Palo Alto Networks Next-Generation Firewalls - PA Series

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
N/A
Palo Alto next-generation firewalls classify all traffic, including encrypted and internal traffic, based on application, application function, user and content. Users can create security policies to enable only authorized users to run sanctioned applications.N/A
Pricing
Palo Alto Networks Next-Generation Firewalls - PA Series
Editions & Modules
No answers on this topic
Offerings
Pricing Offerings
Next-Generation Firewalls - PA Series
Free Trial
No
Free/Freemium Version
No
Premium Consulting/Integration Services
No
Entry-level Setup FeeNo setup fee
Additional Details—
More Pricing Information
Community Pulse
Palo Alto Networks Next-Generation Firewalls - PA Series
Considered Both Products
Next-Generation Firewalls - PA Series
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Watchguard is recommended in Midsize Companies. It hasn't a real L7 feature for policies pfSense is powerful and open-source but L7 feature missing so it's impossible to goal our objectives
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
The Palo Alto Networks Next-Generation Firewalls - PA Series are much easier to configure than both Checkpoint and Cisco, in my opinion. From Security policy management and traffic inspection standpoints, there is no comparison.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto NGFW is quite stable and able to perform most of the security features. It is also have real-time updates for the latest signatures which helps to identify and prevent threats efficiently. The overall deployment is straight forward and easy to implement. User …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Fortinet - faster than Palo Alto, but features are less.
Cisco ASA
Palo Alto Single Pass gathering all [of] the data in a series of logs is the best among other firewalls. It is very clear in inspection and providing you insight [into] data [that] is passing through the network.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
On other firewalls creating the policy is a bit complex, but with the Palo Alto Next-Generation Firewalls, it can be done with ease as it provides the best user-friendly GUI. It provides complete protection from both signature-based and signature-less attacks both. With its …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Cisco Firepower only has basic functionality, URL filtering always create problems also GUI is very bad that's why most organization [are] using Palo Alto rather than Cisco Firepower.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
I don't think we can compare other firewalls with this powerful firewall device. All have less features as compared to this device.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
We are using Cisco ASA before in our environment but when it comes to deep scanning & layer 7 security it doesn't have that capability. After using Palo Alto Networks Next-Generation Firewall we are using sandboxing & advance malware protection that provides high-level end-user …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
No one can say any other companies in this time is better than Palo Alto Networks Next-Generatoin Firewalls. Palo Alto offers very advanced features which protect you[r] organization. Advanced malware protection, anti spam, lots of other threats.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto has a user-friendly GUI and it comes with a single console from where you can manage all the policies and routing. It has advanced capabilities to prevent APT (Advanced Persistent Threat) attacks. Cisco Firepower lacks in capabilities with Palo Alto if we compare it.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Biggest reason to select Palo Alto Networks Next-Generation Firewalls - PA Series over these products is for the performance during traffic inspection via various engines like UID, AppID, and ContentID. Another factor was both the other products were not very capable of …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
At first we continued using Check Point as our port-based firewall while using Palo Alto for content/URL filtering and threat prevention. However, we soon realized the Palo Alto did everything the Check Point did, plus quite a bit more. Hence, it made sense to consolidate all …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
I did not originally choose Palo Alto as our core firewall appliance. It has already been purchased when I came on board. However, I did recently choose to purchase new Palo Alto firewalls to replaced our older models. I have had experience working with Cisco ASAs and …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
I've been using NGFW since 2014. When it really was the main player in the new term "Next Gen Firewall". I'm sure the bar is pretty matched across the board with Fireeye and other niche players and even Juniper/Cisco etc. Eventually there will be equilibrium. I chose Palo …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
The main competitor I can compare Palo Alto to is the FortiGate series of devices by Fortinet. FortiGates are capable UMTs and also less expensive than Palo Altos. That being said, category filtering on FortiGates is less effective, and they are not as feature-rich as Palo …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto Networks Next-Generation Firewalls outperform and better security model for HQ and remote offices.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
We previously used Cisco 5585 ASAs with firepower. We wanted a more holistic solution than what the Cisco ASA was providing for us. In this situation, we needed to have consistency in how rules were applied across multiple types of traffic, while also knowing what kind of …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
We put Palo Alto in place over Cisco ASA as a product set. Until a few years ago, Cisco didn’t have a next-generation firewall, primarily meaning their appliances didn’t have application identification or control. Since their acquisition of Sourcefire, however, they’ve …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
In my opinion, Palo Alto provides the most easily managed firewall on the market, with the most options for device management. Compared to other vendors it's very obvious that Palo Alto focuses on their firewall technologies and supporting them. The monitoring and visibility …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
1.Good Technical support with strong expertise
2.Easy to deploy
3.Good features like APP ID and CONTENT ID.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto has the ability to secure public cloud which none of the vendors have currently. With Palo Alto VM series you can deploy firewall VM in minutes and secure your public cloud.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
PA was cheaper than the managed services I would be purchasing with Sonicwall.
