2019-03-11T07:21:00Z

What needs improvement with Palo Alto Networks Panorama?

Miriam Tover - PeerSpot reviewer
  • 0
  • 187
PeerSpot user
56

56 Answers

NenadMijatovic - PeerSpot reviewer
Reseller
Top 5Leaderboard
2024-01-19T08:37:49Z
Jan 19, 2024

In the future, it would be beneficial if Panorama could include a firewall assurance feature similar to Skybox. While each firewall has its policy optimizer, a consolidated policy optimizer in Panorama could further enhance firewall management and optimization.

Search for a product comparison
RonaldPowell - PeerSpot reviewer
MSP
Top 10
2024-01-17T08:32:49Z
Jan 17, 2024

A potential improvement for Palo Alto Networks Panorama could be a more competitive pricing structure.

HA
Reseller
Top 5
2023-09-14T14:52:43Z
Sep 14, 2023

If a large company uses Panorama as a log collector, it may require setting up multiple local collector devices due to potential limitations in handling firewall logs. It would be beneficial to improve the capabilities of Panorama to handle logs more efficiently, potentially reducing the need for additional local collectors. Adding more predefined dashboards as features would enhance the monitoring and reporting capabilities. The iOPS tools, which are currently offered separately, could be integrated into Panorama to eliminate the need for an additional dashboard or GUI.

IT
Real User
Top 20
2023-04-25T13:35:00Z
Apr 25, 2023

The pricing of the solution could be considered an area of improvement, as it is a comprehensive and feature-rich product that may include features that are not needed by some companies. Therefore, the solution should have a more competitive pricing structure.

Saurabh-Pal - PeerSpot reviewer
Real User
Top 5Leaderboard
2023-04-21T08:56:51Z
Apr 21, 2023

This is a relatively expensive solution and I wouldn't recommend it for a stand-alone deployment.

MZ
Real User
Top 20
2023-02-10T15:10:48Z
Feb 10, 2023

The solution can improve by providing unique reports in relation to the function of which you choose the firewall to do.

Learn what your peers think about Palo Alto Networks Panorama. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
765,386 professionals have used our research since 2012.
Swapnil Jumale - PeerSpot reviewer
Real User
Top 10
2023-01-23T09:38:08Z
Jan 23, 2023

Palo Alto Networks Panorama currently lacks the capability of integrating with other software, such as AlgoSec to simplify rule management and schedule management. However, this feature has been requested by the company and it is uncertain if Palo Alto will implement it in the future. Additionally, the UI needs improvement, it is too slow.

AnilKumar34 - PeerSpot reviewer
Reseller
Top 10
2022-12-14T14:25:00Z
Dec 14, 2022

Storage in Palo Alto Networks Panorama needs improvement. My company also experienced deployment issues when the product was first installed, particularly when binding with the firewall. It's not as user-friendly because not everyone can deploy it without some knowledge. Updating Palo Alto Networks Panorama was also a bit challenging when upgrading your firewall, so that's another area for improvement.

GA
Real User
Top 20
2022-12-13T08:47:33Z
Dec 13, 2022

I don't have any real comments in terms of areas of improvement. The scalability is limited. It is an expensive product.

Ragesh Alappurath - PeerSpot reviewer
Real User
Top 10
2022-11-07T15:16:12Z
Nov 7, 2022

We have faced some challenges with the solution. We had Panorama in the cloud, and then we used Panorama to manage the on-prem firewalls. Then we had some network-centric architecture to connect to on-prem, where we had two separate Palo Alto firewalls on the cloud. From there, we had a direct connect, external direct connect to the on-prem. In that case, the issue we faced was that whenever the traffic left AWS, it went with any one of the subnets, either from availabilities on one subnet or availabilities on two subnets. When we configured Panorama, it was actually behind a NAT device on two separate IP signals, and there were challenges around that. When we were deploying Panorama in AWS, there were some issues with Panorama deployment in AWS. I was the first customer to deploy Panorama in AWS, and I raised a case with both AWS and Panorama. Then, in the next Panorama release, they enhanced some features, and both came up in the same version. I had to wait for two or three months to get to a resolution. Sometimes technical support is slow to respond. The solution is expensive. Panorama can be a bit difficult compared to other Palo Alto solutions. It would be ideal if they could simplify it a bit.

