Zubair Ahmad - PeerSpot reviewer
Senior Chief Manager at Arcil
Real User
Top 5
A cost-effective solution for security and URL filtering
Pros and Cons
    • "Palo Alto should integrate artificial intelligence for security purposes in the background for well-known threats and new risks coming to the market."

    What is our primary use case?

    The resolution of the Palo Alto is very good. It is a well-known product in protection from an outside perspective. We use the solution for major or minor attacks. Also, it provides defence, security, and URL filtering. It is excellent in terms of security. It assures me against network threats.

    What needs improvement?

    Palo Alto should integrate artificial intelligence for security purposes in the background for well-known threats and new risks coming to the market.

    Additionally, they could introduce a central dashboard where we can centrally monitor and mitigate all the risks automatically.

    For how long have I used the solution?

    I have been using Palo Alto Networks PA-Series for six to eight years.

    What do I think about the stability of the solution?

    The product is stable.

    I rate the solution’s stability a ten out of ten.

    Buyer's Guide
    Palo Alto Networks PA-Series
    May 2024
    Learn what your peers think about Palo Alto Networks PA-Series. Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
    771,170 professionals have used our research since 2012.

    What do I think about the scalability of the solution?

    More than 300 users are using this solution.

    I rate the solution’s scalability a nine out of ten.

    Which solution did I use previously and why did I switch?

    We used Sony Firewall, but later on, we switched to Palo Alto because it is a popular security brand.

    How was the initial setup?

    The initial setup depends on many policies, but it is not very difficult because we have been using it for more than eight years. It is not very complicated, but you need expertise for security.

    What's my experience with pricing, setup cost, and licensing?

    I rate the product’s pricing an eight out of ten, where one is expensive and ten is cheap.

    What other advice do I have?

    We have third-party support for the Palo Alto equipment. We call the implementation partner only whenever we need configuration information or changes. They make changes for us. We have not been directly involved with OEM for any support.

    Overall, I rate the solution a nine out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    Flag as inappropriate
    PeerSpot user
    Senior Network Security Engineer at a tech services company with 10,001+ employees
    Real User
    Top 10
    Combines an ultra-efficient, single-pass software engine with nearly 700 function-specific processors for networking
    Pros and Cons
    • "A valuable feature that we can consider is the deployment time, which is significantly reduced, almost 90% faster compared to other solutions. This leads to quicker deployment and less downtime."
    • "I have found that the tool works well for me, but there are areas where security testing and protection could be improved, especially in virtual or cloud environments. However, in this project, once we deployed it, we haven't encountered any issues. The cost is currently manageable, but as we migrate fully into the cloud, additional features like capacity upgrading and improvements to hardware resources will be necessary, especially since our equipment consists of older generation switches and routers. So, I'm looking for additional capabilities in these areas."

    What is our primary use case?

    There are various use cases, particularly for desktop scenarios. One of them involves exploring contacts. Virtual firewall use cases revolve around different scenarios, such as transitioning to the cloud. For instance, when Barclays uses Azure or AWS, there's a focus on meeting security obligations and implementing threat prevention to comply with regulations like GDPR or PPA. This includes creating segmentation to align with regulatory standards. As part of this process, security features available in cloud platforms like virtual firewalls and threat prevention are incorporated.

    How has it helped my organization?

    After the implementation here, especially since I work in the data center, I've noticed the significance of security. For example, Veeam, CDL, and other aspects became crucial, especially during the COVID period when users started working from home. 

    This situation led to numerous blocks, and user profiles were getting blocked due to issues with IP addresses ending up on blocklists. However, after implementing the 3M series virtual firewall, we were able to effectively manage security for our cloud applications, like those in AWS. This enabled us to monitor remote workers and take necessary actions, such as blocking problematic IP addresses. Consequently, we reduced the number of tickets raised with ISP providers.      

    What is most valuable?

