Anyone have Cisco Firepower real-world experience? how does it fare compared to other NGFW offerings? Specifically whichever version they've squeezed into the 5506-X at this point.

We're mainly a Fortigate shop for NGFW functionality, though we have ASAs out for basic firewalling capabilities.

How are Firepowers features compared to other vendors? Things like:

• Web filtering
  • Category
  • Individual
• SSL inspection
• Determining source user of traffic and allowing its use in rules, e.g. AD integration
• executable/filetype blocking
• In-line AV scanning