We just raised a $30M Series A: Read our story
2018-07-12T09:32:00Z

What advice do you have for others considering Palo Alto Networks NG Firewalls?

45

If you were talking to someone whose organization is considering Palo Alto Networks NG Firewalls, what would you say?

How would you rate it and why? Any other tips or advice?

ITCS user
Guest
6565 Answers

author avatar
Top 20Real User

We haven't actually deployed Palo Alto NGFW’s DNS Security yet, but we will be doing that. It is great that 100% of the tested attacks were blocked in the NSS Labs Test Report from July 2019 about Palo Alto NGFW. It is a great story, but I never trust 100% because that's why we have layered security. However, it definitely provides a great level of comfort in our security structure. I never give anyone a 10, so I will give the solution a nine (out of 10).

2021-10-08T08:31:00Z
author avatar
Top 20Real User

I don't want to become a Palo Alto-centric shop. We can use certain cloud features that they have, such as SaaS products. However, I choose not to, so that we can have a little bit more flexibility in what we do. When we were a pure Cisco shop, we saw the problems with doing that. Palo Alto does a really good job at everything they do but, I just want to make sure that from my university's perspective, we don't get stuck. If all of a sudden, somebody else comes out with another product, we don't want to be stuck with a specific vendor, unless they are definitely the best solution. We use other products in addition to Palo Alto to help along the way. For example, we use Corelight from Bro Zeek, Terracotta, and other things that I can stream together and send to our SOC to look at. We also have XDR, although it's not a fully functional one because we don't have the endpoint component. That is what is killing a lot of EDUs because we just don't have the budget or the money to be able to go out and buy all of the products that help us to function the way we need to. In the NSS Labs Test Report from July 2019 about Palo Alto NGFW, 100% of the evasions were blocked. For a C-level person, that's great news. They read those types of things. As a technical person, it's important to me because it makes my life easy. Palo Alto sells a next-generation firewall called the PA-400 series, and depending on what a company's bandwidth needs are, it would be a good choice. For example, if they're not doing anywhere close to a gig worth of traffic, such as in a small office, home office, or small business, then it would be a good solution. It also depends on what the business does. If there isn't much traffic then a PA-400 would be fine. If a colleague of mine at another company were to say that they are just looking for the cheapest and fastest firewall, based on my experience with Palo Alto, I would tell them that they get what they pay for. Palo Alto is not cheap but at the same time, their product is not really comparable with others. It's like comparing apples to oranges. If you consider Fortinet, for example, they call themselves a next-generation firewall but they really aren't. They are what you call a GPO, which is related to policies. It is important that you look at what other people do and how they do it, but for the most part, there's not anybody out there doing what Palo Alto is. Another one is Cisco. They do the same thing that Palo Alto does, although it takes three Cisco boxes to do what a single Palo Alto box does. I would rate this solution a ten out of ten.

2021-09-23T17:45:00Z
author avatar
Top 10MSP

The fact that Palo Alto NG Firewalls embed machine learning in the core of the firewall to provide inline, real-time attack prevention is important, but I still don't completely trust it. I haven't really seen this feature. Maybe it's somewhere in the background, but I haven't gotten any notifications that something was found or prevented. At this point, we still use traditional approaches with human interaction. Overall, what I have learned from using Palo Alto is that you need to be very detailed in your requirements.