    A valuable feature that we can consider is the deployment time, which is significantly reduced, almost 90% faster compared to other solutions. This leads to quicker deployment and less downtime.

    What needs improvement?

    I have found that the tool works well for me, but there are areas where security testing and protection could be improved, especially in virtual or cloud environments. However, in this project, once we deployed it, we haven't encountered any issues.

    The cost is currently manageable, but as we migrate fully into the cloud, additional features like capacity upgrading and improvements to hardware resources will be necessary, especially since our equipment consists of older-generation switches and routers. I'm looking for additional capabilities in these areas.

    For how long have I used the solution?

    I've been working on my current project for more than two years now.

    What do I think about the stability of the solution?

    I would rate it 9 out of 10. 

    What do I think about the scalability of the solution?

    I would rate it 8.5 out of 10. 

    How was the initial setup?

    The deployment is quite straightforward, and it's faster than it used to be. This means that the deployment process is quicker, and there is less downtime involved.

    What's my experience with pricing, setup cost, and licensing?

    From my perspective, managing the price is important, especially because we're a small business. For larger organizations like Barclays, we provide our requirements to the client, and they place the order on BigFix. It's their responsibility to consider their budget and make decisions accordingly. We appreciate the features we get, but the cost-sharing still depends on the client.

    Which other solutions did I evaluate?

    The client needs to provide approval for the POCs used by our team; it's not within my control.

    What other advice do I have?

    When evaluating options, we should consider team members who are knowledgeable in supporting next-generation firewalls like NGFW. We also need to factor in the specific product offerings. For instance, if we have options like the PA-440, PA-850, and PA-8350, we should compare their prices and features. It's important to make decisions based on the situation and the needs of the organization.

    Considering factors like availability and the specific situation, I would rate this an eight. It's important to explore other potential cases as well.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    Flag as inappropriate
    PeerSpot user
    Buyer's Guide
    Palo Alto Networks PA-Series
    May 2024
    Learn what your peers think about Palo Alto Networks PA-Series. Get advice and tips from experienced pros sharing their opinions. Updated: May 2024.
    771,170 professionals have used our research since 2012.
    MuhammadAtif - PeerSpot reviewer
    Senior Network Security Engineer at Alpha Data
    MSP
    An efficient and easy-to-manage solution that can be used as a core firewall to protect servers
    Pros and Cons
    • "The solution is easy to manage."
    • "Compared to other vendors, the solution's community should be strong enough to solve the problems engineers face."

    What is our primary use case?

    Our customers use the solution for multiple purposes. Some users use it as a core firewall to protect their servers. Some users use it as a parameter edge to terminate the VPN connection and to connect with their remote site.

    What is most valuable?

    The way Palo Alto Networks PA-Series works is completely different compared to other firewalls. The solution is very efficient when it comes to resource usage. We can use multiple processes at a single time. The solution is easy to manage. The most important feature of the solution I like is the reporting. If you want to check your data or traffic usage, you can export it in multiple formats.

    What needs improvement?

    Compared to other vendors, the solution's community should be strong enough to solve the problems engineers face. If I face any issue, I should be able to Google it and find the solution to rectify it. If one customer has no premium support, he cannot open a case with the portal. He should at least find some help or support from the community.

    For how long have I used the solution?

    I work as a system integrator and have provided Palo Alto Networks PA-Series to customers for three to four years.

    What do I think about the stability of the solution?

    I rate the solution a nine out of ten for stability.

    What do I think about the scalability of the solution?

    Multiple customers from the banking and corporate sectors use Palo Alto Networks PA-Series.

    I rate the solution ten out of ten for scalability.

    How was the initial setup?

    If you have a proper plan to start the solution's implementation, it's very easy. Since Palo Alto has a free-of-cost converter tool, for which you don't have to buy a license or subscription, it's easy to convert the configuration from other vendors to Palo Alto.

    What about the implementation team?

    The solution's deployment time depends on the customer's environment, infrastructure, and requirements. A migration takes approximately one month.

