Item: Palo Alto Networks Next-Generation Firewalls - PA Series
Rating: 10
Author: Verified User

Use Cases and Deployment Scope

We utilize 5260's at both our Datacenters running in HA Pair mode for redundancy and 3220's running in HA Pair mode at each remote office. All production network traffic is routed via our datacenter firewalls due to our VDI infrastructure, and web traffic uses the local office Palo Alto Networks Next- Generations Firewalls - PA Series for egress. All policies are managed via device groups on Panorama.

Pros and Cons

Palo Alto Networks Next-Generation Firewalls - PA Series are excellent at utilizing URL filtering to provide us very granular access to individuals or Active directory groups as needed.
The Palo Alto Networks Next-Generation Firewalls - PA Series adds multiple defense layers to include, Anti Spyware, Anti-Malware, File blocking, URL filtering, and we also incorporate the.
Wildfile malware protection subscription.
SSL Inspection was very manageable by creating decryption policies by URL category.

The Global Protect VPN setup could be a little more intuitive.
Creating IPSec VPN tunnels can be a little challenging. Would be nice if they grouped and forced entries in all the necessary places as a guide.

Return on Investment

Utilizing Panorama to manage all of our Firewalls Policies by creating device groups is a real time saver. We only need to configure policies once and push them to the appropriate firewalls saving a lot of time.
Having the added security feature protection is good peace of mind in an ever-increasing threat landscape.
Monitoring traffic by IP, URL or username provides excellent insight into our traffic.

Alternatives Considered

Check Point 21000 Appliances and Cisco ASA

The Palo Alto Networks Next-Generation Firewalls - PA Series are much easier to configure than both Checkpoint and Cisco, in my opinion. From Security policy management and traffic inspection standpoints, there is no comparison.

Support Rating

For ease of implementation, enhanced - easy to use security policy configuration and overall added security threat protection, Palo Alto Networks Next-Generation Firewalls - PA Series is the best in class, in my opinion. They provide deep insights in your network environment you can't easily find in the Cisco ASA and Checkpoint competitors. I highly recommend a POC if you are looking for a next-generation firewall solution.

Key Insights

Do you think Palo Alto Networks Next-Generation Firewalls - PA Series delivers good value for the price?

Yes

Are you happy with Palo Alto Networks Next-Generation Firewalls - PA Series's feature set?

Yes

Did Palo Alto Networks Next-Generation Firewalls - PA Series live up to sales and marketing promises?

Yes

Did implementation of Palo Alto Networks Next-Generation Firewalls - PA Series go as expected?

Yes

Would you buy Palo Alto Networks Next-Generation Firewalls - PA Series again?

Yes

Other Software Used

Mimecast Secure Email Gateway, Cisco 3504 WLAN Controller, Qualys Cloud Platform (formerly Qualysguard)

Likelihood to Recommend

Palo Alto Networks Next-Generation Firewalls - PA Series makes the perfect sized Firewall for every Organization, including the use of Virtual firewalls for tiny remote offices. They are relatively easy to configure out of the box and provide very granular configuration settings for all scenarios. They can perform DHCP as well as multi-factor authentication. Having previously used Cisco ASA and Checkpoint, Palo Alto Networks Next-Generation Firewalls - PA Series are much easier to configure and maintain.

Palo Alto Networks Next- Generation Firewall makes a solid product

Software Version

Overall Satisfaction with Palo Alto Networks Next-Generation Firewalls - PA Series