Robust firewall technology. It's reliable, resourceful, and easy to manage.
After years deploying and managing other brands, I found a great product and I'm happy so have it available for AWS.
Integration in AWS is well documented and easy to follow.

This is informational, the product allows you to launch on c5.large however that is not enough memory. It will boot to maintenance mode with an error in the system log about not having enough memory. Needs > 4GB, not 4GB.

Earlier versions are super slow to launch (pass basic status checks), and super slow to bootstrap (respond even on ssh port). The latest version fails to launch fast enough to get past the basic status checks (10 minute timeout), and there is no means to alter this timeout for an auto scaling group (not the same timeout has HealthCheckGracePeriod). If you're designing for high availability, this is not the product for you.

I've been an advocate for using Palo Alto firewalls for over a decade. They were so far ahead of everyone else. The gap has closed quite signficantly, and they still shine when it comes to being a full layer 7 firewall. The problem is that the company has grown too large and the product has tons of bugs, support is non-existent. They hire people off the streets to support them because they have such a large customer base, and these "off the street" people in turn hire people with even less skill than them. It's a crap shoot when deploying PANS these days, as you run into all kinds of issues, and don't even think about opening a case. You will have to invest tons of times to over explain the issue, be fed with useless documents (you can find those yourself), and escalate multiple times, and then if you're lucky, you may find someone that can find a bug , which will almost never get fixed.

How can we launch the instance at an older version? like 10.1.4? when we launch an instance, it doesn't ask for the software version and launches by default to the latest version