    What's my experience with pricing, setup cost, and licensing?

    Licenses for the malware and the URLs are not free, but converting the configuration is free. You have to purchase the licenses for Palo Alto Networks PA-Series. Compared to other vendors, Palo Alto Networks PA-Series is expensive.

    What other advice do I have?

    If budget is not a concern, I would highly recommend users use Palo Alto Networks PA-Series.

    Overall, I rate Palo Alto Networks PA-Series a seven to eight out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
    Flag as inappropriate
    PeerSpot user
    Team Lead, Infosec & Netsec Unit at Microgenesis Business Systems
    Real User
    Enabled us to monitor remote workers and take necessary actions, such as blocking problematic IP addresses
    Pros and Cons
    • "A valuable feature that we can consider is the deployment time, which is significantly reduced. It is almost 90% faster compared to other solutions."
    • "As we migrate fully into the cloud, additional features like capacity upgrading and improvements to hardware resources will be necessary, especially since our equipment consists of older-generation switches and routers."

    What is our primary use case?

    There are various use cases, particularly for desktop scenarios. One of them involves exploring contacts. Virtual firewall use cases revolve around different scenarios, such as transitioning to the cloud. For instance, when Barclays uses Azure or AWS, there's a focus on meeting security obligations and implementing threat prevention to comply with regulations like GDPR or PPA. This includes creating segmentation to align with regulatory standards. As part of this process, security features available in cloud platforms like virtual firewalls and threat prevention are incorporated.

    How has it helped my organization?

    After the implementation here, especially since I work in the data center, I've noticed the significance of security. For example, Veeam, CDL, and other aspects became crucial, especially during the COVID period when users started working from home. This situation led to numerous blocks, and user profiles were getting blocked due to issues with IP addresses ending up on blocked lists. However, after implementing the 3M series virtual firewall, we were able to effectively manage security for our cloud applications, like those in AWS. This enabled us to monitor remote workers and take necessary actions, such as blocking problematic IP addresses. Consequently, we reduced the number of tickets raised with ISP providers.        

    What is most valuable?

    A valuable feature that we can consider is the deployment time, which is significantly reduced. It is almost 90% faster compared to other solutions. This leads to quicker deployment and less downtime.

    What needs improvement?

    I have found that the tool works well for me, but there are areas where security testing and protection could be improved, especially in virtual or cloud environments. However, in this project, once we deployed it, we haven't encountered any issues.

    The cost is currently manageable, but as we migrate fully into the cloud, additional features like capacity upgrading and improvements to hardware resources will be necessary, especially since our equipment consists of older-generation switches and routers. So, I'm looking for additional capabilities in these areas.

    For how long have I used the solution?

    I've been working on my current project for more than two years now.

    What do I think about the stability of the solution?

    I would rate the stability a nine out of ten. 

    What do I think about the scalability of the solution?

    I would rate the scalability an eight and a half out of ten. 

    How was the initial setup?

    The deployment is quite straightforward, and it's faster than it used to be. This means that there is less downtime involved.

    What's my experience with pricing, setup cost, and licensing?

    From my perspective, managing the price is important, especially because we're a small business. For larger organizations like Barclays, we provide our requirements to the client, and they place the order on BigFix. It's their responsibility to consider their budget and make decisions accordingly. We appreciate the features we get, but the cost-sharing still depends on the client.

    Which other solutions did I evaluate?

    The client needs to provide approval for the POCs used by our team; it's not within my control.

    What other advice do I have?

    When evaluating options, you should consider team members who are knowledgeable in supporting next-generation firewalls like NGFW. We also need to factor in the specific product offerings. For instance, if we have options like the PA-440, PA-850, and PA-8350, we should compare their prices and features. It's important to make decisions based on the situation and the needs of the organization.

    Considering factors like availability and the specific situation, I would rate this an eight. It's important to explore other potential cases as well.

    I would rate the solution a nine out of ten. 

