Cisco Catalyst Center (formerly Cisco DNA
Center) is a network management system that leverages AI to connect,
secure, and automate customer’s network operations. It harnesses the Catalyst family of switching and wireless through AI-enabled
automation that simplifies the IT experience and streamlines complex network
operations. Offering
operational flexibility, Cisco Catalyst Center can be deployed on-premises on a
physical appliance or in a VMware virtual environment, or in a…
N/A
Palo Alto Panorama
Score 8.5 out of 10
N/A
According to the information provided by the vendor, Palo
Alto Panorama is a network security management solution that intends to
simplify and enhance cybersecurity processes for businesses. The product's
primary objective is to offer various features, including unified policy
management, centralized visibility, automated threat response, simplified
configuration, unrivaled scalability, and rapid security adoption. It claims to
assist organizations in efficiently managing their firewalls and…
Cisco Catalyst Center does a good job configuring the switches and forming the fabric using recommended configuration and specific switch setup. Managing switches through inventory is another job Cisco Catalyst Center does well. On the other hand managing access to infrastructure (host onboarding for example) is one tedious job. To set 48 access ports on a switch takes more time than it would take an engineer connected to a switch using CLI.
I think Palo Alto Panorama is suited for administrators of all levels because certain things can be locked down to certain permission levels. But there are executive dashboards all the way down to the weeds for the highest of administrators. This truly is a single pane of glass tool because you never have to go into the individual firewalls for anything.
I think it abstracts the technical detail of what actually needs to be configured on the devices. So you can specify the intent and it'll do complex technical commands on the devices. You do not necessarily need to know I'm from a technical background, so I do know that, but on a scale, it's very easy just to click a few buttons and say what you want and it'll just do it for you.
If you need to push a setting or config to multiple firewalls Panorama can do that flawlessly.
Panorama has its logging centralized and this makes it easy to locate and reviews logs compared to having to get logs from each device.
I love how the interface matches the interface on the firewall. This makes the learning curve less steep.
Adding new firewalls to Panorama is super easy and not complex. Panorama can push a lot of the config and settings so you don't have to manually do it.
Setting golden images is tricky and cant always get it to work as advertised. Takes a couple times. Having a recent problem where it stopped working and Cisco TAC only explanation is that 3850 is no longer supported.
When I initially set up, couldnt find documentation. I set up a lot of IP addresses and assigned them to DNA. Cant find where these are located.
Troubleshooting with TAC, they always want me to run some scripts that I have no clue how to do.
Ability to be able to access configuration backups would be great.
The ability to push out OS updates could be improved in Panorama. It has the abilities, but the use is not intuitive, to the point that we generally connect directly to the firewalls to download the OS updates directly.
Scheduling. It would be nice to be able to schedule jobs to run at certain times. Pushing out updates, like OS updates mentioned above, can require significant bandwidth. So being able to schedule that work for hours that would not directly affect the users would be a welcome addition.
The list of devices in the Templates tabs should be sorted the same way that he devices are grouped in the Device Group tab, rather than just alphabetical. If there was a way to chose the order of the devices, maybe by tag, that would work as well.
Panorama has given us much more than we expected and the support for the product, by Palo Alto Networks has been great. We would like to see some improvements that I mentioned in another review, like scheduling changes, but overall Panorama has provided a very capable product and we are very happy with it.
Cisco DNA Center is going to help us in security, simplicity and ease of administration. Cisco DNA Center is complete management and control platform that simplifies and streamlines network operations. Cisco DNA Center offers a single dashboard for every core function in your network. With this platform, IT can become more nimble and respond to changes and challenges faster and more intelligently.
You can do anything via the GUI without going to the CLI. High real time security as every five minutes, it updates the list of phishing websites. High protection as the firewall communicates with the cloud, a machine running artificial intelligence helps to detect malware or other threats.
El soporte de CISCO DNA Center es muy bueno, responden a mis dudas pero no he tenido oportunidad de reportar un incidente o determinar un tiempo de respuesta critico. The support of CISCO DNA Center is very good, they answer my questions, but I have not had the opportunity to report an incident or determine a critical response time.
Palo Alto has a very nice customer support. People are very nice and were quick to reply, whenever we had an issue with the subscription or the blacklist tool. There is also a great deal of information on their website that covers each and every detail about the uses and the threat signatures. The community keeps on updating their information very frequently. Small issues are easily solved from the documentation, and for other issues, the customer support service is always present. However, on Fridays it becomes a little delayed as per my observation.
The software upgrades and ability to integrate with the wireless telemetry data set Cisco DNA Center ahead. However the automation with Change Control, Intent and better path mapping (even across MPLS and WAN Circuits) make NetBrain a needed tool to get that gives you that visibility and flexibility. Solarwinds has the ablity to view Netflow which would be an interesting add to DNA Center or an easier path to get or integrate with Stealthwatch.
Palo Alto Panorama and Junos Space Security Director have many similar features but Palo Alto Panorama excels in almost all of them. The monitoring tools in Palo Alto Panorama are easy to use and give more in-depth insight into what is going on in your network. Palo Alto's security is ranked much higher and the Web Application Security is also superior to that of the Junos counterpart.
Initial cost is pricy, but management needs to understand the value this provides so make them aware
Reporting could be improved in more detail in our opinion, but it gives a great overview of your environment. High level overview for managers would be greatly appreciated with as little or much detail as needed for certain Cisco gear.
Does not work as well with some older Cisco equipment because they want you to buy new, again the cost impact comes into play.
At a previous company, I deployed Palo Alto firewalls to a data center, and 12 branch locations. This allowed us to replace MPLS links with IPSec tunnels between the sites. This resulted in significantly more throughput and soft savings of increased productivity. However, the estimated net of $220,000 in hard savings over five years is what is most impressive. I could not have effectively managed all those devices without Palo Alto Panorama.