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
I've been really happy with our Palo Alto [solutions] and we're replacing a good chunk of our ASAs with Palo Alto. As far as firewalls go the Palo Alto firewalls are significantly better in my opinion, but we still use ASAs as VPN devices in a few scenarios and they work just …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Why did we choose PAN? The number of exploits written for PAN devices are much smaller than ASA. It's much simpler to manage than the checkpoint. It includes web filtering module with the product. Quite simply, it was just the best bang for the buck. Our management consistently …
Top Pros
Top Cons
Features
Palo Alto Networks Next-Generation Firewalls - PA Series
Firewall
Comparison of Firewall features of Product A and Product B
Palo Alto Networks Next-Generation Firewalls - PA Series
9.4
21 Ratings
10% above category average
Identification Technologies9.921 Ratings
Visualization Tools9.021 Ratings
Content Inspection9.921 Ratings
Policy-based Controls10.021 Ratings
Active Directory and LDAP9.920 Ratings
Firewall Management Console10.021 Ratings
Reporting and Logging7.621 Ratings
VPN8.421 Ratings
High Availability10.020 Ratings
Stateful Inspection10.020 Ratings
Proxy Server8.810 Ratings
Best Alternatives
Palo Alto Networks Next-Generation Firewalls - PA Series
Small Businesses
pfSense
pfSense
Score 9.2 out of 10
Medium-sized Companies
pfSense
pfSense
Score 9.2 out of 10
Enterprises
Sophos UTM
Sophos UTM
Score 8.9 out of 10
All AlternativesView all alternatives
User Ratings
Palo Alto Networks Next-Generation Firewalls - PA Series
Likelihood to Recommend
9.5
(37 ratings)
Likelihood to Renew
10.0
(1 ratings)
Usability
10.0
(2 ratings)
Support Rating
8.4
(9 ratings)
User Testimonials
Palo Alto Networks Next-Generation Firewalls - PA Series
Likelihood to Recommend
Palo Alto Networks
Palo Alto firewall only affords by Large level infrastructure having a budget for Security Prospect. I will recommend it for the Card information industry & Confidential data solutions. Because it provides a bucket of security features that are not easily vulnerable.
Read full review
Pros
Palo Alto Networks
  • The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services.
  • The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services.
  • The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls.
  • It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank.
Read full review
Cons
Palo Alto Networks
  • Our specific model is a bit slow and outdated and takes up to 10 minutes to commit a configuration change.
  • Nested security rules would be helpful instead of a linear approach. But rule creation in general is very simple.
  • Documentation gives a very straight forward answer to some items but is very vague in others.
  • Support could be a little better. An issue we had a tech was insistent it was the "other guy" and it ended up being the very latest PAN OS upgrade.
Read full review
Likelihood to Renew
Palo Alto Networks
The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed
Read full review
Usability
Palo Alto Networks
In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.
Read full review
Support Rating
Palo Alto Networks
We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.
Read full review
Alternatives Considered
Palo Alto Networks
No one can say any other companies in this time is better than Palo Alto Networks Next-Generatoin Firewalls. Palo Alto offers very advanced features which protect you[r] organization. Advanced malware protection, anti spam, lots of other threats.
Read full review
Return on Investment
Palo Alto Networks
  • Overall, even though the device is very expensive (both hardware and licensing), the product does produce a decent ROI, given that one (or HA pair) of devices can do so many things, such as anti-virus, anti-malware, URL filtering, SSL decryption, SSL VPN, routing, etc.
  • There will definitely be sticker shock when you're renewal comes up annually (or after 3 years), so be sure to look very carefully at the recurring costs of this product, with respect to licensing and hardware/software maintenance.
Read full review
ScreenShots