FireMon Solution

What do you like best about the product?

It helps quickly identify policy issues such as over permissive, duplicate, and unused firewall rules, which improves security and reduces risk.

What do you dislike about the product?

maintaining accurate device data and optimizing policy workflows often requires ongoing administrative effort

What problems is the product solving and how is that benefiting you?

It provides visibility, risk analysis, rule optimization, and compliance management. It helps me quickly identify policy issues, streamline reviews, and automate the reporting process

What do you like best about the product?

I like the centralized visibility and easy rule management, which makes analysing, optimizing, and maintaining firewall policies much more efficient.

What do you dislike about the product?

The interface can feel a bit complex at first, and some reporting and configuration tasks could be more intuitive.

What problems is the product solving and how is that benefiting you?

Policy Manager gives us centralized visibility and control over firewall policies, helping reduce manual effort, improve compliance, and identify risky or unnecessary rules faster.

What do you like best about the product?

We use it to audit our firewall policies and ensure there are no redundant rules, shadow rules, or unauthorized changes that could lead to security issues.

What do you dislike about the product?

The UI is a bit hard to navigate but the functionality is great.

What problems is the product solving and how is that benefiting you?

There are too many firewall rules being created, and they end up needing cleanup. However, there’s no clear way to tell whether all of them are actually necessary or whether they’re creating security holes.

What do you like best about the product?

What I value most about the Policy Manager is the centralized view of firewall rules from various manufacturers in a single console. The analysis of redundant, shadowed, and overly permissive (any/any) rules has significantly reduced the time for periodic base review. The change request and approval workflow leaves the audit trail ready for compliance evidence, which greatly facilitates internal and GRC audits. I also like the impact simulation before applying the change, which prevents unauthorized access or service disruption in production.

What do you dislike about the product?

The interface could be more intuitive, especially in navigating between devices and searching for rules in large bases. Some screens become slow when loading extensive policies, and risk analysis reports take time to generate. Integration with some manufacturers and ITSM/SIEM tools requires manual adjustments, and object normalization is not always consistent across platforms. The initial learning curve is steep, and the documentation could include more practical examples. It would be interesting to have AI resources to suggest automatic rule optimization and cleanup.

What problems is the product solving and how is that benefiting you?

Draft for this question, already including Price/ROI, the only topic missing from the panel:

The Policy Manager addresses the lack of visibility and control over firewall rules in an environment with multiple manufacturers and many devices. Previously, rule review was manual, done in spreadsheets, time-consuming, and prone to error. Today, we quickly identify redundant, shadowed, unused, or overly permissive rules, reducing the attack surface and facilitating incident response, as it allows immediate knowledge of which network path is open. The change workflow with approval and audit trail generates ready evidence for internal audits and compliance requirements, saving hours of work in each cycle. The return is seen in the reduction of the team's operational effort, fewer errors in production changes, and increased security in periodic rule recertifications.

What do you like best about the product?

What I like best about Policy Manager is that it gives me a centralized way to manage and review security policies across the environment. It simplifies policy administration, improves visibility into firewall and access control rules, and helps ensure consistency and compliance. The reporting and auditing capabilities make it easier to identify gaps, validate policy changes, and reduce the time spent on manual reviews. Overall, it helps me manage security more efficiently while maintaining a strong security posture

What do you dislike about the product?

What I dislike about Policy Manager is that some tasks can feel more complex and time-consuming than necessary, especially when reviewing large numbers of policies or troubleshooting rule-related issues. The interface can occasionally be difficult to navigate when trying to quickly identify dependencies or understand the impact of policy changes. Additionally, reporting and workflow automation could be more streamlined to reduce manual effort. While it is a powerful tool overall, there is room for improvement in usability and operational efficiency

What problems is the product solving and how is that benefiting you?

Policy Manager is solving the challenge of managing and enforcing security policies consistently across a large and complex environment. It provides centralized visibility into policies, helps identify misconfigurations and compliance gaps, and streamlines policy reviews and change management. This benefits me by reducing the time spent on manual policy analysis, improving the accuracy of security decisions, and making it easier to maintain a strong security posture across the organization. It also helps ensure that policy changes are documented, auditable, and aligned with security and compliance requirements.

What do you like best about the product?

I primarily use Firemon Policy Manager to centralize security policy management in a multi-vendor environment. I like the ability to manage different firewalls from manufacturers like Huawei, Aruba, and Juniper in a single panel, which saves hours of manual work. The rule usage analysis and identification of shadowed or redundant rules are features that save me time. Real-time alerts on policy changes also provide extra security for the operation. It is my daily tool for risk analysis, change auditing, and cybersecurity compliance. The automation of rule recertification facilitates security audits, and the solution helps minimize human errors and clean up legacy policies, reducing the attack surface.

What do you dislike about the product?

The performance in generating extensive reports and loading screens is an area that could be improved. Specifically, the latency in "rule explore" and historical report generation is a problem. When I search or filter policies on firewalls with thousands of rules, the web interface takes time to render the results, which hinders during critical troubleshooting. Compliance reports covering long periods also tend to take time to compile in the database. An optimization in search response time and more efficient background processing for data export would substantially improve workflow fluidity during high-pressure moments. Additionally, there is a learning curve and interface density that are challenges, and topology analysis with advanced NAT is complex.

What problems is the product solving and how is that benefiting you?

I use the Policy Manager to centralize security policy management in multi-vendor environments, automate rule recertification, ensure compliance, and minimize operational risks, as well as save time by analyzing and cleaning obsolete rules, which improves our security and efficiency.

What do you like best about the product?

Firewall review rules, best practices, and compliance.

What do you dislike about the product?

Everything is good, and there’s nothing I dislike.

What problems is the product solving and how is that benefiting you?

Please help me remove insecure ports and address the zero-hit policies.

What do you like best about the product?

simplifies rule analysis, policy reviews, and compliance reporting, making it much easier to identify redundant, unused, or risky rules

What do you dislike about the product?

Creating customized reports and workflows often requires extra configuration

What problems is the product solving and how is that benefiting you?

reducing the time spent on manual rule reviews, change validation, and audit preparation. it also helps ensure that the firewall changes made by administrators comply with internal security guidelines and regulatory requirements

What do you like best about the product?

It provides me the ability to get real time visibility

What do you dislike about the product?

I cannot think of anything I dislike about the solution.

What problems is the product solving and how is that benefiting you?

It is easy to review different rules on multiple devices, especially when there is large number of security devices. A major benefit is it saves time.

What do you like best about the product?

It is easy to use, and it also has features that allow me to do the work efficiently.

What do you dislike about the product?

Honestly, I don't have any negative points at the moment.

What problems is the product solving and how is that benefiting you?

According to what has been reviewed, resolve the basic problems related to the management and administration of policies in my organization.