Cisco ACI vs Palo Alto Panorama

• The REST API allows your to programmatically interact with the network and make massive changes very quickly when needed.
• The API allows you to tie together Server Provisioning tools, storage provisioning tools, into an orchestration platform such as Ansible to streamline new deployments and builds.
• New Deployments are extremely simple once you've worked out your programatic deployment process. We can deploy new clients/tenants in seconds rather than days or weeks like it used to take.
• Replacing failed switches/apics/etc is also extremely easy.
• Tightly couple the underlying Network Infrastructure to VMWare Deployments to allow VMs to move anywhere in the datacenter at the drop of a hat.

Read full review

• Being able to create common rules that can be maintained on multiple firewalls is very beneficial to our management of the different functional needs of the firewalls.
• Using templates to manage regional requirements is helpful for rolling out changes in the networking side, from user managemnet globally to SEIM/Syslog collection regionally, being able to stack templates helps deliver the necessary changes across multiple firewalls.
• Panorama's Dashboard and ACC provides useful information that can be set to see All firewalls, or just certain groups of firewalls. Since each group of firewalls has different applications running through them, being able to isolate one group at a time helps identify if there are errant devices causing unexpected traffic, and what type of traffic it is.

Read full review

• Cost is always a challenge and ACI is no different.
• The linkage between ACI and Tetration has been rebranded since the initial marketeering of it and this has caused confusion and in some cases diminished the business case as a result.
• The fact that Cisco has developed multiple Orchestrators of their differing network stacks causes issues when trying to pull together a singular approach to orchestration across a Cisco e-2-e network in an Enterprise.

Read full review

• It needs improvement for the threats categorized as "high" severity. There are lot of false positives. Therefore finding real ones is hard in "high" category.
• The threat/traffic view needs improvement. It needs at least a feature to sort based on columns. Downloading and parsing using Excel takes a lot of time.

Read full review

• So far we havent been able to leverage al the positives of the ACI infrastructure like Open API and RBAC so it's difficult to comment.
• A negative I would think of is the change in the design implementation for Datacenter Interconnectivity.

Read full review

• At a previous company, I deployed Palo Alto firewalls to a data center, and 12 branch locations. This allowed us to replace MPLS links with IPSec tunnels between the sites. This resulted in significantly more throughput and soft savings of increased productivity. However, the estimated net of $220,000 in hard savings over five years is what is most impressive. I could not have effectively managed all those devices without Palo Alto Panorama.

Read full review