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
    Flag as inappropriate
    PeerSpot user
    Serkan Tok - PeerSpot reviewer
    Cyber Security Solutions Technology Consultant at a tech services company with 51-200 employees
    Reseller
    Easily adds new functions to existing hardware without any performance degradation and offers good network visibility and control
    Pros and Cons
    • "It offers application-based policy enforcement. Palo Alto Networks firewalls help us recognize protocol anomalies, contrasting with other vendors that may require policies based on port numbers. With Palo Alto Networks, the port number isn't a constraint because their devices handle protocol traffic at Layer 7, allowing for accurate identification of protocol usage and port numbers. They can identify which protocol actually uses which port."
    • "In future releases, maybe Palo Alto can enhance and enlarge their portfolio with SIEM solutions. They already have an endpoint protection solution, SOAR solution, that's fine. But when it comes to standalone IDS/IPS solution or email security solution, for example, we don't have any product in that category for Palo Alto."

    What is our primary use case?

    We use Palo Alto Networks firewalls for our perimeter security defense.

    How has it helped my organization?

    We use it for threat prevention in our networks. Check permission, advanced URL filtering, and DNS security. There are different subscriptions, and we are actually using them all. 

    We are really satisfied with the firewall's throughput and its threat prevention performance regarding network traffic. We can easily decrypt our SSL traffic and thanks to the technology named App-ID, it recognizes network protocols without relying on port numbers.

    It operates at Layer 7, and its ability to recognize protocols even if they use a default port for another protocol is impressive. It alerts you to such anomalies. 

    The single-pass architecture technology is particularly noteworthy because it allows for the addition of new functions to existing hardware without any performance degradation, even when all modules, like self-encrypted encryption, malware protection, threat protection, and industrial filtering, are enabled. This results in outstanding performance.

    That's why we use Palo Alto Networks in our IT firm and recommend their devices to all our customers.

    We also have functions related to network visibility and control. We use Panorama controllers, which operate in a geographically distributed architecture, allowing us to easily control, configure, and manage network devices. 

    With single-touch provisioning, you can effortlessly add new files to your Panorama VM. It offers extensive features that we currently use.

    Panorama is a Palo Alto Networks product optimized for firewalls. As for integration, we can easily integrate the PA-Series with popular brands, switches, and routers like Cisco, Extreme Networks, or HP Aruba across your local area network's switches and routers, enhancing application-based policy enforcement.

    What is most valuable?

    It offers  application-based policy enforcement. Palo Alto Networks firewalls help us recognize protocol anomalies, contrasting with other vendors that may require policies based on port numbers. 

    With Palo Alto Networks, the port number isn't a constraint because their devices handle protocol traffic at Layer 7, allowing for accurate identification of protocol usage and port numbers.  They can identify which protocol actually uses which port. So, if there's an unplanned issue, like, for example, a hacker trying to create a DNS tunnel using a non-standard port (like 1536 instead of the usual 53), Palo Alto's Endpoint UI will easily detect it and allow you to take measures.

    PA-Series includes built-in network packet brokers, a valuable feature as it allows SSL traffic to be decrypted just once. If you need to inspect this decrypted traffic further, there's no need for a third-party solution—Palo Alto Networks firewalls handle it themselves. 

    What needs improvement?

    In future releases, maybe Palo Alto can enhance and enlarge their portfolio with SIEM solutions. They already have an endpoint protection solution, SOAR solution, that's fine. 

    But when it comes to standalone IDS/IPS solution or email security solution, for example, we don't have any product in that category for Palo Alto.

    For how long have I used the solution?

    I have been using it for two years. 

    What do I think about the stability of the solution?

    It's very reliable. Even if you have only one firewall, failures are rare. Moreover, the high availability feature allows two firewalls to sync with each other for continuous operation, ensuring stability.

    How are customer service and support?