2021-08-10T22:10:00Z
author avatar
Reseller

For our customers, I would tell them that Palo Alto Networks NG Firewalls is easy to use, but probably difficult to master. It has a very easy to use interface and configuration utility, but it has a lot of advanced features that need some deep knowledge of the product. No product can guarantee 100% evasions being blocked, but I think Palo Alto is among the top of the threat inspection vendors. From the NSS Labs Test Report, we can see that Palo Alto Networks always has a top score. Machine learning in a single firewall is not that accurate or important for our customers. Since it will only see some network traffic, it cannot connect everything together, like endpoints and servers. Therefore, our customers do not value the machine learning techniques on a single firewall very much. We may review the alerts generated by machine learning modules, then we can see if the alerts are real alerts, not false positives. This may tell us how efficient machine learning is. Very few customers in China have used the Palo Alto NGFW’s DNS Security module. It is a new feature that was introduced only two years ago. Customers already know what the product can provide in terms of protection. Its DNS Security provides something that is not really easy to understand. Also, it increases the cost of the firewall because it requires another license to be implemented, and the cost is not low. DNS Security is very impressive, and I think it will be an efficient way to block the rapidly changing threat landscape and maybe Zero-day attack methods. Biggest lesson learnt: If you want to protect something, you need to gain visibility of the entire network. NG Firewalls provides a deep visibility into network traffic. I would rate Palo Alto Networks NG Firewalls as nine out of 10.

2021-08-10T12:31:00Z
author avatar
Top 20Real User

Other than the SD-WAN, everything else has been functioning like our previous setup because it's a pretty similar license. The way that the new hardware handles URL filtering, threat protection, and GlobalProtect has been pretty solid. I don't have any issues with those. Overall, I would rate Palo Alto NG Firewalls at nine out of 10. It's definitely not the cheapest product out there. Cost is the main reason I wouldn't put it at a 10.

2021-07-30T07:40:00Z
author avatar
Real User

This is a very good solution but it is very expensive. I rate Palo Alto Networks NG Firewalls a six out of ten.

2021-06-09T16:53:02Z
author avatar
Top 5Real User

I would recommend this solution to new users. On a scale from one to ten, I would give Palo Alto Networks NG Firewalls a nine.

2021-06-07T15:27:12Z
author avatar
Top 5Real User

I would advise that those thinking about Palo Alto Networks NG Firewalls need to switch how they think about a policy on the firewall. They should not to look at it from the point of view of the service and what port that policy is related to. Instead, they should look at it from the application side. Don't pay too much attention to the port. Just look at the application. For example, the NGFW doesn't care if SMTP traverses on port 25 or 65. It just enforces the protocol. From a technical point of view, I don't think that there's something that's missing from the Palo Alto Networks NG Firewalls. So, I would rate it at nine on a scale from one to ten.

2021-05-19T18:12:46Z
author avatar
Real User

This solution is very particular; it's only suited to specific companies — it's a commercial opportunity. Overall, on a scale from one to ten, I would give this solution a rating of eight.

2021-05-18T05:59:13Z
author avatar
Real User

I would say go for it because it seems to be stable and very reliable. I've spoken to some specialists who vouch for Palo Alto. They say they've been using it in their environment, and it hasn't let them down so far. I would rate this solution a nine out of ten.

2021-04-07T11:09:32Z
author avatar
Top 5Real User

I would absolutely recommend this product, it's expensive but I trust it. There is always room for improvement such as with scalability capabilities in Palo Alto. I know I'm not the only one who thinks this is an issue. It's possible that next time we will try virtualized firewalls, it may be a little cheaper for us. We would consider switching to something else but it would be a big move and quite complicated. Moving to a different vendor is a whole other story. I rate this solution a nine out of 10.

2021-04-01T09:30:53Z
author avatar
Real User

I would absolutely recommend this solution to others. Overall, on a scale from one to ten, I would give this solution a rating of nine.

2021-03-05T06:06:57Z
author avatar
Top 5Real User

There are multiple firewalls out there. I am moving away from them because they are expensive, and they don't do what I want to do with them. I have plans of getting FortiGate instead. I would rate Palo Alto Networks NG Firewalls a six out of ten.

2021-03-04T18:02:15Z
author avatar
Top 5Real User

I would tell potential users that Palo Alto is the best, even compared to Cisco or any other competitor. On a scale from one to ten, I would give Palo Alto Networks NG Firewalls a nine.

2021-03-02T16:01:23Z
author avatar
Top 5LeaderboardReseller

We plan to keep using this solution depending on the customers' needs. We also have a cloud-based platform on Fortinet, and we provide it as a service. I would rate Palo Alto Networks NG Firewalls an eight out of ten.

