Policy Manager Reviews & Product Details

The analysis of existing ACL's and the ability to highlight overly permissive rules that require more configuration to make more secure. Review collected by and hosted on G2.com.

Some of the analysis output organization can be a little confusing. Review collected by and hosted on G2.com.

What I value most about the Policy Manager is the centralized view of firewall rules from various manufacturers in a single console. The analysis of redundant, shadowed, and overly permissive (any/any) rules has significantly reduced the time for periodic base review. The change request and approval workflow leaves the audit trail ready for compliance evidence, which greatly facilitates internal and GRC audits. I also like the impact simulation before applying the change, which prevents unauthorized access or service disruption in production. Review collected by and hosted on G2.com.

The interface could be more intuitive, especially in navigating between devices and searching for rules in large bases. Some screens become slow when loading extensive policies, and risk analysis reports take time to generate. Integration with some manufacturers and ITSM/SIEM tools requires manual adjustments, and object normalization is not always consistent across platforms. The initial learning curve is steep, and the documentation could include more practical examples. It would be interesting to have AI resources to suggest automatic rule optimization and cleanup. Review collected by and hosted on G2.com.

What I like best about Policy Manager is that it gives me a centralized way to manage and review security policies across the environment. It simplifies policy administration, improves visibility into firewall and access control rules, and helps ensure consistency and compliance. The reporting and auditing capabilities make it easier to identify gaps, validate policy changes, and reduce the time spent on manual reviews. Overall, it helps me manage security more efficiently while maintaining a strong security posture Review collected by and hosted on G2.com.

What I dislike about Policy Manager is that some tasks can feel more complex and time-consuming than necessary, especially when reviewing large numbers of policies or troubleshooting rule-related issues. The interface can occasionally be difficult to navigate when trying to quickly identify dependencies or understand the impact of policy changes. Additionally, reporting and workflow automation could be more streamlined to reduce manual effort. While it is a powerful tool overall, there is room for improvement in usability and operational efficiency Review collected by and hosted on G2.com.

I primarily use Firemon Policy Manager to centralize security policy management in a multi-vendor environment. I like the ability to manage different firewalls from manufacturers like Huawei, Aruba, and Juniper in a single panel, which saves hours of manual work. The rule usage analysis and identification of shadowed or redundant rules are features that save me time. Real-time alerts on policy changes also provide extra security for the operation. It is my daily tool for risk analysis, change auditing, and cybersecurity compliance. The automation of rule recertification facilitates security audits, and the solution helps minimize human errors and clean up legacy policies, reducing the attack surface. Review collected by and hosted on G2.com.

The performance in generating extensive reports and loading screens is an area that could be improved. Specifically, the latency in "rule explore" and historical report generation is a problem. When I search or filter policies on firewalls with thousands of rules, the web interface takes time to render the results, which hinders during critical troubleshooting. Compliance reports covering long periods also tend to take time to compile in the database. An optimization in search response time and more efficient background processing for data export would substantially improve workflow fluidity during high-pressure moments. Additionally, there is a learning curve and interface density that are challenges, and topology analysis with advanced NAT is complex. Review collected by and hosted on G2.com.

I like the fact that I can segregate my policies based on a real-time reading of my traffic with the help of the Create Traffic Flow Profile. When I set my FireMon to listen to what is happening behind that rule in a flat network, FireMon itself points out the weaknesses of this rule and informs me of possible vulnerabilities. Review collected by and hosted on G2.com.

I don't like the fact that I can't filter changes made by specific users; this sometimes hinders diagnosis and reduces accuracy when identifying which user made the change. I don't like the cluster settings, this duplicates the number of rules in my environment and increases management complexity. Not to mention that in some cases it is not necessary to monitor both firewalls of a cluster since in terms of policies and interface both are the same thing regardless of the hardware. Review collected by and hosted on G2.com.

What I like most about FireMon Policy Manager is the visibility it provides across a multi-vendor firewall environment. Rather than jumping between multiple consoles, I can review rule usage, identify redundant or shadowed rules, and spot compliance gaps from a single pane of glass. The automated rule recertification and cleanup recommendations save a lot of time during audits, especially in a PCI-DSS environment where documentation matters just as much as the actual configuration. The risk analysis and change workflow also support a proper approval process before rules go live, which helps reduce the chance of misconfigurations making it into production. Overall, it adds real structure and consistency to policy governance. Review collected by and hosted on G2.com.

Initial setup in multi-vendor environments is time-consuming, and support for newer firmware versions can lag. The reporting interface feels dated with limited customization. Licensing costs are considerable, and advanced workflow automation features require dedicated training to fully leverage. Review collected by and hosted on G2.com.

PO provides a solid workflow for our team. It gives us clear ownership and tracking when we’re vetting rules. When a rule meets certain criteria, we route it into PO so it can go through the proper vetting process. Review collected by and hosted on G2.com.

The UI is lackluster. It's not easy to navigate from one ticket to another. It seems to be an extension to Security Manager rather than a separate part. Assigning tickets and moving from one ticket to another is not the easiest. Review collected by and hosted on G2.com.

We use it to audit our firewall policies and ensure there are no redundant rules, shadow rules, or unauthorized changes that could lead to security issues. Review collected by and hosted on G2.com.

The UI is a bit hard to navigate but the functionality is great. Review collected by and hosted on G2.com.

What I like best about FireMon Policy Manager is the depth of visibility it gives you into firewall policies across a multi-vendor environment. Being able to pull every rule from Palo Alto, Cisco, Fortinet, and Check Point devices into a single normalized view, and then actually query that data with SIQL, has been a huge time-saver compared to the manual auditing we used to do. The real-time change detection and automated compliance assessments mean we catch drift and risky configurations before they become audit findings, rather than during them. Review collected by and hosted on G2.com.

The UI is probably my biggest gripe. While it's functional and packs in an enormous amount of capability, it can feel dated in spots compared to more modern SaaS-style interfaces, and the learning curve for new users is steeper than I'd like. Review collected by and hosted on G2.com.

Yes, it is very helpful. I can manage all policies of all firewalls (via directly or management software). It has 3 core features: 3C (compliance, cleanup & change) Review collected by and hosted on G2.com.

The APA feature may not work exactly in large networks (when we have a lot of hops in the middle) Review collected by and hosted on G2.com.