VM-series - Advanced security Subs (PAYG) using CFT templates

I am not working on a NAC solution. I am working on Palo Alto Networks VM-Series  firewall, and I am mainly working with firewalls.

I am totally working with Palo Alto Networks VM-Series  products. I am working with VMs, including 400 series, 1400 series, and 3400 series firewalls, which are next-generation firewalls and fourth-generation firewalls of Palo Alto Networks VM-Series.

I am also working with VMs for Palo Alto Networks VM-Series, and for POCs sometimes. Mostly, I provide solutions for some of our customers who need urgent solutions with Palo Alto Networks VM-Series. I provide them VMs and activate the licenses from Palo Alto as a partner. We are working as innovator partners with Palo Alto. Sometimes for POCs and for urgent solutions, if the customer or some organization needs it, we provide them Palo Alto Networks VM-Series and it works fine.

We are working with Dynamic Address Groups in Palo Alto Networks VM-Series. Mostly, we use them for securing our network and for blocking malicious traffic from specific sources around the globe. We block them through Dynamic Address Groups as a source and create another policy for that. We block any dynamic addresses coming with malicious traffic using specific policies. We use Dynamic Address Groups and after tagging those malicious IPs, when they come to our firewall from outside or from inside, including some of our local computers, if we detect something concerning such as bots or similar traffic, we block them using Dynamic Address Groups.

Advanced Threat Protection is working in Palo Alto Networks VM-Series. In Advanced Threat Protection, we use inline protection features, including anti-malware solutions and vulnerability protection. We mostly use Advanced Threat Protection because Palo Alto provides the core subscription and core security bundle, which is cheaper than the other bundle. We propose the same bundle to customers because it is cheaper and includes DNS security, SD-WAN, vulnerability protection, URL filtering, anti-spyware, and antivirus subscriptions bundled in the same core bundle. If I buy only threat protection separately, it is more expensive than this bundle. We create security profiles for spyware and antivirus and provide inline protection to customers.

App-IDs in Palo Alto Networks VM-Series are very important and working fine. We mostly use App-IDs due to which we are securing customers who are vulnerable and who need security solutions.

There are Dynamic Address Groups, EDLs, and integration with other solutions such as Forescout for Palo Alto Networks VM-Series, which we did two years ago. There are API integrations as well. We mostly automate the security structure for the organization using SIEM  solutions, integration with SIEM  solutions, and XDR  solutions. This is very interesting.

I am not using Palo Alto Networks VM-Series mostly, but based on my experience, there are some deficiencies in Palo Alto Networks VM-Series. Having those features missing, we are not proposing Palo Alto Networks VM-Series to all customers. However, for urgency and for some solutions that customers need for some of their other sites and subdivisions, we are providing the same.

I have been working with Palo Alto Networks VM-Series since 2020, which is approximately six to seven years back.

Palo Alto Networks VM-Series is very stable.

Scalability for Palo Alto Networks VM-Series is eight out of ten.

Technical support for Palo Alto Networks VM-Series is provided through premium partner support. We are working with StarLink, and they are providing the best solution and best support. We have advanced partnership and advanced support for some of our customers. They are good with technical solutions.

Palo Alto Networks VM-Series is better than Fortinet, mainly in its SP3 structure, flexibility, and reliability, and based on feedback from customers. Most of our customers have shifted from Fortinet to Palo Alto Networks VM-Series. Their feedback indicated concerns about slowness, subscription renewals, and other aspects they were not happy with.

Fortinet is the main competitor for Palo Alto Networks VM-Series on the market.

Prices of Palo Alto Networks VM-Series are higher than other firewalls and other solutions. However, we are using its security features and proposing them, mostly winning tenders with this product. Palo Alto Networks VM-Series is a very best solution if you have subscription and extra support, and I would rate this solution seven to eight out of ten. I would give this review an overall rating of eight.

We have a Firewall as well as a Synapse  solution, and we have EDR, XDR  as well. The Palo Alto Networks VM-Series  Firewall is what we are using.

From a Synapse  perspective, they have better visibility, better CV detection, better exposure detection, and it is in a single tool, so we are happy with it.

The integration of Palo Alto Networks VM-Series  within my existing network infrastructure and security tools is good; they are resilient, and we can integrate with anything easily.

There is one thing regarding Palo Alto Networks VM-Series that they need to look into, which is ISPM, Identity Security Posture Management, and other than that, I could see there are multiple things which they have already been doing well.

Technical support is good for Palo Alto Networks VM-Series, but sometimes for new feature requests, we are facing challenges. We are the conglomerate, so individual business has different requirements, which we are expecting some new requests for. Whenever any custom requirement exists in an existing tool, they are taking much time with the engineering team, which is the only thing I'm expecting them to improve. Other than that, this product is very good.

I think overall security is something they need to make into a single pane of glass to help the customer who is using only the single Palo Alto Networks vendor, so they will get end-to-end visibility in a single console.

I have been using them for around three years.

My experience with the scalability of Palo Alto Networks VM-Series is good; whenever we are facing any issues, they are helping, and it is a scalable environment.

Technical support is good for Palo Alto Networks VM-Series, but sometimes for new feature requests, we are facing challenges.

We are generally satisfied with Palo Alto Networks VM-Series.

I would rate Palo Alto Networks VM-Series technical support an eight out of ten.

I would recommend Palo Alto Networks VM-Series to others.

I am a customer of Palo Alto Networks.

Actually, we are trying to migrate to Cortex  Cloud; currently, we are using Prisma, so we are in the phase to migrate to Cortex  Cloud, but have not yet migrated, so I am not experienced with it and cannot give feedback about it.

We haven't used  Prisma Access  Browser.

Overall rating: 10/10

We usually recommend Palo Alto Networks VM-Series  for BFSI companies.

I find Palo Alto Networks VM-Series  easy to deploy, and none of my customers have had significant complaints. My customers have high certifications provided by Palo Alto Networks. The friendly dashboard and the ability to easily command and use the CLI make Palo Alto Networks VM-Series a better product. It offers robust solutions, making it valuable to my customers.

It may be beneficial if the firewall can monitor all internal elements like VMs pulling from HP servers. Consolidating these insights into a single dashboard would be advantageous.

I have been familiar with Palo Alto Networks for four or five years.

The performance of VM instances has some limitations in terms of threshold and throughput compared to appliances.

I would rate scalability as eight out of ten.

Palo Alto Networks offers better technical support, maintaining SLA efficiently, and resolving issues promptly.

In some cases, I have migrated from Cisco to Palo Alto Networks VM-Series smoothly.

Pricing for Palo Alto Networks is higher than other OEMs, but considering the robustness and features, it gains customer trust. Technical configuration is a focus area due to its high commercial profile.

I consider Check Point alongside Palo Alto Networks, as well as Cisco for wireless solutions.

When evaluating, consider the customer’s environment and pain points since both Check Point and Palo Alto Networks have their advantages. Overall, I rate Palo Alto Networks VM-Series eight out of ten.