Azure Application Gateway vs. Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series

For building scalable and highly available applications, Azure Application Gateway does most of the job on behalf of you; automatically load-balancing traffic from a number of users to a number of back-end servers. This ensure scalability and availability. The in-built security is great as can be expected from Microsoft, and user has a variety of tools for monitoring the health of the load-balancing function as well as the health of back end servers behind it.

Incentivized

PaloAlto VM-200 is a virtualized firewall with high processing power and network edge protection. The great advantage is being able to implement in a VMware environment without worrying about hardware, rack space, physical network connections and others. It can be easily managed via the web and remotely to create protection, access and reporting rules. The VM-200 firewall can be used by any company, small or large because it has several models available according to the real needs of each one.

Incentivized

• Easy integration with Load Balancer and Azure Scale Set to provide a full solution for traffic management.
• With rich routing rule, we could use one Application Gateway as the central point for all internal applications to expose to the external network.

Incentivized

• Decrypt internet traffic
• daily reporting of top internet users
• classify internet traffic in real-time to allow us to understand the organization needs.
• Strong AI capabilities

Incentivized

• Live examples in the Azure documentation
• Application Gateway UI Blade in Azure Portal can be streamlined
• Have more advanced feature set as WAF (Web Application Firewall)

Incentivized

• High Availability can be improved to allow active-active deployment
• All command line documentation to provide and support automation
• It will be nice to have link aggregation just like in the hardware firewall models.

Incentivized

I don’t like that it's part of the Microsoft brand. In general, I am not a fan of Microsoft products but Azure gets it right.

Incentivized

Palo Alto VM series are best selling and industry's top-selling security product which customers prefer while securing their public cloud environment

Incentivized

Other load balancing tools in Azure (Azure LB and Azure Traffic Manager) are limited in their functionality in comparison with the Azure Application Gateway, and also, they don't provide security features. Azure Firewall, although it has security features, is more expensive, and most importantly, it's not a load balancer at all.

Incentivized

palo alto firewalls are application-oriented systems. They can beat other product which are based on layer 3/4 inspection. Vm series are also quickly available and could be useful in urgent deployment needs . other vendors like Fortinet and cisco could take much more time to provide the VM and in some cases installation and license validation are complicated

Incentivized

• Positive : Improved performance and scalability
• Positive : Better and enhanced Security
• Positive : Efficiency
• Negative: Cost
• Negative: More resources to manage.

Incentivized

• ROI has been achieved quickly through lack of security incidents.
• Inline filtering happens at line rate, unline Sourcefire from Cisco.
• Great incentives from PAN to switch made a difference in the choice to change.

Incentivized