2021-03-02T07:38:59Z
author avatar
Real User

I would give Palo Alto Networks Next-Generation Firewalls a rating of nine on a scale of ten.

2021-02-22T21:26:00Z
author avatar
Top 20Real User

I'm not sure which version of the solution we're using. We use a physical appliance. We're using three different models, for the most part. My company is an outsourcing company that deploys software and testing. The solution is very user-friendly and easy to manage and administrate. For that reason, I would rate the product at a nine out of ten.

2021-02-12T08:51:27Z
author avatar
Top 20MSP

If someone looking for stability and the leader in next-generation firewall technology, I would choose this solution. I would recommend this solution to others. I rate Palo Alto Networks NG Firewalls a ten out of ten.

2021-02-11T11:33:05Z
author avatar
Top 20Real User

On a scale from one to ten, I would give Palo Alto Networks NG Firewalls a ten.

2021-02-11T00:50:07Z
author avatar
Top 5Reseller

First of all, I would say that the engineer who is going to deploy the solution has to know how the network policy is going to be introduced into the firewall. It is very important for deployment because it is a new concept that Palo Alto introduced in the market. The second thing is to know the policies, not on the layer-4 basis, but in terms of policies, such as SMB, DSTP, and other such things. I would rate Palo Alto Networks NG Firewalls a nine out of ten.

2021-02-04T21:54:27Z
author avatar
Top 20Real User

We have a partnership with Palo Alto. I am in pre-sales and often do POCs or do some aspect of evaluating the solution for clients to help them understand the usefulness. Overall, I really do prefer Palo Alto to other options. I'm the most comfortable with it and I understand it the best out of other solutions such as Juniper or Fortinet. I'd suggest organizations consider the solution. Yes, it is quite expensive. However, it is also very reliable and is always marked highly in Gartner due to its feature set and usability. It's easy to configure and it's very easy to add more features into your roadmap if you need to. It can easily integrate into a larger holistic security system to help keep a company safe. In general, I would rate the solution at a nine out of ten.

2021-01-31T06:58:32Z
author avatar
Top 5Real User

I would recommend Palo Alto Networks NG Firewalls. If a company has the budget and wants to have the next generation of firewalls then they should go for the Palo Alto, because whatever state of features they provide, it's pretty awesome. But if there is a budget constraint there are several other products which give you similar kinds of features but with less cost. On a scale of one to ten, I would give Palo Alto Networks NG Firewalls an 8. Nothing is perfect. There are features that they should add. One of the features that I'm looking at is when it comes to the Vulnerability Protection. We are blocking the threats which are, by default, updated by the Palo Alto Threat Engine. Currently, there is no scope of manually adding the external database to the firewall so the firewall will convert that database to their own. This is currently not functional with the current version. There are a few functions that they could add that are available with other vendors. That's why I am giving the 8.

2021-01-30T13:39:00Z
author avatar
Top 5Real User

My advice for anybody who is implementing this firewall is to follow the guide or instructions that are available. There are multiple resources and examples of use cases available on the Palo Alto website, and you can directly follow them. I would rate this solution a nine out of ten.

2021-01-28T10:33:01Z
author avatar
Top 5Real User

I'd tell potential users of Palo Alto Networks NG Firewalls that their decision depends on their budget. If you have an adequate budget, then I recommend Palo Alto. If you have a limited budget, you need to consider your needs and look at Cisco ASA's price and Fortinet's price. On a scale from one to ten, I would give Palo Alto Networks NG Firewalls an eight.

2021-01-27T10:49:16Z
author avatar
Top 20Real User

Know your business requirements, the features, the ease of use, and know what type of budget you have. These are the types of requirements to know before you use this product. I would rate this solution an eight out of ten.

2021-01-27T09:19:49Z
author avatar
Top 20Real User

We have a partnership with Palo Alto. We're using the 5000 series of Palo Alto. It's a next-generation firewall. We're currently using the Management Gateway and Virtual Firewall. Also, the Endpoint Solution. I'd recommend the solution to other organizations. We've been pretty happy with it so far. I'd rate the solution at an eight out of ten.

