Barracuda CloudGen Firewall vs. Palo Alto Networks WildFire

I would say a small business with a basic firewall and security needs would be a perfect fit for the Barracuda CloudGen firewall. I know that they soon end up leaving the NG models and are moving forward with the F series firewall. I think the F series is a much more difficult to manage device and doesn’t offer simplistic configuration or use and lacks cloud control so I don’t understand the move on Barracuda’s part to nix a great easy to manage the firewall. I do think that the NG line is maybe too simple for bigger businesses and would lack some main features that they would require.

Incentivized

Palo Alto Networks WildFire is highly effective in enterprise environments where detecting zero-day threats and unknown malware is critical. Small businesses may find the cost of advanced subscriptions prohibitive, especially if they only need basic protection. Much of our infrastructure is OT and Palo Alto Networks WildFire is cloud dependent so cannot be used where we have air-gapped systems.

Incentivized

• The management software is excellent. It make it much easier to manage the firewalls than some of the other vendors.
• Watching real-time traffic is easy to do when trying to troubleshoot a users issues getting to a particular service.
• Support from Barracuda has been excellent. We rate their phone and online remote support as being the best in the business.
• We like the QoS and Traffic shaping of the NG Firewalls. They help is manage our limited bandwidth, so that business critical resources are available over lesser critical resources.
• Integration with Active Directory makes it easy to identify users activities in logs.

Incentivized

• This is could base and easily manageable for our collocation. While working within the could can review in live time potential treats that it has reported from other devices.
• Worked very well with existing Palo Alto devices.
• Another huge plus is the simplicity of managing and ease of scalability.
• Its cost is competitive with similar/like products available.

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

• Cost
• I would personally like to see more JSON support in the API rather than XML, but that's being very nitpicky

Incentivized

It works very well and takes care of protecting us from threats new and well-known. It's been a game changer in terms of threat detection & prevention.

Incentivized

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

It is a great product that has definitely improved our security posture, however it does require quite a bit of training and time spent customizing for the environment. We had several difficulties in deployment but Palo Alto support was able to help us work through the problems that we were not able to figure out on our own.

Incentivized

I could go on and on about how good Barracuda's support really is. I have yet to have a problem they didn't help me fix and I always learn something when talking with them. The story that best describes my overall experience with Barracuda's support is this: When I first put in the xSeries they had a problem with a policy route. There was a bug in the code and in the one situation I was it, it just would not work. I went up the levels of support and they couldn't fix it. Well, next thing I know I am on the phone with 2 of the guys that programmed the thing and they work out the solution in no time and get me going. That is support. That is what I have come to expect from Barracuda. If the tech on the phone doesn't know the answer, they do not stop until they find it. Grant it, I also have to admit I do not call support with every problem, I try to work it out on my own first as that is how I learn best, so when I do call support it is going to be complicated.

Incentivized

PAN support is very good. You can get the reasonable and timely support on any conditions. When the product is already integrated with the PAN firewalls, you can choose the severity levels based on the effect. The customer service/TAC is very helpful, they even have additional recommendations of advises for product usability. Local partners are also assisting the cases and give their expertise.

Incentivized

Our Cisco firewall was always difficult to make any changes against. It had no user-friendly GUI interface. We were calling technical support most of the time whenever we needed to make any changes. The Barracuda CloudGen Firewall has a GUI interface which we are looking forward to getting better acquainted with as we move off of our old Cisco. Of course, Barracuda's technical support is always there and is top notch!

WildFire from Palo Alto Networks provides security with very little overhead. With AutoFocus, they’ve got threat intelligence built right in. That way, it can prepare us to react swiftly when a significant danger is identified and dealt with as soon as possible. They introduced firewalls that are aware of applications and can make use of Wildfire. It sped our ability to respond to emerging threats up because of this game-changing development.

Incentivized

• We saved multiple thousands of dollars the first year out with the firewall in maintenance fees. We paid for the firewall and 3 years of service and still saved money.
• The ease of management allows me to do my job more efficiently. I save a lot of time when doing my day to day job because I can get to my firewall virtually anywhere.
• I feel a lot safer and my business more secure knowing that I have configured things the way they need to be and it was simple and not overly complicated.

Incentivized

• We've had one or two malware files that were blocked by Wildfire. We use it occasionally to check unusual or unexpected files. Hard to monetize ROI, because we don't know what the impact would have been if the file made it through.
• We pay significantly for the Wildfire licenses, but given the potential impact to our business, we feel it is worthwhile. Figure costs are somewhere around $1,500 per year per firewall for a mid-range model. Can be higher or lower for different sized firewalls. Onsite appliance was somewhere between $50-100K, which was too much for us, so we use the cloud model.

Incentivized