    The customer service and support are good. Both local and global support teams are readily accessible and they report back in a short period. I've never encountered any issues with their support.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The setup's ease depends on your experience and the resources at hand, like Palo Alto Networks' documentation. With the right information, it's not a problem.

    For me, the deployment took around 30 minutes. 

    What's my experience with pricing, setup cost, and licensing?

    Many people think Palo Alto firewalls are expensive, but I don't feel that way. Let's compare it with Fortinet firewalls.

    With Fortinet, every two or three years, the firewall generation changes, and they have limited support for older devices. But with Palo Alto, you still get support from the vendor for seven or eight years.

    Also, many vendors prepare data sheets for their firewalls with most features disabled. For example, they might say their firewall has 20 gigabit throughput, but they don't mention if threat prevention or service encryption is on or off. With Palo Alto, even when you enable all the modules, it still provides the exact throughput they advertise.

    If you're buying two firewalls, one from Fortinet and one from Palo Alto, both rated at 20 gigabit throughput, and you enable all the modules on the Fortinet one, it might downgrade to 10 or even 5 gigabit throughput. But with Palo Alto and all security modules enabled, you still get the full 20 gigabit throughput.

    That's the key difference. That's why customers trust Palo Alto, and that's why it's a big player in network security.

    What other advice do I have?

    Overall, I would rate the solution a ten out of ten. 

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer: reseller
    Flag as inappropriate
    PeerSpot user
    Business Development Manager at ISTT
    Real User
    Top 10
    Easy to use and offers a good user interface
    Pros and Cons
    • "The product's initial setup process was simple."
    • "The product's high prices are an area of concern where improvements are required."

    What is our primary use case?

    I use the solution in my company to protect our networks.

    My company provides Palo Alto Networks PA-Series to our customers. My company takes care of the product's integration part for our customers.

    What is most valuable?

    The most valuable features of the solution are its areas like performance and stability.

    What needs improvement?

    The product is perfect, in my opinion. The product's high prices are an area of concern where improvements are required.

    For how long have I used the solution?

    I have been using Palo Alto Networks PA-Series for seven years. My company operates as a system integrator for Palo Alto Networks. My company also has a partnership with Palo Alto Networks.

    What do I think about the stability of the solution?

    Stability-wise, I rate the solution a nine out of ten.

    What do I think about the scalability of the solution?

    Scalability-wise, I rate the solution a nine out of ten.

    The product is suitable for enterprise-sized companies.

    How are customer service and support?

    I have contacted the solution's technical support. I rate the technical support an eight and a half out of ten.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    I have deployed the product in a multi-site environment.

    The product's initial setup process was simple.

    The product's deployment and configuration phases are easy.

    The solution is deployed on an on-premises model.

    Not too much time is required to deploy the product.

    What's my experience with pricing, setup cost, and licensing?

    The product is offered to users at high prices compared to the pricing model of the other vendors in the market.

    Which other solutions did I evaluate?

    I feel that Palo Alto Networks PA-Series offers better performance when compared to the other vendors in the market.

    What other advice do I have?

    I don't have many details about the product's application control and visibility features since I had to deal with a lot of features in the tool during the deployment of the solution for our company's customers.

    The tool is good enough to deal with cyberattacks and meet the requirements of our company's customers.

    Considering the product's usability and user interface, I would say that it is easy to use the tool.

    I recommend the product to those who plan to use it.

    I rate the tool a nine out of ten.

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company has a business relationship with this vendor other than being a customer: Partner/Integrator
    Flag as inappropriate
    PeerSpot user
    Automation-OT Manager at a non-profit with 1,001-5,000 employees
    Real User
    Top 20
    Offers a user-friendly interface, customizable security options, and ease of management and deployment
    Pros and Cons
    • "The most effective features for threat prevention in the PA-Series are its integration with Cortex and the use of machine learning AI for advanced threat detection."
    • "There is room for improvement in streamlining this process for smoother transitions."

    What is our primary use case?