2021-01-15T20:15:01Z
author avatar
Top 5Real User

In summary, this is a good product and I recommend it. I would rate this solution a nine out of ten.

2021-01-12T15:26:56Z
author avatar
Top 5LeaderboardReseller

I would recommend this solution. The uptake is mostly with medium and large enterprise, it's strong there. For small to medium size businesses, the preference is usually Fortinet or Sophos. It's really about what suits the client. I would rate this solution an eight out of 10.

2021-01-12T12:47:26Z
author avatar
Top 20Consultant

I would rate Palo Alto Networks NG Firewalls a ten out of ten. It is the best solution I have tried. I am happy with this solution.

2021-01-04T10:46:56Z
author avatar
Top 5LeaderboardReal User

I'm an integrator. I work with many clients. My clients use both the cloud and on-premises deployment models. I would recommend the solution to other organizations. Overall, I would rate it at a nine out of ten.

2020-12-19T13:47:52Z
author avatar
Top 5LeaderboardReal User

This is a good product and I recommend it. I would rate this solution a nine out of ten.

2020-12-16T11:18:08Z
author avatar
Top 5LeaderboardReal User

I would not recommend this solution. I am sure they will come up with better models to overcome some of the challenges that we faced, but I would definitely not recommend this particular model. I would rate Palo Alto Networks NG Firewalls a six out of ten.

2020-12-10T16:08:04Z
author avatar
Real User

On a scale of one to ten, I would give Palo Alto Networks NG Firewalls a nine. I would recommend this product to others. In terms of what advice I would give to future customers looking into implementing Palo Alto Firewalls, I would tell them that they have a good system operator in the firewalls and that it provides many tools that they can use to protect their networks. You don't find that in the other vendors.

2020-12-10T14:16:00Z
author avatar
Top 5LeaderboardReal User

I would rate this solution a ten out of ten.

2020-12-08T16:55:47Z
author avatar
Top 20Real User

I would recommend this solution based on a customer's requirements. I sell solutions from a lot of firewall vendors. I have the flexibility to recommend based on the budget of a project. I would recommend Palo Alto or any other vendor if the environment and all the conditions are available and suitable for that deployment. A lot of times, we make POC or proof of concepts to show the customer the value of the products and how to deal with them to convince them to buy it. I would rate Palo Alto Networks NG Firewalls an eight out of ten.

2020-11-18T17:49:17Z
author avatar
Top 20Real User

We have not had any issue with this solution. I really hope that we continue to use this solution. Its price is higher than other solutions, and the company might go for another firewall. I would recommend this solution to other users. I would rate Palo Alto Networks NG Firewalls a nine out of ten.

2020-11-16T18:30:20Z
author avatar
Top 5LeaderboardReal User

We plan to continue the usage of this solution in the future and I would recommend it to others. The product is very good, I would rate Palo Alto Networks NG Firewalls a nine out of ten.

2020-11-12T05:04:08Z
author avatar
Top 20Real User

I would rate this solution an eight out of 10.

2020-11-10T17:19:34Z
author avatar
Top 20Real User

I would recommend this firewall still. Our system integrates well but it depends on customer requirements so we sometimes choose to go with an alternative firewall. I would rate this solution an eight out of 10.

2020-11-06T21:14:58Z
author avatar
Top 5Reseller

In general, I prefer hardware, and Palo Alto's is quite good. However, we have a couple of virtual deployments for cases as well. I would definitely recommend the solution. It's one of the best firewalls on the market. I've worked with four different vendors in the past, and some of the most mature NG firewalls are Palo Alto's. It's their main business, so they are able to really focus on the tech. They spend a lot of time on R&D. They're always leading the way with new technologies. While Cisco has more main products, Palo Alto really does focus in on NG firewalls. That's why I always see them as a leader in the space. I'd rate the solution nine out of ten.