Wilson Sigcha - PeerSpot reviewer
Real User
Top 20
2022-10-26T20:37:41Z
Oct 26, 2022

I would improve the management. I need to view charts and traffic statistics, but the management console doesn't share that information with me. I would also improve the integration with other solutions.

Raquel GarciaFrutos - PeerSpot reviewer
Consultant
Top 10
2022-09-26T13:44:26Z
Sep 26, 2022

We have had some issues in the past because integrating a new device is not intuitive. If there is some room for improvement, that would be it. I'm not an expert on the matter, but I would like to see more capabilities regarding automation and integration. We are seeing a trend where the clients are asking for integrations with European tools. I know the solution is quite integral with all kinds of tools, but there are some different tools here in the market in Europe, so this is important. The menu is full of options, which is good in some ways, but for a newbie it can be a little bit overwhelming and you need to properly understand it before starting to work with it. I think the ramp up at the beginning is quite intense.

NR
Real User
Top 20
2022-08-11T15:03:11Z
Aug 11, 2022

It's not part of my role to connect other devices to Panorama, so I don't know how the integration works. I maybe need a better understanding of how the policies of the signature work. For example, what does it mean to exclude an IP, and what are the policy rules and priorities? I need more knowledge about the signature policy and priorities. Instead of searching their knowledge base in their website, maybe they can interact with us in the user interface to explain things better. If they had pop-ups to help guide us, we might get fewer failures along the way. Small notifications would be quite helpful.

DL
Reseller
Top 5
2022-07-21T13:34:27Z
Jul 21, 2022

It is not a cheap product. Some kinds of Palo Alto devices can cost a few thousands of dollars, and Panorama will be even higher. For the big customers that have a lot of devices, it is crucial to get all the benefits from the Palo Alto Networks portfolio regarding network security. For a highly secure environment, they sometimes need only hardware appliances, not a virtual machine.

SimonPerry - PeerSpot reviewer
Reseller
Top 10
2022-07-20T06:35:37Z
Jul 20, 2022

Price is probably one of the biggest things that we struggle with, specifically with Palo, and that's across their whole portfolio. Also, the tech support could be better.

Luke Wainwright - PeerSpot reviewer
Real User
Top 5
2022-07-18T11:25:17Z
Jul 18, 2022

Everyone, I suppose, would like the price to be improved. Price is always a good thing to change. There is always room for improvement in anything. But I couldn't really comment on that off the top of my head. In terms of updates, I believe everything is in order. That is not an issue for me.

Ahmet Top - PeerSpot reviewer
Reseller
Top 20
2022-07-14T12:49:53Z
Jul 14, 2022

The price of Palo Alto Networks Panorama could be better.

NB
Real User
2022-07-06T18:41:00Z
Jul 6, 2022

My company's getting whatever it needs from Palo Alto Networks Panorama, but in the cloud, there's an issue with CPU management, and that's an area for improvement. Though the normal data traffic doesn't go through the management interface, whenever there's an increase in the throughput, CPU management becomes high. If you increase the load, CPU management spikes, and it's what needs to be taken care of in Palo Alto Networks Panorama.

KUMAR-SAIN - PeerSpot reviewer
Real User
Top 10
2022-06-16T13:51:21Z
Jun 16, 2022

The price could be lower. I would like to see remote VPN, like the Cisco client.

Sumanth Myneni - PeerSpot reviewer
Real User
Top 5Leaderboard
2022-05-17T14:01:09Z
May 17, 2022

Sometimes in Palo Alto Networks Panorama, we receive issues where it is overloaded and unresponsive. We have issues with accessing the devices due to a slow response from Panorama. Palo Alto Networks Panorama should be more robust and resilient.

