’re dealing with a massive, tangled web of rules across different platforms that nobody wants to touch for fear of breaking something. FireMon steps in as the "cleaner" and "architect," identifying exactly which rules are redundant or risky so you can delete them with confidence. For me, the real benefit is the shift from being reactive to proactive; instead of spending weeks panicking before an audit or manually digging through logs to find a misconfiguration, you get automated reports and real-time alerts. It basically gives you back your weekends by turning hours of manual rule-checking into a few clicks, ensuring your network stays "clean" and compliant without the usual operational headache.

My main use case for FireMon Security Manager  is continuous firewall policy monitoring and compliance management, and I typically use this solution for analyzing firewall rules across multiple firewalls such as FortiGate or Palo Alto, identifying risky or non-compliant configurations and maintaining a clean and optimized rule base.

A specific example of how I use FireMon Security Manager  for firewall policy monitoring or compliance management is that I regularly audit firewall rules. FireMon scans policies across devices, highlights unused rules, overly permissive access, and any rule that violates compliance, allowing me to review and clean up rules based on its recommendations.

The best feature FireMon Security Manager offers is the policy analysis feature, as it deeply inspects the firewall rules, and it also works with different firewall brands, making these two things very useful.

FireMon's deep inspection of firewall rules helps me in my daily work by deeply analyzing the firewall rules of all the firewalls integrated with the solution, evaluating the logic and behavior of the rule base, including rule usage, such as rule relationships and whether any shadow or redundant or overlapping rules are present, and it provides the risk level of open ports defined by any rule or exposure, making its compatibility with different firewall brands significantly beneficial for my team.

FireMon Security Manager has positively impacted my organization by being helpful in analyzing firewall policies, better controlling risks, reducing risky configurations, and improving the compliance readiness environment.

It improved compliance readiness as I have seen a better environment and found the solution enables faster policy reviews, typically involving less time in this solution because it works automatically, meaning I do not have to do anything manually.

FireMon Security Manager is working well and providing great features with full visibility across all firewalls, so I do not see any improvement needed at this time.

I have two years of experience using FireMon Security Manager.

FireMon Security Manager is stable.

FireMon Security Manager's scalability is excellent, as it can handle multiple firewalls at a time.

Customer support is excellent in their technical knowledge, and they are able to solve complex technical issues.

I would rate customer support a nine out of ten.

I have not switched from a different solution, as I have been using FireMon Security Manager since the beginning.

I purchased FireMon Security Manager through the AWS Marketplace .

I have seen a great return on investment, as I am able to save time for my team along with money savings.

I have seen that audit preparation has been reduced to a few hours compared to previously taking days or weeks, resulting in almost 60 to 70% time savings, and it has reduced the efforts in rule analysis and cleanup by 40 to 50%.

I have not evaluated other options before choosing FireMon Security Manager.

My advice to others looking into using FireMon Security Manager is that any mid-sized organization with a hybrid environment, especially those with multi-vendor firewalls, should consider this solution as a game changer, as it helps in compliance readiness, policy analysis, or policy cleanup, so I highly recommend considering this solution as one of the best options. I would rate this solution an eight out of ten overall.

Public Cloud

Amazon Web Services  (AWS )