2020-07-27T07:17:38Z
author avatar
Top 20Reseller

My advice for anybody who is considering this product is that it is a useful firewall and high-ranking compared to others. I would rate this solution an eight out of ten.

2020-07-26T08:19:12Z
author avatar
MSP

My advice would be to make sure the firewall is configured properly. I would rate it an eight out of ten. Not a ten because you have to be really excellent before you get a ten out of me. In the next release, I would like to have the ability to auto-generate rule and policy, based on known traffic, based on the baseline. That is a feature that I think Palo Alto should be able to have in some form or fashion to auto-generate and propose a policy and rules set, after putting the file into a learning mode for some period.

2020-07-26T08:18:00Z
author avatar
Top 20Reseller

My advice for anyone who is implementing the Palo Alto Next-Generation firewall is to take the training that is available. This will allow them to better work with the technology. This is an ambitious company with a good security roadmap. The product is being continuously developed and they are professionals who are focused in this area of technology. It is the firewall that I personally recommend. I would rate this solution a seven out of ten.

2020-07-23T07:58:37Z
author avatar
Real User

I would rate Palo Alto a nine out of ten. In the next release, they should simplify the deployment process.

2020-07-13T06:56:00Z
author avatar
Top 10Consultant

Palo Alto NG is definitely a firewall that I recommend for the right size of deployment. I would rate this solution an eight out of ten.

2020-07-13T06:55:57Z
author avatar
Top 5Reseller

While we mainly deal with on-premises deployment models, occasionally we also do hybrid deployments. We're not a customer. We're a systems integrator. We're a reseller. We sell solutions to our clients. Palo Alto is very good at policymaking. It's like they have a single policy that you can use. Other solutions don't have single policy use, which means you have to configure everything. There may be many consoles or many tasks that you'll have to worry about other solutions. Multiple task configuration should not be there, and yet, for many companies, it is. This isn't the case with Palo Alto. Palo Alto is easy compared to Fortinet. It's overall a very solid solution. I would rate it nine out of ten.

2020-07-05T09:37:56Z
author avatar
Top 20Real User

I'm not really a customer. I'm like a consultant. I'm an introduction expert. If I think a client needs a certain technology I point them in the direction of whoever sells it. I do go in and configure it, so I do have experience actually using the product. When I'm looking for something, I just find someone that sells Palo Alto and I redirect the client towards them. I'm not interested in being in a hardware vendor. There's no money in it. There's so much competition out there with people selling hardware. It doesn't matter where the client gets it from. We tend to use the 200-series models of the solution. I'd rate the solution eight out of ten. They do a very good job. The product works well.

2020-06-30T08:17:31Z
author avatar
Real User

The advice I can give is that this is a good solution: Easy to deploy, easy to manage, easy to understand, reporting is very good, and it will give you the full picture up to the layer seven. Their VPN service is very good. The good thing is that whenever you need to train anyone on these devices, it's very easy to explain. Previous firewalls I've used, required a lot more work before you could configure. This isn't like that, it takes maybe 30 minutes and it's done.

2020-06-28T08:51:00Z
author avatar
Top 20Real User

My experience with Palo Alto is good and I definitely recommend this product. That said, there is always room for improvement. I would rate this solution a seven out of ten.