DG
Reseller
Top 5
2022-03-28T21:38:00Z
Mar 28, 2022

The ease of use of Palo Alto Networks Panorama is an area for improvement, because it's not very easy to use. The downside with the system is that you need a lot of comprehension to understand what it is. There are also risks associated with making a change, e.g. you can accidentally break your network which knocks off the firewall, and then you can't get back on again. If you know what you're doing, e.g. if you're a specialist, then there won't be any problems, in general. It's important to gain an understanding of Palo Alto Networks Panorama, or the concept, before you start. It works like Palo Alto, but it doesn't at the same time, because you have templates, and the templates have to be applied before your variables, and then those variables directly affect your objects. It's important to understand how it works. I wish they could make it easier, and a bit more intuitive, but if you're doing the training, and you're properly in the system, then it will make sense the way it's explained to you, otherwise, it'll be hard to make sense of it. It could be difficult to get to the stage you want to be on with this system. It's similar to a different language, and it's so hard to just do it on your own, but if you are in the culture and you're speaking to other people, then it becomes easier because you're doing it. That's the learning curve right there, e.g. if you've never done it before, you'll sit and look around saying: "What is this? I don't understand." If you're doing the training, and you're more involved in the product, or even if you speak to specialists, they will be able to help you, then you start to learning it and what it can do.

RM
Real User
2022-01-12T16:28:55Z
Jan 12, 2022

We have experienced a few bugs which the team at Palo Alto don't have solutions for. In the next release, it would be good to have features which increase the processing power in clusters.

BR
Real User
2022-01-12T16:27:06Z
Jan 12, 2022

An area for improvement would be the connectivity, which sometimes means logs can be slow to display.

TS
Real User
2021-10-20T18:31:08Z
Oct 20, 2021

Its UI and usability could be improved. The way the UI looks could be improved to make it a little bit more intuitive. Other than that, it is a pretty simple product.

PB
Real User
2021-09-22T15:26:18Z
Sep 22, 2021

There could be more integrations with third parties.

TC
Reseller
2021-09-02T21:22:10Z
Sep 2, 2021

It tends to move along fairly quickly in terms of features because it is a part of PAN-OS. We are waiting on one feature that's on the beta at the moment, but that's because we use Okta as our authentication. Reporting might be an area to improve. It can provide reporting or some sort of graphical representation of your environment.

AR
Real User
2021-08-13T09:36:41Z
Aug 13, 2021

It could be more secure.

CA
MSP
2021-07-26T13:49:20Z
Jul 26, 2021

The solution's utilization of network ports makes things as complex as possible. The pricing could be better.

JJ
Real User
2021-06-30T18:46:24Z
Jun 30, 2021

While Palo Alto is the leading firewall worldwide, it's so pricey. Other products like Checkpoint still do the job, and yet it's way cheaper than Palo Alto. The solution is extremely expensive. You can integrate it with other Palo Alto products, however, it ends up being too much. Palo Alto prefers the VM version. However, for the VM level, often we have a migration from one host, VM host, to another host, and then the network jobs. And they're not fully redundant. With VM, the purpose is easy migration from one host to another one. That's the purpose of VM in play, however, if you want to have high availability or redundancy, you have to purchase two licenses - one on one host, another one on another host - and it costs a lot of money to do that. Technical support could be better.

Md. Soyaeb Hossain - PeerSpot reviewer
Real User
Top 20
2021-05-29T16:36:04Z
May 29, 2021

There are times when we are backing up a device centrally, we do not get a full backup. We are able to do a full backup of all the devices but when we attempt to backup a single device, it only does the backup of a few presets and not the full configuration. In the future, they could improve by providing better management of the devices, such as bandwidth.

