Likelihood to Recommend Palo Alto firewall only affords by Large level infrastructure having a budget for Security Prospect. I will recommend it for the Card information industry & Confidential data solutions. Because it provides a bucket of security features that are not easily vulnerable.
Read full review In our organization, Symantec ProxySG and Advanced Secure Gateway (ASG) is our primary and second line of defense facing the internet It is positioned behind in conjunction with an intrusion protection service. Before using this concept of defense, our Internet firewalls were continuously being overworked and saturated, slowing down traffic as a result. It is not an option any more not to have Symantec ProxySG and Advanced Secure Gateway (ASG) in our infrastructure. Read full review Pros The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services. The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services. The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls. It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank. Read full review In conjunction with Active Directory, we can allow or deny access to the internet very quickly. We can also determine the level of access to the internet. To satisfy our executive requirements, we can provide regular reports on internet usage. Malicious protection Symantec ProxySG and Advanced Secure Gateway (ASG) provides beyond our expectations. It is our first level of defense, thus allowing us to reduce our investment in internal security systems. Read full review Cons Our specific model is a bit slow and outdated and takes up to 10 minutes to commit a configuration change. Nested security rules would be helpful instead of a linear approach. But rule creation in general is very simple. Documentation gives a very straight forward answer to some items but is very vague in others. Support could be a little better. An issue we had a tech was insistent it was the "other guy" and it ended up being the very latest PAN OS upgrade. Read full review On occasion, content analysis needs some tweaking. Specifically, when huge files our downloaded. For our organization using cloud-based applications and services is very discouraged. However, the universe seems to be trending towards cloud-based offerings. It may be reassuring if Symantec ProxySG and Advanced Secure Gateway (ASG) could enhance protection in dealing with cloud services, particularly in protecting data. Read full review Likelihood to Renew The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed
Read full review Usability In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.
Read full review Support Rating We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.
Read full review We have submitted support request to Symantec ProxySG and Advanced Secure Gateway (ASG). In all cases, responses have been timely, and very comprehensive. The support staff is very knowledgeable and does not hesitate to involve expert resources as required. We have never had an unsolved case with Symantec ProxySG and Advanced Secure Gateway (ASG). Read full review Alternatives Considered No one can say any other companies in this time is better than Palo Alto Networks Next-Generatoin Firewalls. Palo Alto offers very advanced features which protect you[r] organization. Advanced malware protection, anti spam, lots of other threats.
Read full review Trend Micro IPS combined with Symantec ProxySG and Advanced Secure Gateway (ASG) is a winning formula for our organization Palo Alto next-generation Firewall. Could not handle the load and protection level that we have today. Read full review Return on Investment Overall, even though the device is very expensive (both hardware and licensing), the product does produce a decent ROI, given that one (or HA pair) of devices can do so many things, such as anti-virus, anti-malware, URL filtering, SSL decryption, SSL VPN, routing, etc. There will definitely be sticker shock when you're renewal comes up annually (or after 3 years), so be sure to look very carefully at the recurring costs of this product, with respect to licensing and hardware/software maintenance. Read full review With the advent of the Symantec ProxySG and Advanced Secure Gateway (ASG), we have reduced by 95% the number of internal security incidents and events. As a result, we have reduced the effort and cost of investigating security incidents. Knock on wood, as a result, and we have never had any data or security breaches. Read full review ScreenShots