2020-06-15T07:34:02Z
author avatar
Top 5MSP

Palo Alto is my number one choice for firewalls. I support and utilize more Palo Alto firewalls throughout my company and with my customers than any other device. Number two would be Fortinet. I don't really like Fortinet that that much because it is not as secure as Palo Alto, but I have customers who want to use it because it is a lot less expensive. Number three is Cisco Meraki, which I obviously don't like, but people request that because the Cisco name is very popular and a lot of other people are using it. I couldn't recommend against choosing a device more than choosing it by name instead of functionality. Palo Alto invented the method of looking at the application identifier in each packet and making a decision. For instance, many companies may want to do something like prohibiting all chat applications with the exclusion of whatever application the company is choosing to use. Let's say the company is using IP Communicator for customers and for employees to chat with each other, but the company wants to block Skype. The reason why might be because they don't want anybody bringing up a Skype call, sharing information via that Skype call, or maybe turning on a Skype call and letting other people see inside the facility. Skype has a very interesting platform in which you block one IP address on the Skype server and it allows another one. You block Skype.com and it creates another URL. Skype loves to get in and around simple security steps. Palo Alto is phenomenal because it takes a look at the application identifier within each packet and will find that it is Skype and block it. If you want to block AOL Instant Messenger, you just block it. Anything out there you don't want employees to use can just be blocked by referencing the identifier. Netflix is another one that seems to find it's way into corporate networks. It is normal not to want employees sitting around watching movies. The Palo Alto will find out that someone is trying to access a Netflix movie and block it. Then it can also send an email to alert different people of the activity. You could set it up so that when something like that happens, an email goes to the director of IT to say, "Hey, this person may be trying to access Netflix." You may want it to just block the access type and forgo the alert. Or you can block the activity and alert anyone you want that someone appears to have tried to subvert security. The idea of this type of security measure isn't just to lay blame and get people fired, it is to identify different types of breaches and why they occur. It could be that a potential breach requires a sit-down conversation with the persons involved. But the truth is that many malicious sites — like adult related websites, platforms like gambling sites, obviously hacking-related sites, violence or gore — are loaded with malware. You don't want that on your computer, and your employer doesn't want it on the network either. It is just as bad as bringing a device to work and allowing that device to be connected to the network without protection as that is just another potential malware exposure. Another beautiful thing with Palo Alto is that they have Wildfire. Wildfire can prohibit malware in either direction. Malware is not going to get into the network via a customer or a user surfing and it is not going to get out and affect the network and spread around via a user's BYOD (Bring Your Own Device) that got infected while he was working at home.

2019-12-04T05:40:00Z
author avatar
Top 20Real User

PA is a product that continuously improves, so, I have nothing to add in terms of features. My advice is not to look for a cheaper solution, as the price/performance ratio on Palo Alto is great.

2019-07-01T11:17:00Z
author avatar
Consultant

I'd say the blueprint of the implementation needs to be ready before you start the implementation of the product. The product is generally stable and the team provides a good presence on it, but at the end, if you're putting it in the mission-critical data center, the planning needs to be extensive. I would rate this solution an eight and a half out of ten.

2019-07-01T07:58:00Z
author avatar
Real User

I would rate this solution 7 out of 10.

2019-06-27T06:06:00Z
author avatar
Real User

I've used it and I'm very happy. Frankly, I think this site under-rates the technology, as it should be in at least the top three.

2019-06-26T20:18:00Z
author avatar
Real User

I would rate this product 8.5/10. It's very good.

2019-06-26T05:25:00Z
author avatar
LeaderboardReal User

Palo Alto's firewall protects your network against attacks, threats, and many other things. Networking can be more advanced. You can upgrade the edition of Palo Alto. There's competition between Palo Alto and Fortinet firewalls. Most IT security people don't know which to pick. For a basic firewall, I recommend Fortinet because it has two or three basic firewalls. I personally need a data center firewall. Datacenter firewalls I would recommend FortiGate because of the support. It provides a high level of support. The latest Palo Alto release has many new features. It can provide you with audits, and policy auditing for a policy review. This allows you to know what's going on inside the network from a quality perspective because sometimes you can create new policies - up to one million policies. You can choose policies, and sometimes you get something by mistake. It provides you with an ability to view or do a policy review or policy audit. This is a major feature. It's a very important feature because before it was impossible to bring the visibility to the policy audits to let me know what's going on inside my policies. Now Palo Alto has provided this feature. In terms of advice I'd give to someone considering this solution, I'd say they should read more before going to the implementation phase. They have to read the administrative guides, and product guides before going to implementation. They have to check the platform because different versions of the platform have some new features. The technical people have to review before going to implement it because sometimes they don't need to upgrade this platform or this version. It is not a stable version. You have to read more before going to do the implementation. Ask an advisor, the vendors or call Palo Alto. You can call them, they have great coverage in any country in the world. You can ask the technical engineers what is the best design, their recommended design. I would rate this solution an eight out of 10.

