<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
60 Ratings

Next-Generation Firewalls - PA Series

<a href='https://www.trustradius.com/static/about-trustradius-scoring#question3' target='_blank' rel='nofollow noopener noreferrer'>Customer Verified: Read more.</a>
60 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.1 out of 101
20 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9.1 out of 101

Likelihood to Recommend

Next-Generation Firewalls - PA Series

The Palo Alto device is well suited for a direct replacement for any traditional or other firewall. There is little room for error on this device, it will do exactly what you have it configured for. Between security zones, security policies, nat policies, policy based forwarding, and everything in between, you have to keep your head on straight when making big or small changes.
The Palo Alto does have one overall issue our users report more than anything. The Palo Alto is a strict NAT device, so unless you have the ability to 1 to 1 map IP addresses for your users who need something beside strict NAT limitations, the Palo Alto will cause you grief.
No photo available

Zscaler Web Security

If you're looking to ramp up your Cyber Security operations, Zscaler is a must-see. Their demos are great and the implementation is fairly painless. DAS helps you to get it set up and ensure success.
No photo available

Feature Rating Comparison

Firewall

Next-Generation Firewalls - PA Series
8.5
Zscaler Web Security
9.5
Identification Technologies
Next-Generation Firewalls - PA Series
8.3
Zscaler Web Security
10.0
Visualization Tools
Next-Generation Firewalls - PA Series
8.2
Zscaler Web Security
10.0
Content Inspection
Next-Generation Firewalls - PA Series
8.3
Zscaler Web Security
10.0
Policy-based Controls
Next-Generation Firewalls - PA Series
8.8
Zscaler Web Security
10.0
Active Directory and LDAP
Next-Generation Firewalls - PA Series
8.6
Zscaler Web Security
10.0
Firewall Management Console
Next-Generation Firewalls - PA Series
8.2
Zscaler Web Security
9.0
Reporting and Logging
Next-Generation Firewalls - PA Series
8.7
Zscaler Web Security
10.0
VPN
Next-Generation Firewalls - PA Series
8.8
Zscaler Web Security
High Availability
Next-Generation Firewalls - PA Series
9.0
Zscaler Web Security
8.0
Stateful Inspection
Next-Generation Firewalls - PA Series
9.0
Zscaler Web Security
9.0
Proxy Server
Next-Generation Firewalls - PA Series
8.0
Zscaler Web Security
9.0

Pros

Next-Generation Firewalls - PA Series

  • AppID is able to see what the actual internet traffic is. For instance instead of port 443 just being "Internet traffic" we can define access to Facebook-base or all the other facets of facebook.
  • UserID allows us to define policies based on group or user access and integrates with our Active Directory. This helps to configure a least access privilege and if we find misuse of the network we can tighten specific users to a stricter policy.
  • GlobalProtect VPN connection helps our employee's connect from home remotely. This provides a very secure connection with minimal configuration.
  • Wildfire provides very up-to-date information regarding global attack mitigations and stopping techniques.
Christopher St.Amand profile photo

Zscaler Web Security

  • Zscaler allows us to grow our network without a great deal of additional hardware infrastructure.
  • It secures cloud-based applications without the data center having to perform complex configurations.
  • We are slowly moving away from VPN as our primary security mechanism and this permits this.
Joseph Imbimbo profile photo

Cons

Next-Generation Firewalls - PA Series

  • The CLI is a bit confusing, and it's difficult to find what you're looking for. Takes a lot of practice. Definitely not as good as the Cisco CLI.
  • Updating the firmware is often a very dangerous process, especially when jumping minor or major releases. More QA should be done to validate and ensure no issues during upgrades. I'll admit it's gotten better over time, but there is still room for improvement.
No photo available

Zscaler Web Security

  • The pre-baked reports within Zscaler could do with a refresh, add some new reports in-tune with new threats. IE: show me any examples of crypto mining detected in the org
  • Zscaler could make it easier to clean out expired accounts or those of ex-employees to get a more accurate reading of activity
  • Failover monitoring for GRE tunnels could be improved although it does work
No photo available

Likelihood to Renew

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 10.0
Based on 1 answer
The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed
No photo available

Zscaler Web Security

No score
No answers yet
No answers on this topic

Usability

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 10.0
Based on 2 answers
In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.
No photo available

Zscaler Web Security

No score
No answers yet
No answers on this topic

Support

Next-Generation Firewalls - PA Series

Next-Generation Firewalls - PA Series 9.2
Based on 5 answers
As Palo Altos proved themselves to be quite reliable, I do not have much experience with customer support. One important thing regarding Palo Alto is incredible amount of training available online. Most vendors cannot match Palo Alto in this regard.
No photo available

Zscaler Web Security

No score
No answers yet
No answers on this topic

Alternatives Considered

Next-Generation Firewalls - PA Series

I have used Cisco & Sonicwall primarily in most of my 23+ years of network security experience. Over the years all of these platforms have matured, but Palo Alto beats them all in terms of user interface.

The ability to run reports, get access to data immediately, and have the data be extremely accurate and granular is what sets Palo Alto apart from the others. Deployment of the VPN client(s) on multiple platforms is simple to manage and doesn't break other applications like many other VPN client software does. The performance of the firewall from a throughput and monitoring standpoint is second to none.
No photo available

Zscaler Web Security

Old product was WebSenseWhy Zscaler Cost management Improve compliance & risk management
No photo available

Return on Investment

Next-Generation Firewalls - PA Series

  • With Palo Alto we have the ability to grow and accommodate all our network infrastructure needs. Even a firewall that is 5 years old is still capable of handling advance requests that come to our business.
  • As our business grows, our presence in the public cloud is growing exponentially. With Palo Alto firewalls we are able to keep up with the pace of this growth and still keep our infrastructure secure.
  • Its ability to integrate with multi-vendor gives us the freedom to be with any network vendor as we grow.
Irteza Rana profile photo

Zscaler Web Security

  • Zscaler is helping to track productivity.
  • Zscaler is helping us monitor bandwidth usage to sites that are less involved with the business.
  • Zscaler took 2-4 members of our team a substantial amount of time to get all of the details hammered out.
No photo available

Pricing Details

Next-Generation Firewalls - PA Series

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Zscaler Web Security

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Add comparison