I like the fact that I can segregate my policies based on a real-time reading of my traffic with the help of the Create Traffic Flow Profile. When I set my FireMon to listen to what is happening behind that rule in a flat network, FireMon itself points out the weaknesses of this rule and informs me of possible vulnerabilities. Review collected by and hosted on G2.com.

I don't like the fact that I can't filter changes made by specific users; this sometimes hinders diagnosis and reduces accuracy when identifying which user made the change. I don't like the cluster settings, this duplicates the number of rules in my environment and increases management complexity. Not to mention that in some cases it is not necessary to monitor both firewalls of a cluster since in terms of policies and interface both are the same thing regardless of the hardware. Review collected by and hosted on G2.com.

What I like most about FireMon Policy Manager is the visibility it provides across a multi-vendor firewall environment. Rather than jumping between multiple consoles, I can review rule usage, identify redundant or shadowed rules, and spot compliance gaps from a single pane of glass. The automated rule recertification and cleanup recommendations save a lot of time during audits, especially in a PCI-DSS environment where documentation matters just as much as the actual configuration. The risk analysis and change workflow also support a proper approval process before rules go live, which helps reduce the chance of misconfigurations making it into production. Overall, it adds real structure and consistency to policy governance. Review collected by and hosted on G2.com.

Initial setup in multi-vendor environments is time-consuming, and support for newer firmware versions can lag. The reporting interface feels dated with limited customization. Licensing costs are considerable, and advanced workflow automation features require dedicated training to fully leverage. Review collected by and hosted on G2.com.

What I like best about FireMon Policy Manager is the depth of visibility it gives you into firewall policies across a multi-vendor environment. Being able to pull every rule from Palo Alto, Cisco, Fortinet, and Check Point devices into a single normalized view, and then actually query that data with SIQL, has been a huge time-saver compared to the manual auditing we used to do. The real-time change detection and automated compliance assessments mean we catch drift and risky configurations before they become audit findings, rather than during them. Review collected by and hosted on G2.com.

The UI is probably my biggest gripe. While it's functional and packs in an enormous amount of capability, it can feel dated in spots compared to more modern SaaS-style interfaces, and the learning curve for new users is steeper than I'd like. Review collected by and hosted on G2.com.

It helps me manage multiple types of firewall devices. Review collected by and hosted on G2.com.

One of the biggest challenges I’ve had with Policy Manager is how complex it can be to visualize and manage large rule sets. The platform would also benefit from stronger automation and more AI-driven capabilities to cut down on manual work. Integration with external systems, along with more flexible reporting options, are additional areas where improvements would make a noticeable difference and significantly enhance operational efficiency. Review collected by and hosted on G2.com.

Users frequently appreciate that it doesn’t just list rules—it analyzes them for over-permissioning, unused rules, and potential attack paths. That “risk scoring + context” is often cited as more useful than basic audit tools. Review collected by and hosted on G2.com.

Steep learning curve / complexity

A common complaint is that the platform can feel complex to fully master, especially for new users or teams without prior policy management tooling experience. Advanced features (like optimization, reporting, or workflow tuning) often require significant product knowledge.

Some users also note that while the UI is usable, deeper functionality isn’t always intuitive and takes time to configure properly. Review collected by and hosted on G2.com.

What I value most is the real-time visibility and centralized management, because it allows me to have everything under control from a single place. It also highlights the very powerful automation of changes and compliance, which reduces manual work and helps maintain order. Finally, the proactive risk analysis provides peace of mind by anticipating potential problems before they escalate. Review collected by and hosted on G2.com.

The learning curve is quite steep. Additionally, the interface can be overwhelming, especially at first. I have also noticed high resource consumption, which affects the user experience. Review collected by and hosted on G2.com.

What I really appreciate about FireMon Policy Manager is how it handles the "messy" reality of modern networks. In the real world, most companies don’t rely on just one firewall brand; you usually end up with a mix of Palo Alto, Check Point, Fortigate, and maybe some cloud-native security groups in AWS or Azure. What I like is that Policy Manager treats them all the same—it acts as a universal translator so you aren’t jumping between five different consoles just to check a single rule. The UI is built for power users, so while there’s a bit of a learning curve, the performance and AI-driven insights make it worth it by spotting risky "policy drift" before an auditor does. It’s definitely an investment, but the ROI hits home when you realize you’ve traded weeks of manual cleanup and "audit panic" for a streamlined, automated workflow backed by a support team that truly understands the tech. Review collected by and hosted on G2.com.

While FireMon is incredibly powerful, it isn’t without its frustrations, and most of them stem from its “enterprise-first” design. The biggest hurdle is the steep learning curve: it’s a “power user” tool, so if you aren’t in it every day, the interface can feel overwhelming—and in some places, even a bit “basic” or dated, especially around the reporting engine. It’s also fairly resource-heavy, needing a lot of RAM and CPU to keep everything running smoothly, which can be a real headache for infrastructure teams.

In day-to-day use, maintenance and troubleshooting can feel clunky as well. The underlying architecture is complex, and when something goes sideways, the logs can be surprisingly ambiguous. That often leaves you wishing for more “self-service” visibility, instead of having to call support. Essentially, it’s like driving a high-end semi-truck: it’ll carry any load you give it, but it’s definitely not a “point-and-click” sports tool. Review collected by and hosted on G2.com.

Rule lifecycle management, compliance, reporting, dashboards, and overall usability. Review collected by and hosted on G2.com.

Cloud integration moves more slowly than expected. For example, the ability to normalise AWS/Azure load balancers feels slower than it should. Review collected by and hosted on G2.com.

I like how Policy Manager aligns all the activity within one portal. It looks pretty good since it captures everything within one platform instead of gathering logs from different Palo Alto consoles. Review collected by and hosted on G2.com.

Normally, they do have some kind of upgrades. When they have upgrades, it should be properly communicated to us so we can engage our change process. Review collected by and hosted on G2.com.

I really like the integration with multiple vendors, as well as the simplicity in which it shows the status of the policies. Review collected by and hosted on G2.com.

I believe the graphical interface can be improved significantly, especially in the distribution and organization of the buttons, to make it clearer and more comfortable to use. Review collected by and hosted on G2.com.