2019-06-26T05:25:00Z
author avatar
Real User

I would rate this solution 8 out of 10. Generating reports is not so easy. I think with support, for everyone, and for all the bank company workers, they can do that a bit better. Then maybe I would rate them higher.

2019-06-26T05:25:00Z
author avatar
Consultant

I've helped customers using Fortinet and Check Point. They are compromised. Their firewall is not stable. But for some features, for example, encryption, they want to use this feature, but the firewall feature isn't great. With Palo Alto, there isn't any problem, you can open any feature - IPS feature, data encryption feature - there isn't an issue. Implementation is simple, the product is stable, but I advise if people get the firewall I strongly recommend the use of the API features. They may not be accustomed to using a next-generation firewall. If they want to use NG Firewalls, they need to use and implement the API features. They need to create uses based on the application. My understanding is Version 9 will introduce some logic features. I would rate this solution 9 out of 10.

2019-06-26T05:25:00Z
author avatar
Real User

Once you install it, you use it every day. You can't stop because it's a security feature and a precaution. Also, we are using it to do some local breakouts, so we use utilize the local internet to carry some business traffic, to ensure there's no interruption. You have to let it run 24/7. I would suggest you be careful when choosing your model. Consider your bandwidth as well as how you want to run the local area network because the throughput of the firewall has to be well designed. I would rate this solution a nine out of10.

2019-06-26T05:25:00Z
author avatar
Real User

The functionality is good and so are the features. In terms of implementing the solution, I wish it was better. I would rate the solution 8 out of 10, mostly due to the technical issues I've experienced.

2019-06-26T05:25:00Z
author avatar
Real User

You have to do proper network design from the beginning. You have to look into future expansion. Otherwise, after a year, you have to replace the entire box. On a scale from 1 to 10, I would rate this product a seven because the point of scalability within their product is a big issue. If you have to put a huge investment in front to accommodate future expansion, it is fine. It requires forecasting. If your forecast is not correct and you are not growing to that point, then all your investments will be a waste. If you're adding a block so that it can accommodate your user traffic demand, then that would be perfect. I buy one block at a time now. I can't buy two blocks at the same time. That's a waste of money with Palo Alto NG firewalls.

2019-06-24T12:13:00Z
author avatar
Real User

This solution is easy to understand, reliable, and user-friendly. I would rate this solution as eight out of ten.

2019-05-15T05:16:00Z
author avatar
Real User

I would certainly encourage someone to look into this solution.

2019-03-11T07:21:00Z
author avatar
Real User

List your requirements, give them the proper weighting, and look at what future options are available if you stick with the solution. Then do your evaluation. And don't forget the vendor, the local support, their competency and their commitment. You can have the best product in the world but if you don't get the right person to support you, it's a waste. You would probably better off with a second- or a third-tier product if you have an excellent, competent, and committed vendor to support you. I would rate Palo Alto at eight out of 10 because of the performance, the security features, and policy management, the reporting capabilities, and the optional upgrades or extensions that we can do, like sandboxing. It also offers an option for our integration with our endpoint security. We are going to revamp our endpoint security architecture. One of the options we're looking at is how we can integrate that with solutions from Palo Alto, because then we can have a more consolidated view, instead of using a third-party solution as the endpoint security. Finally, the local support is important.

2018-08-08T07:09:00Z
author avatar
Real User

Buy Palo Alto and try its features. In Palo Alto, you have select prevention, scan over AV, anti-spyware, vulnerability protection. and file blocking. you have good feature like WildFire to protect against unknown malware. I rate Palo Alto at eight out of 10 because it gives me visibility and protection. This visibility and protection are very important nowadays to protect you from hackers.

2018-07-12T09:32:00Z
Learn what your peers think about Palo Alto Networks NG Firewalls. Get advice and tips from experienced pros sharing their opinions. Updated: November 2021.
553,954 professionals have used our research since 2012.