    In our network security architecture, we utilize the PA-Series firewalls by integrating them seamlessly. Migration from Cisco to PA-Series was surprisingly easy, and we have centralized management using Panorama.

    What is most valuable?

    The most effective features for threat prevention in the PA-Series are its integration with Cortex and the use of machine learning AI for advanced threat detection. These capabilities, especially present in the newer generation firewalls like the PA-4000 series, enhance our security posture significantly.

    What needs improvement?

    Migrating from old to new Palo Alto Networks firewalls can sometimes encounter hiccups, and there is room for improvement in streamlining this process for smoother transitions.

    For how long have I used the solution?

    I have been working with Palo Alto Networks PA-Series for nine years.

    What do I think about the stability of the solution?

    I would rate the stability of the product as a nine out of ten. We have not faced any issues with it.

    What do I think about the scalability of the solution?

    I would rate the scalability of the product as a nine out of ten. We have approximately 3,000 end users.

    How are customer service and support?

    I have had a great experience with Palo Alto Networks technical support. Response time and quality have been excellent, especially for RMA cases. Any issues, whether for functionality or hardware, were resolved quickly. I would rate the support as a nine out of ten.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    Palo Alto Networks stands out from other solutions because they consistently strive to innovate and stay ahead of the curve. Their user-friendly interface and customizable security options make them a top choice. Additionally, they offer a wide range of security solutions without forcing you to invest in unnecessary features, similar to SecurePoint's approach with blades.

    How was the initial setup?

    The initial setup of Palo Alto Networks PA-Series was straightforward, especially with prior network and security knowledge and a helpful training course. The intuitive web UI made the process comfortable, and overall, Palo Alto Networks seems to be heading in the right direction with user experience improvements.

    What other advice do I have?

    I have experience deploying and managing PA-Series firewalls in a multi-site environment, including international locations connected via MPLS. We use them for perimeter security and have centralized management through Panorama. Deploying and managing them across sites has been straightforward and effective which makes Palo Alto Networks a preferred choice for our network security needs.

    The PA-Series has consistently helped us prevent cyber-attacks through its threat prevention and vulnerability profiles. By configuring security profiles effectively, including antivirus and threat prevention, we have successfully mitigated various threats.

    Overall, I would rate Palo Alto Networks PA-Series as a nine out of ten.

    Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
    Flag as inappropriate
    PeerSpot user
    Senior Network Security Engineer at MHESI
    Real User
    Top 5
    Comes with WildFire feature but pricing is expensive
    Pros and Cons
    • "The tool's most valuable feature is WildFire."
    • "Palo Alto Networks PA-Series is expensive. We would like to see additional threat hunting features."

    What is most valuable?

    The tool's most valuable feature is WildFire. 

    What needs improvement?

    Palo Alto Networks PA-Series is expensive. We would like to see additional threat hunting features. 

    For how long have I used the solution?

    I have been working with the product for more than five years. 

    What do I think about the stability of the solution?

    The product is stable. 

    What do I think about the scalability of the solution?

    My company has 1000 users for Palo Alto Networks PA-Series. 

    How are customer service and support?

    Palo Alto Networks PA-Series' support is very quick. 

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    We used Cisco before the Palo Alto Networks PA-Series. We chose the product because of its community. 

    How was the initial setup?

    Palo Alto Networks PA-Series' deployment was easy and took one to two days to complete. My company has two to three administrators to manage the product. 

    What's my experience with pricing, setup cost, and licensing?

    The tool's pricing was reasonable when we bought the product. We pay around 60,000 dollars per year. 

    Which other solutions did I evaluate?

    We evaluated Check Point, McAfee, and Fortinet. We chose Palo Alto Networks PA-Series because of its performance, pricing, and technical support. 

    What other advice do I have?

    You need to do a POC before choosing the product. I rate it ten out of ten.  

    Disclosure: I am a real user, and this review is based on my own experience and opinions.
    Flag as inappropriate
    PeerSpot user