FireMon Solution

What do you like best about the product?

Can view rules from all device groups in a single pane

What do you dislike about the product?

Does not work well with firewall rules that span multiple device groups

What problems is the product solving and how is that benefiting you?

It is helping us cleanup our environment, and refine and recertify firewall rules.

What do you like best about the product?

Yes, it is very helpful. I can manage all policies of all firewalls (via directly or management software). It has 3 core features: 3C (compliance, cleanup & change)

What do you dislike about the product?

The APA feature may not work exactly in large networks (when we have a lot of hops in the middle)

What problems is the product solving and how is that benefiting you?

The central management, the compliance, the cleanup & the monitor who are changing? when change?

What do you like best about the product?

UI Interface and performance, easy integrations and intelligence.

What do you dislike about the product?

User friendly with multiple options with various platforms.

What problems is the product solving and how is that benefiting you?

Clone and decommissions requests tasks make it easy for us.

What do you like best about the product?

PO provides a solid workflow for our team. It gives us clear ownership and tracking when we’re vetting rules. When a rule meets certain criteria, we route it into PO so it can go through the proper vetting process.

What do you dislike about the product?

The UI is lackluster. It's not easy to navigate from one ticket to another. It seems to be an extension to Security Manager rather than a separate part. Assigning tickets and moving from one ticket to another is not the easiest.

What problems is the product solving and how is that benefiting you?

Workflow and ownership of vetting Firewall rules. It provide a decent way to weed out rules which were recently modified or created and we can flag and perform analyst on them.

What do you like best about the product?

It helps quickly identify policy issues such as over permissive, duplicate, and unused firewall rules, which improves security and reduces risk.

What do you dislike about the product?

maintaining accurate device data and optimizing policy workflows often requires ongoing administrative effort

What problems is the product solving and how is that benefiting you?

It provides visibility, risk analysis, rule optimization, and compliance management. It helps me quickly identify policy issues, streamline reviews, and automate the reporting process

What do you like best about the product?

I like the centralized visibility and easy rule management, which makes analysing, optimizing, and maintaining firewall policies much more efficient.

What do you dislike about the product?

The interface can feel a bit complex at first, and some reporting and configuration tasks could be more intuitive.

What problems is the product solving and how is that benefiting you?

Policy Manager gives us centralized visibility and control over firewall policies, helping reduce manual effort, improve compliance, and identify risky or unnecessary rules faster.

What do you like best about the product?

We use it to audit our firewall policies and ensure there are no redundant rules, shadow rules, or unauthorized changes that could lead to security issues.

What do you dislike about the product?

The UI is a bit hard to navigate but the functionality is great.

What problems is the product solving and how is that benefiting you?

There are too many firewall rules being created, and they end up needing cleanup. However, there’s no clear way to tell whether all of them are actually necessary or whether they’re creating security holes.

What do you like best about the product?

What I value most about the Policy Manager is the centralized view of firewall rules from various manufacturers in a single console. The analysis of redundant, shadowed, and overly permissive (any/any) rules has significantly reduced the time for periodic base review. The change request and approval workflow leaves the audit trail ready for compliance evidence, which greatly facilitates internal and GRC audits. I also like the impact simulation before applying the change, which prevents unauthorized access or service disruption in production.

What do you dislike about the product?

The interface could be more intuitive, especially in navigating between devices and searching for rules in large bases. Some screens become slow when loading extensive policies, and risk analysis reports take time to generate. Integration with some manufacturers and ITSM/SIEM tools requires manual adjustments, and object normalization is not always consistent across platforms. The initial learning curve is steep, and the documentation could include more practical examples. It would be interesting to have AI resources to suggest automatic rule optimization and cleanup.

What problems is the product solving and how is that benefiting you?

Draft for this question, already including Price/ROI, the only topic missing from the panel:

The Policy Manager addresses the lack of visibility and control over firewall rules in an environment with multiple manufacturers and many devices. Previously, rule review was manual, done in spreadsheets, time-consuming, and prone to error. Today, we quickly identify redundant, shadowed, unused, or overly permissive rules, reducing the attack surface and facilitating incident response, as it allows immediate knowledge of which network path is open. The change workflow with approval and audit trail generates ready evidence for internal audits and compliance requirements, saving hours of work in each cycle. The return is seen in the reduction of the team's operational effort, fewer errors in production changes, and increased security in periodic rule recertifications.

What do you like best about the product?

What I like best about Policy Manager is that it gives me a centralized way to manage and review security policies across the environment. It simplifies policy administration, improves visibility into firewall and access control rules, and helps ensure consistency and compliance. The reporting and auditing capabilities make it easier to identify gaps, validate policy changes, and reduce the time spent on manual reviews. Overall, it helps me manage security more efficiently while maintaining a strong security posture

What do you dislike about the product?

What I dislike about Policy Manager is that some tasks can feel more complex and time-consuming than necessary, especially when reviewing large numbers of policies or troubleshooting rule-related issues. The interface can occasionally be difficult to navigate when trying to quickly identify dependencies or understand the impact of policy changes. Additionally, reporting and workflow automation could be more streamlined to reduce manual effort. While it is a powerful tool overall, there is room for improvement in usability and operational efficiency

What problems is the product solving and how is that benefiting you?

Policy Manager is solving the challenge of managing and enforcing security policies consistently across a large and complex environment. It provides centralized visibility into policies, helps identify misconfigurations and compliance gaps, and streamlines policy reviews and change management. This benefits me by reducing the time spent on manual policy analysis, improving the accuracy of security decisions, and making it easier to maintain a strong security posture across the organization. It also helps ensure that policy changes are documented, auditable, and aligned with security and compliance requirements.

What do you like best about the product?

I primarily use Firemon Policy Manager to centralize security policy management in a multi-vendor environment. I like the ability to manage different firewalls from manufacturers like Huawei, Aruba, and Juniper in a single panel, which saves hours of manual work. The rule usage analysis and identification of shadowed or redundant rules are features that save me time. Real-time alerts on policy changes also provide extra security for the operation. It is my daily tool for risk analysis, change auditing, and cybersecurity compliance. The automation of rule recertification facilitates security audits, and the solution helps minimize human errors and clean up legacy policies, reducing the attack surface.

What do you dislike about the product?

The performance in generating extensive reports and loading screens is an area that could be improved. Specifically, the latency in "rule explore" and historical report generation is a problem. When I search or filter policies on firewalls with thousands of rules, the web interface takes time to render the results, which hinders during critical troubleshooting. Compliance reports covering long periods also tend to take time to compile in the database. An optimization in search response time and more efficient background processing for data export would substantially improve workflow fluidity during high-pressure moments. Additionally, there is a learning curve and interface density that are challenges, and topology analysis with advanced NAT is complex.

What problems is the product solving and how is that benefiting you?

I use the Policy Manager to centralize security policy management in multi-vendor environments, automate rule recertification, ensure compliance, and minimize operational risks, as well as save time by analyzing and cleaning obsolete rules, which improves our security and efficiency.