ST
Real User
2021-05-26T09:12:18Z
May 26, 2021

There is a need to improve the upgrade process. When we are upgrading the solution we are facing some issues with Elasticsearch services. Every time we upgrade it takes a long time to become stable. In an upcoming release, I recommend having policy segmentation because that will help Panorama. There is no policy segmentation as you would find in Check Point.

HK
Real User
2021-04-22T18:19:02Z
Apr 22, 2021

They can improve its cloud integration.

SN
Real User
2021-04-19T16:17:19Z
Apr 19, 2021

Its scalability can be improved. It is too expensive to scale it in the way Palo Alto wants us to scale. Scalability is one of the main reasons why our customer is looking for alternatives. It is too expensive to scale. Its redundancy also requires improvement, but it seems that in the latest version, redundancy is improved, and you can have more than two devices in an HA pair. So, they are heading in that direction. It would be good if they combine their dynamic list functionality in a much better way with Panorama and include it as out-of-the-box functionality. Palo Alto supports the dynamic list functionality for some basic threats, but there is a lot of scope for improvement.

LR
Real User
2021-03-29T20:35:51Z
Mar 29, 2021

I haven't come across any issues with the product. Overall, it's been very positive. I don't recall missing any features. It's a fairly complete solution. The product could offer more integration with other solutions.

MS
Real User
2020-12-22T13:42:17Z
Dec 22, 2020

In our version, there is no feature to transfer or upload a database of third-party vulnerabilities or signatures so that Panorama can convert them into its own database. This kind of feature might already have come in version 10.

RS
Real User
2020-12-11T19:18:06Z
Dec 11, 2020

The product does need a bit of configuration. It's not quite ready to go out of the box. The solution could do a bit more with its security updates. Palo Alto in general could be a bit more secure. Support is pretty good, however, they could always be a bit faster and more responsive.

TM
Real User
2020-12-11T05:12:11Z
Dec 11, 2020

We found a vulnerability where when we have a low flow, like 2.7K, it is not getting fired by the threat prevention. That's something important to improve on. They should have a proxy or some solution to solve the issue. We also found some issues around decrypting the flow. When we have more flow than expected to decrypt, the performance goes down.

RN
Real User
2020-12-08T16:53:44Z
Dec 8, 2020

Aside from pricing, I don't have any issues with Panorama.

SK
Real User
2020-11-09T16:54:26Z
Nov 9, 2020

The notification and alerting system could be improved.

Cristian Jerez - PeerSpot reviewer
Real User
Top 20
2020-10-29T21:40:00Z
Oct 29, 2020

It's difficult to implement.

Leandro Soares Costa - PeerSpot reviewer
Real User
Top 5
2020-10-23T11:50:04Z
Oct 23, 2020

It should have more connection with Threat Intelligence Cloud. They can also include features related to SecOps and automation API.

LT
Real User
2020-10-06T06:57:41Z
Oct 6, 2020

I would like to have better analytics. The network traffic analysis (NTA) is something that you can add on to get more insight from the traffic passing through the firewall, and it should be included.

SK
Real User
2020-09-29T05:58:30Z
Sep 29, 2020

There are too many OS upgrades. We've had six new versions in the past six months. Even if they are updating it to fix bugs, it's hard to keep pace with the change when you have 800 or more Palo Alto devices that you now need to update and upgrade. We try to follow version minus one or two for security reasons. To keep pace with the changes, it takes us nearly six months as we have to check with the business, arrange downtime, and count and cover all devices. These upgrades aren't just little fixes either. Whenever there is a new release, it requires an OS upgrade. It would be nice if there was some automation on the upgrades of the devices. They need to do less bug-related releases and create versions that are stable for at least six months at a time. I don't find this issue in other solutions like Cisco, Check Point, FortiGate, or others. Those just provide a patch if there is a bug and we don't have to worry about downtime.

ML
Real User
2020-09-29T05:58:28Z
Sep 29, 2020

I would like to see Networks Panorama more integrated into the firewall solutions rather than being a separate component. This would be helpful so that we can do rule-based change management for the firewall through it as well.

