Palo Alto Networks Next-Generation Firewalls - PA Series vs. VMware SD-WAN

It is well-suited for a company needing strong edge security with ease of administration. It comes standard with many features such as VPN, Application ID and "Day-1 Config" that make the networks it protects secure from the very start. Palo is definitely a premium product and is much more expensive than other firewalls, but the value is realized immediately. The robust options for firewall rules/policies allow the administrator to apply security in new and creative ways to hit the sweet spot between security and usability.

Incentivized

VMware SD WAN is a great solution for tying multiple locations together that are not physically located close. The link aggregation used in the technology allows for quicker failover to redundant connections, which makes the surface traffic seem to be uninterrupted. If planning to connect multiple locations while utilizing the existing internet, Veloclouds SDWAN provides stable and accurate aggregation of connections that provide a good sense of stability for the price.

Incentivized

• The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services.
• The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services.
• The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls.
• It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank.

Incentivized

• VeloCloud is excellent at automatically choosing the best internet connection based on speed and quality.
• It provides a web based interface allows all our connections to be managed from anywhere in the world.
• Because VMware has a strong history in networking and is a name I can trust, we are able to confidently invest in their technology.

Incentivized

• Setting up certain things can be somewhat complicated due to the numerous options and abstractions involved.
• It would be nice to have somewhere to get simple canned reports easily.
• It would be nice to be able to remove options we never use from various setup dialogs.

Incentivized

• VMware SD-WAN could provide cli access for troubleshooting
• VMware SD-WAN boxes could have more ports
• VMware SD-WAN box could have more applications to provide more health and visibility of the traffic passing through

The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed

Incentivized

It can be a little tricky at first if you have never used the product or a firewall before. If you have experience with firewalls in general, it does not take long to learn the Palo Alto Networks Next-Generation Firewalls - PA Series interface. They offer great training resources and knowledge base articles to help get up to speed.

Incentivized

VMware SD-WAN has great usability. We have had a positive experience with the solution. It has helped solved a number of issues with our network such as visibility in user usage, application usage, and prioritizing critical application network traffic. VMware SD-WAN user interface is also very easy to understand and configure.

Incentivized

We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.

Incentivized

There are still some glitches that need to be worked out. As an example, I rebooted a device at one of our branch locations and it just died. That should never have happened, and I've only seen this happen when a company needs to improve hardware on some of their lower-end models.

Incentivized

We are using Cisco ASA before in our environment but when it comes to deep scanning & layer 7 security it doesn't have that capability. After using Palo Alto Networks Next-Generation Firewall we are using sandboxing & advance malware protection that provides high-level end-user security. Also after implementing it we can easily monitor user-level traffic.

Incentivized

At the time we made our decision to move forward with VeloCloud, Cisco Viptela and Cisco Meraki were the two players we compared against. Cisco's offerings were very customizable when using Viptela, but there was a big learning curve to implement. Meraki at the time was a lot simpler, but we needed the ability to customize some features in order to implement SD-WAN in our environment. VeloCloud was the perfect solution during our POC as it satisfied our needs.

Incentivized

• We used to outsource our Firewall and it's management. Not only did we find their SLA's to be lacking, in general, but communication between us was horrible. Many times we could not understand them and that resulted in less than desirable rule creation or troubleshooting.
• Since we no longer have to pay a company for 24/7 management (and SLOW SLA's) we are saving a ton of money each year. Also our fellow employee's are much happier that things can be resolved in a timely manner.

Incentivized

• Eliminate the cost of an MPLS circuit.
• Ease of deployment: the amount of time saved when adding additional sites to the solution, especially when you have a profile already built and when you add a new VC you just associate that profile with that appliance. Again, in a matter of minutes, you can have a new site up and running.
• Since there is not true firewall built-in, you would have to either purchase a third-party firewall or the virtual firewall that is supported by Velocloud.

Incentivized