Offers a lot of advanced functionality that is easy to deploy and the GUI is easy to use
What is our primary use case?
This is a solution that we implement for our customers. It allows our customers to manage several firewalls from a central location. Some examples are securing the internet edge, data centers, micro-segmentation within the data centers, and securing their campuses. The majority of the deployments are on-premises, however, we have more and more customers that are moving to the cloud. This solution is helping them to secure their cloud, as well.Pros and Cons
- "Using this solution means that you can store logs for longer periods, up to perhaps two years, depending on your attached storage."
- "The dual WAN functionality is missing in this solution."
What other advice do I have?
This is the most mature next-generation firewall in the market and a solution that I strongly recommend. The biggest lesson that I have learned from this solution is not to trust internet users. Whether it is regular users or employees, they do not like to be detected. They keep trying to work around the policies using different applications and peer-to-peer functionality. I have learned this because Palo Alto has full visibility to all types of traffic, and we're able to catch these scenarios and put security policies int place. Palo Alto has done a lot towards closing gaps in security. Cloud…