Cisco Umbrella vs Next-Generation Firewalls - PA Series

• Filters content at the DNS level. Makes it a little harder for the sneaky ones to make it through.
• Since this is at the DNS level, using their DNS servers (as a forwarder to your local DNS) it is extremely fast. Transparent.
• Always being updated. Not dependent on "definitions" or algorithms - a site is either blacklisted or whitelisted.
• Easy to implement, apply, maintain

Read full review

• AppID is able to see what the actual internet traffic is. For instance instead of port 443 just being "Internet traffic" we can define access to Facebook-base or all the other facets of facebook.
• UserID allows us to define policies based on group or user access and integrates with our Active Directory. This helps to configure a least access privilege and if we find misuse of the network we can tighten specific users to a stricter policy.
• GlobalProtect VPN connection helps our employee's connect from home remotely. This provides a very secure connection with minimal configuration.
• Wildfire provides very up-to-date information regarding global attack mitigations and stopping techniques.

Read full review

• Keeping up to date on known malicious sites and blocking those is difficult for all vendors, but this could always be improved upon.
• A more detailed descriptions of what is included the Security Categories would be useful. Generic descriptions are provided. For example, state lottery sites could be detailed in the description of the Gambling category.

Read full review

• The CLI is a bit confusing, and it's difficult to find what you're looking for. Takes a lot of practice. Definitely not as good as the Cisco CLI.
• Updating the firmware is often a very dangerous process, especially when jumping minor or major releases. More QA should be done to validate and ensure no issues during upgrades. I'll admit it's gotten better over time, but there is still room for improvement.

Read full review

• Saved us lots of technician time dealing w/ Malware and virus issues, I don't think we've had a malware incident this year for example. This was the main reason we bought the product in the first place. We've renewed 2 times because we see the value.
• Umbrella helped us reduce the risk of CryptoLocker variants infecting our clients.

Read full review

• Utilizing Panorama to manage all of our Firewalls Policies by creating device groups is a real time saver. We only need to configure policies once and push them to the appropriate firewalls saving a lot of time.
• Having the added security feature protection is good peace of mind in an ever-increasing threat landscape.
• Monitoring traffic by IP, URL or username provides excellent insight into our traffic.

Read full review