Palo Alto Networks Next-Generation Firewalls - PA Series vs. Ubiquiti Networks UniFi

Anywhere where high performance and application-specific rules are necessary would be a great fit. Palo Alto NG firewalls are exceptionally well suited to doing application-based rules, rather than service-based rules, although they can still easily do those. The cost might make it less well-suited for smaller installations or where the more complicated setup procedures are too much for a user with limited proficiency to handle.

Incentivized

In the past few months we purchased thousands of dollars in brand new networking equipment from Ubiquiti. IT DOES NOT WORK CORRECTLY We bought 2 sets of hardware. 1 for home office and 1 for work. They both have the same issue (internet stops working). We have emailed literally dozens of times with customer service and they have not been able to resolve the issue. We have requested escalation to more trained technicians and have asked them to log into our system to assess. None of this has happened and our internet continues to intermittently work.

• The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services.
• The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services.
• The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls.
• It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank.

Incentivized

• AP's are very affordable.
• Most of the AP's are highly reliable and can be used indoors or in covered outdoor spaces.
• Outdoor Mesh AP's with an external directional antenna can effectively cover outdoor spaces with dual band wifi better than much more expensive APs.
• Unifi Protect via the Cloud Key Gen2+ is probably the slickest, most affordable IP camera system on the market right now.
• Unifi controller is powerful yet simple to administrate.
• Remote management of entire networks through a single pane of glass is easy to accomplish with the Unifi controller.
• Cloud Key Gen2 solves problems with the first Cloud Key wiht a built-in battery backup.
• When you are "full stack" Unifi with wifi, network switches and gateways, the control you can wield over a network in just a few clicks and the amount of data you can glean from a quick glance in the controller is incredibly impressive. It makes an IT guy wish every product/service could be so tightly and well-integrated.
• Community support is excellent, Unifi staff monitors their official forums and responds to almost every thread.

Incentivized

• The interface is a little complicated at first. This is common for all firewall products I've used but Palo Alto could definitely update the UI.
• Firewall rule audits are cumbersome. I have been using third-party tools to assist with the management. It would be great if Palo Alto could build out this functionality within Panorama.
• Best-Practice Assessment (BPA) is not well advertised. These are very useful but require reaching out to your rep. Palo Alto should look at automating this and building it into QBR touchpoints with their customers.

Incentivized

• VLANs: They can make these work more smoothly. Setup can be more intuitive.
• Cloud Key: These need to be stabilized; they lose their programming a little too easily.
• Stop selling the Gen-1 cloud key: No battery means you need an external power source or you must be onsite to power it off before updating.
• Portal can be modernized.

Incentivized

The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed

Incentivized

PA Series firewalls provides good value for the price spent on them. Specially the 3K and 5K series devices contains hardware which keeps the management access smooth even during the peak hours of data traffic. The next gen firewall filtering services does function well (except for some bugs).

Incentivized

UniFi's system is intuitive in how options are placed and explained throughout the interface. What is not directly explainable within the interface, Ubiquiti does provide several knowledgebase documents explaining best practices and methods of troubleshooting when things don't go exactly right. We've been using them for over three years, and the benefits vastly outweigh any negatives we could come up with on the equipment and system.

Incentivized

We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.

Incentivized

Support tickets can be proactively created within the dashboard with full detailed documentation. The Ubiquiti website provides detailed documentation on support. Forum and user groups also provide the interested community with information that covers all aspects of issues or questions users can encounter with the latest and most updated information.

Incentivized

We are using Cisco ASA before in our environment but when it comes to deep scanning & layer 7 security it doesn't have that capability. After using Palo Alto Networks Next-Generation Firewall we are using sandboxing & advance malware protection that provides high-level end-user security. Also after implementing it we can easily monitor user-level traffic.

Incentivized

Ubiquiti is overall easier to work with. There is no special training needed to accomplish many of the things required with a Cisco product. Since my time is stretched thin, I need something that I can manage without being weighed down by command-line communications. Also, I am able to use my wireless devices to maintain every Ubiquiti device on my network.

Incentivized

• We used to outsource our Firewall and it's management. Not only did we find their SLA's to be lacking, in general, but communication between us was horrible. Many times we could not understand them and that resulted in less than desirable rule creation or troubleshooting.
• Since we no longer have to pay a company for 24/7 management (and SLOW SLA's) we are saving a ton of money each year. Also our fellow employee's are much happier that things can be resolved in a timely manner.

Incentivized

• The access points and switch were extremely affordable and we've had minimal downtime over the life of the products.
• The switch was in our main rack and there was a bug in the firmware that would reboot the switch if you made a change to one of the switch ports (that was not in use at the time). This caused our entire organization to have a network outage, in the middle of the day. Fortunately we didn't have any customer refunds to issue. We've had to purchase different switches for the main racks, and place the UniFi switch in a better suited place.

Incentivized