PAN: It costs a lot, but it's worth it!
March 09, 2019
PAN: It costs a lot, but it's worth it!
Score 9 out of 10
Vetted Review
Verified User
Software Version
PA-220 Series
Overall Satisfaction with Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto (PAN) is used by a division of ours who did not have a full-time network person. We found the product easy and intuitive to work with, which is why our team truly enjoys using the PAN products. The wildfire product addressed and dealt with threats in real time, without a major performance hit like Cisco Sourcefire embedded modules within the 55xx-x series.
- Easy to learn and use the web-based console. Learn the platform and be able to manage any Palo Alto device.
- No separate management for control/data plane like the checkpoint.
- VPN is VERY easy to set up, even double/twice NAT VPN, and can use VTI for route-based VPN setups.
- Units are far more expensive than competitors. It's worth it, but the price point can scare potential clients off.
- Bottom line at first, but once they're up and running, they're rock solid.
Why did we choose PAN? The number of exploits written for PAN devices are much smaller than ASA. It's much simpler to manage than the checkpoint. It includes web filtering module with the product. Quite simply, it was just the best bang for the buck. Our management consistently requires that we use network devices for 5-7 years, so these units fit the bill.