Sumanth Myneni - PeerSpot reviewer
Real User
Top 5Leaderboard
2020-09-23T06:10:03Z
Sep 23, 2020

The pricing should be reconsidered. It's too high right now. At times we have noticed that we get into issues where Panorama is going too slow or has other little problems. The performance can suffer occasionally.

JE
Real User
2020-09-16T08:18:00Z
Sep 16, 2020

I'd like to see improvement in the speed and reliability of the solution. They're the two things most important to me right now.

RD
Real User
2020-09-16T08:18:00Z
Sep 16, 2020

Pricing is always something that consumers hope will be addressed in their favor. I think that some method of allowing for more customization and open integration with other controls within the enterprise is something that we want to have. We want to be able to have more orchestration of disparate parts. I think the features that most of the features that I would like to see are currently being implemented. Behavioral heuristic analysis of connections, for example. That is something that I know is being done now.

CB
Reseller
Leaderboard
2020-06-28T08:51:00Z
Jun 28, 2020

I don't see many places to improve the solution. For us, it's working quite well. The solution should improve the speed at which they make changes on the system. Historically, they've been a bit slow in that respect. They should apply changes to the box quicker and more often.

DS
Real User
2019-09-05T05:37:00Z
Sep 5, 2019

I think the multitenancy of this solution can be improved. I would also like to see better management task automation for the trial environment. That is missing in this solution. In the next version, I would like to have more integration with the cloud and with the services delivered by Palo Alto. It isn't very task integrated at this stage. I would also like more dashboard management.

it_user972015 - PeerSpot reviewer
Real User
2019-08-30T04:51:00Z
Aug 30, 2019

The general customer feedback is when saving the configuration, it takes a long time. That needs to be fixed. The troubleshooting, the debugging part is also a little bit of a pain. It's not user-friendly on the interface to do our debugging when comparing it with other firewalls, like Forcepoint. It would be nice to have a real-time traffic monitoring console similar to Forcepoint firewalls where you can see in real-time instead of having to keep on refreshing, or maybe a command on the console where you are able to see the traffic. The solution needs to work on speeding up the committing time.

SF
Real User
2019-08-29T08:53:00Z
Aug 29, 2019

There is room for improvement in the integration within endpoint detection. They need to do some integration between endpoints and the firewalls. They also need to add a mobile version for product so we can access the interface easily.

MS
Real User
2019-08-26T06:42:00Z
Aug 26, 2019

I have had some leakage issues before, but it was solved. I would, however like to see better integration with other products.

SN
Real User
2019-08-25T05:17:00Z
Aug 25, 2019

The dual WAN functionality is missing in this solution.

MM
Real User
2019-08-19T05:47:00Z
Aug 19, 2019

The solution needs to improve its pricing model. Panorama needs to work on its configuration issues. They should also focus on firewall management. Many clients have multiple firewalls, so Palo Alto should offer better management of them. They could model themselves off of AlgoSec, or maybe FireMon which are other very good firewall management tools.

it_user798045 - PeerSpot reviewer
Real User
2019-08-07T06:15:00Z
Aug 7, 2019

It can take a few minutes to test to see if any changes are successful or not. This needs to be improved. A change commit should take a second, not a minute or more. Panorama does suffer from performance issues, which they need to resolve. Also, technical support isn't very responsive and could use some improvement.

PS
Real User
2019-03-11T07:21:00Z
Mar 11, 2019

My pain point is the automation process is not well-documented. There are some things that they could improve on there. If you go in the system to search for something, it is not intuitive. They could really improve that. There is a concept of device groups and a concept of templates. The templates can allow for inheritance, but the device groups do not.

Panorama network security management provides static rules and dynamic security updates in an ever-changing threat landscape. Reduce administrator workload and improve your overall security posture with a single rule base for firewall, threat prevention, URL filtering, application awareness, user identification, file blocking and data filtering.
Download Palo Alto Networks Panorama ReportRead more