FireMon Solution

What do you like best about the product?

It is easy to use, and it also has features that allow me to do the work efficiently.

What do you dislike about the product?

Honestly, I don't have any negative points at the moment.

What problems is the product solving and how is that benefiting you?

According to what has been reviewed, resolve the basic problems related to the management and administration of policies in my organization.

What do you like best about the product?

What I like most about FireMon Policy Manager is the visibility it provides across a multi-vendor firewall environment. Rather than jumping between multiple consoles, I can review rule usage, identify redundant or shadowed rules, and spot compliance gaps from a single pane of glass. The automated rule recertification and cleanup recommendations save a lot of time during audits, especially in a PCI-DSS environment where documentation matters just as much as the actual configuration. The risk analysis and change workflow also support a proper approval process before rules go live, which helps reduce the chance of misconfigurations making it into production. Overall, it adds real structure and consistency to policy governance.

What do you dislike about the product?

Initial setup in multi-vendor environments is time-consuming, and support for newer firmware versions can lag. The reporting interface feels dated with limited customization. Licensing costs are considerable, and advanced workflow automation features require dedicated training to fully leverage.

What problems is the product solving and how is that benefiting you?

FireMon Policy Manager solves firewall rule bloat, compliance gaps, and lack of change control visibility. It helps identify unused, redundant, or high-risk rules across multiple vendors from a single console. In a PCI-DSS environment, this translates directly into faster audit preparation, cleaner rulesets, and a defensible change management process that reduces both risk and manual effort significantly.

What do you like best about the product?

Makes it easy to keep all branch policies in sync.

What do you dislike about the product?

There’s a bit of a learning curve, but the free training is helpful and makes it easier to get started.

What problems is the product solving and how is that benefiting you?

Visibility into the policies for each of my branch firewalls makes troubleshooting access issues much easier.

What do you like best about the product?

Rule lifecycle management, compliance, reporting, dashboards, and overall usability.

What do you dislike about the product?

Cloud integration moves more slowly than expected. For example, the ability to normalise AWS/Azure load balancers feels slower than it should.

What problems is the product solving and how is that benefiting you?

Rule lifecycle management, rule documentation and justification, continuous compliance monitoring, policy optimization and cleanup, and reporting—along with dashboards and overall usability.

What do you like best about the product?

Its easy to use and customize for my compliance requirements.

What do you dislike about the product?

The UI is kinda boring, like really needs a facelift.

What problems is the product solving and how is that benefiting you?

Becoming audit ready

What do you like best about the product?

I like how Policy Manager aligns all the activity within one portal. It looks pretty good since it captures everything within one platform instead of gathering logs from different Palo Alto consoles.

What do you dislike about the product?

Normally, they do have some kind of upgrades. When they have upgrades, it should be properly communicated to us so we can engage our change process.

What problems is the product solving and how is that benefiting you?

I use Policy Manager to align all logs and capture activities across multiple projects and locations, simplifying monitoring in one tool.

What do you like best about the product?

What I like best about FireMon Policy Manager is the depth of visibility it gives you into firewall policies across a multi-vendor environment. Being able to pull every rule from Palo Alto, Cisco, Fortinet, and Check Point devices into a single normalized view, and then actually query that data with SIQL, has been a huge time-saver compared to the manual auditing we used to do. The real-time change detection and automated compliance assessments mean we catch drift and risky configurations before they become audit findings, rather than during them.

What do you dislike about the product?

The UI is probably my biggest gripe. While it's functional and packs in an enormous amount of capability, it can feel dated in spots compared to more modern SaaS-style interfaces, and the learning curve for new users is steeper than I'd like.

What problems is the product solving and how is that benefiting you?

Policy Manager solves the fundamental problem of firewall sprawl, over time, environments accumulate thousands of rules across dozens of devices from different vendors, and nobody has a clear picture of what's actually in place, what's being used, and what's quietly creating risk. Before tools like this, answering a simple question like "does any rule allow telnet from an untrusted zone?" meant logging into multiple consoles, exporting configs, and stitching the answer together by hand. With Policy Manager, that's a single query and a few seconds of work.

What do you like best about the product?

What I like most about Policy Manager is how it centralizes and streamlines policy administration across the organization. Another big plus is that FireMon support can create custom scripts for us when we need them.

What do you dislike about the product?

It takes some time to get used to learning FireMon and to find the things you’re looking for.

What problems is the product solving and how is that benefiting you?

We are able to run reports for compliance and audit with Policy Manager and connect to our devices.

What do you like best about the product?

What I really appreciate about FireMon Policy Manager is how it handles the "messy" reality of modern networks. In the real world, most companies don’t rely on just one firewall brand; you usually end up with a mix of Palo Alto, Check Point, Fortigate, and maybe some cloud-native security groups in AWS or Azure. What I like is that Policy Manager treats them all the same—it acts as a universal translator so you aren’t jumping between five different consoles just to check a single rule. The UI is built for power users, so while there’s a bit of a learning curve, the performance and AI-driven insights make it worth it by spotting risky "policy drift" before an auditor does. It’s definitely an investment, but the ROI hits home when you realize you’ve traded weeks of manual cleanup and "audit panic" for a streamlined, automated workflow backed by a support team that truly understands the tech.

What do you dislike about the product?

While FireMon is incredibly powerful, it isn’t without its frustrations, and most of them stem from its “enterprise-first” design. The biggest hurdle is the steep learning curve: it’s a “power user” tool, so if you aren’t in it every day, the interface can feel overwhelming—and in some places, even a bit “basic” or dated, especially around the reporting engine. It’s also fairly resource-heavy, needing a lot of RAM and CPU to keep everything running smoothly, which can be a real headache for infrastructure teams.

In day-to-day use, maintenance and troubleshooting can feel clunky as well. The underlying architecture is complex, and when something goes sideways, the logs can be surprisingly ambiguous. That often leaves you wishing for more “self-service” visibility, instead of having to call support. Essentially, it’s like driving a high-end semi-truck: it’ll carry any load you give it, but it’s definitely not a “point-and-click” sports tool.

What problems is the product solving and how is that benefiting you?

The core problem FireMon solves is the "rule bloat" and fragmentation that naturally happens as a company grows. In a typical setup, you’re dealing with a massive, tangled web of rules across different platforms that nobody wants to touch for fear of breaking something. FireMon steps in as the "cleaner" and "architect," identifying exactly which rules are redundant or risky so you can delete them with confidence. For me, the real benefit is the shift from being reactive to proactive; instead of spending weeks panicking before an audit or manually digging through logs to find a misconfiguration, you get automated reports and real-time alerts. It basically gives you back your weekends by turning hours of manual rule-checking into a few clicks, ensuring your network stays "clean" and compliant without the usual operational headache.

What do you like best about the product?

Users frequently appreciate that it doesn’t just list rules—it analyzes them for over-permissioning, unused rules, and potential attack paths. That “risk scoring + context” is often cited as more useful than basic audit tools.

What do you dislike about the product?

Steep learning curve / complexity

A common complaint is that the platform can feel complex to fully master, especially for new users or teams without prior policy management tooling experience. Advanced features (like optimization, reporting, or workflow tuning) often require significant product knowledge.

Some users also note that while the UI is usable, deeper functionality isn’t always intuitive and takes time to configure properly.

What problems is the product solving and how is that benefiting you?

“We have too many firewall rules and no one fully understands them”

Over time, rules accumulate across firewalls, cloud security groups, and vendors. This leads to:

Duplicate or conflicting rules
Orphaned/unused access
Overly permissive “temporary” rules that never get removed