Cisco ACI vs Palo Alto Panorama

• The REST API allows your to programmatically interact with the network and make massive changes very quickly when needed.
• The API allows you to tie together Server Provisioning tools, storage provisioning tools, into an orchestration platform such as Ansible to streamline new deployments and builds.
• New Deployments are extremely simple once you've worked out your programatic deployment process. We can deploy new clients/tenants in seconds rather than days or weeks like it used to take.
• Replacing failed switches/apics/etc is also extremely easy.
• Tightly couple the underlying Network Infrastructure to VMWare Deployments to allow VMs to move anywhere in the datacenter at the drop of a hat.

Read full review

• Being able to create common rules that can be maintained on multiple firewalls is very beneficial to our management of the different functional needs of the firewalls.
• Using templates to manage regional requirements is helpful for rolling out changes in the networking side, from user managemnet globally to SEIM/Syslog collection regionally, being able to stack templates helps deliver the necessary changes across multiple firewalls.
• Panorama's Dashboard and ACC provides useful information that can be set to see All firewalls, or just certain groups of firewalls. Since each group of firewalls has different applications running through them, being able to isolate one group at a time helps identify if there are errant devices causing unexpected traffic, and what type of traffic it is.

Read full review

• Cost is always a challenge and ACI is no different.
• The linkage between ACI and Tetration has been rebranded since the initial marketeering of it and this has caused confusion and in some cases diminished the business case as a result.
• The fact that Cisco has developed multiple Orchestrators of their differing network stacks causes issues when trying to pull together a singular approach to orchestration across a Cisco e-2-e network in an Enterprise.

Read full review

• Unexpected log outs outside the normal timeout window seem to happen often
• Better reporting, really a downside to the product
• Scheduling would be a great feature

Read full review

• We typically don't have to touch ACI. It does what we need it to do without having to "baby" it.
• It's constantly running so the amount of downtime we have (if any) is very minimal.
• It was pricey in the beginning but with is reliability it was well worth it.

Read full review

• Reduced a lot of threats by blocking poorly reputed domains automatically, saving us a lot of time, which we would have otherwise spent on putting it on the manual blacklist.
• Helped us in almost discontinuing with the Cisco Firepower, saving a lot of money, with its powerful IDS feature.

Read full review