Forcepoint NGFW vs. Palo Alto Networks Prisma Access

If you are looking for a smaller network/security team, the ease and low complexity create an easy to manage environment. One engineer can easily manage 100 nodes/locations. If you are just starting to get security conscious and predict regular adjustments to policy, routing, and access, this is a very good system for making easy to understand and low impact changes on a regular basis without operations interruption.

Incentivized

I still think Palo Alto Networks Prisma Access is the best SASE/SSE product out there. It just has such good granular controls and up to date security definitions that you can feel absolutely secure in your purchase. GlobalProtect was a lifesaver for me when COVID hit so yes I had to work my butt off to get it up and running quickly and as secure as I possibly could but it worked amazing and had excellent performance after we got it running and tied to MFA, certificates and security policies.

Incentivized

• Easy to manage and make changes on - ACL's are done with ease.
• Easy USB initial configuration - The easy initial setup of a new location and firewall saves massive time. Settings are automatically pushed to new nodes upon contact with the controller.
• Low Complexity - This system does not have a lot of complexity requiring extra hours, training, or personnel to manage.

Incentivized

• A secure end-to-end network with virtualization to be able to choose the port of our interest and an opening of the same.
• Monthly updates that are sufficient, automatic updates that allow us not to have to do the manual implementation.
• Prisma allows automatically opens an IPsec/SSL VPN connection to Prisma Access.
• Is flexible and scalable

Incentivized

• Poor Reporting - It exists but even when calling in to support for assistance, they have no idea how to tackle customizing reports or searching for specific data.

Incentivized

• With all of it's unique features it does take some time to get folks up to speed in regards to supporting/managing the software.
• Doesn't always play nice with non Palo Alto software.

Incentivized

The Graphical User Interface is very easy to read, understand and work with. The usability of this product is very high.

Incentivized

I still say that Palo Alto Networks Prisma Access is the best. I love their GUI, their policies are easy to manage, the sales team is VERY helpful (especially when support is not). I still recommend them to everyone I talk to.

Incentivized

Support has varied over the history of the company. Terro is a name that comes up often with the best of service from this company.

Incentivized

There are similar hardware and license costs between the two products. The Forcepoint NGFW product is by far easier to use and manage.

Incentivized

The McAfee product really isn’t a great option. The configuration is a nightmare and requires a lot of time. The policy management has a high learning curve.

Incentivized

• Efficiency/Productivity increase. The company moved from Cisco firewall and routing hardware to Forcepoint NGFW. It now takes fewer people and fewer hours to manage the new product. This has allowed the company to put the man-hours to use on other projects and tasks.
• Long term viability. This has been a concern in the past when the company started as Stonegate, merged to become Stonesoft then got purchased by McAfee, then McAfee got purchased by Intel. However, with Forcepoint the product seems to have found a stable home.
• Low complexity. The Web GUI based system for management has reduced the cost of personnel and training required. There is no longer a need for the company to have higher trained and higher salary cost employees to manage the system. Mid-level admins at lower salaries are capable of managing the GUI based system with ease.

Incentivized

• It is extremely easy to manage who has remote access in our organization now.
• It has allowed us to more fluidly get remote workers up and running.
• Another tool to mange is never a good thing and the Panorama UI could use a little work.

Incentivized