Please share with the community what you think needs improvement with Palo Alto Networks Panorama.
What are its weaknesses? What would you like to see changed in a future version?
I think the multitenancy of this solution can be improved. I would also like to see better management task automation for the trial environment. That is missing in this solution. In the next version, I would like to have more integration with the cloud and with the services delivered by Palo Alto. It isn't very task integrated at this stage. I would also like more dashboard management.
The general customer feedback is when saving the configuration, it takes a long time. That needs to be fixed. The troubleshooting, the debugging part is also a little bit of a pain. It's not user-friendly on the interface to do our debugging when comparing it with other firewalls, like Forcepoint. It would be nice to have a real-time traffic monitoring console similar to Forcepoint firewalls where you can see in real-time instead of having to keep on refreshing, or maybe a command on the console where you are able to see the traffic. The solution needs to work on speeding up the committing time.
There is room for improvement in the integration within endpoint detection. They need to do some integration between endpoints and the firewalls. They also need to add a mobile version for product so we can access the interface easily.
I have had some leakage issues before, but it was solved. I would, however like to see better integration with other products.
The dual WAN functionality is missing in this solution.
The solution needs to improve its pricing model. Panorama needs to work on its configuration issues. They should also focus on firewall management. Many clients have multiple firewalls, so Palo Alto should offer better management of them. They could model themselves off of AlgoSec, or maybe FireMon which are other very good firewall management tools.
It can take a few minutes to test to see if any changes are successful or not. This needs to be improved. A change commit should take a second, not a minute or more. Panorama does suffer from performance issues, which they need to resolve. Also, technical support isn't very responsive and could use some improvement.
My pain point is the automation process is not well-documented. There are some things that they could improve on there. If you go in the system to search for something, it is not intuitive. They could really improve that. There is a concept of device groups and a concept of templates. The templates can allow for inheritance, but the device groups do not.