NetScaler Gateway vs. Palo Alto Networks Next-Generation Firewalls - PA Series

The best usage scenario for Citrix Netscaler Gateway is in enterprises with a high volume of telecommuting users or in situations where the user needs to access certain applications from anywhere. In our case as a hospital, we need our doctors to access the medical records of the patients and be able to carry out any required action, with a high level of security and with a certain agility.

Incentivized

Palo Alto firewall only affords by Large level infrastructure having a budget for Security Prospect. I will recommend it for the Card information industry & Confidential data solutions. Because it provides a bucket of security features that are not easily vulnerable.

Incentivized

• allows seamless use of 2-factor authentication for heightened security within the VPN, and lowers risk of an external hack because of it.
• it allows for differing levels of security. access can be set specifically through the VPN so 2 users can use the same site and get different results depending on their active directory security policy.
• It can grant the ability to launch a single application or an entire VPN envelope

Incentivized

• The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services.
• The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services.
• The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls.
• It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank.

Incentivized

• I suggest make it more faster because sometimes its lagging but not all the time.
• When it comes to Notepad I suggest having options for the size of fonts, and color of fonts, to make it look nicer.
• I suggest making it more user-friendly, and more features so that users can perfectly maximize this tool.

• Our specific model is a bit slow and outdated and takes up to 10 minutes to commit a configuration change.
• Nested security rules would be helpful instead of a linear approach. But rule creation in general is very simple.
• Documentation gives a very straight forward answer to some items but is very vague in others.
• Support could be a little better. An issue we had a tech was insistent it was the "other guy" and it ended up being the very latest PAN OS upgrade.

Incentivized

The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed

Incentivized

In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.

Incentivized

Support is pretty good and pretty fast to respond. I can't say I can really complain about the support experience I've had with them, as they've resolved issues within a reasonable time-frame. Of course, they could always be faster and better, but I think for what we pay, it's well worth the money.

Incentivized

We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.

Incentivized

The only other SSL VPN type product I have used was Citrix Secure Gateway. Netscaler is a MUCH more feature filled product. CSG was a free add on to older versions of Citrix Metaframe and XenApp and was specifically just used for securing Citrix infrastructure. Netscaler excels in securing Citrix but can also be used to secure shared apps of all kinds regardless of how they are published. I did do a test run on 2X's product which did include a secure gateway but then base 2X product was not really comparable to Citrix so did not go too far with it.

Incentivized

No one can say any other companies in this time is better than Palo Alto Networks Next-Generatoin Firewalls. Palo Alto offers very advanced features which protect you[r] organization. Advanced malware protection, anti spam, lots of other threats.

Incentivized

• Our data is secure and protected from the outside world which is priceless.
• It saves our business money as we can provide our clients with a safe and secure alternative to accessing their data remotely rather than having to take the more expensive route of travelling on-site to gather the data we need.
• It gives us the opportunity to host on-site training using gated cloud based environments which enhances our business services. The ability to easily change access information, such as a password, after administering a training course gives us the flexibility we need to provide and subsequently restrict access to our training environments to suit our needs.

Incentivized

• Overall, even though the device is very expensive (both hardware and licensing), the product does produce a decent ROI, given that one (or HA pair) of devices can do so many things, such as anti-virus, anti-malware, URL filtering, SSL decryption, SSL VPN, routing, etc.
• There will definitely be sticker shock when you're renewal comes up annually (or after 3 years), so be sure to look very carefully at the recurring costs of this product, with respect to licensing and hardware/software maintenance.

Incentivized