I am the team manager responsible for various security products. My customers use Palo Alto Networks products, and I am working with Palo Alto partners. We support a variety of solutions including Strata firewalls, Prisma SD-WAN, and Wildfire for advanced threat protection.
VM-Series Virtual Next-Generation Firewall (BYOL)
Palo Alto NetworksExternal reviews
External reviews are not included in the AWS star rating for the product.
recommended for security purposes for cloud environments.
My Experience using Palo Alto VM-Series
Can overcome complex threat landscapes with robust threat intelligence and great reliability
What is our primary use case?
What is most valuable?
Wildfire, a sandboxing product, allows for analyzing malware in virtual machines. Its strength lies in threat intelligence, which is significant for proactive defense. Palo Alto's robust threat intelligence supports new updates, and I can open cases directly with their Threat Intelligence team. Customers appreciate the throughput and reliability of VM-Series Firewalls, as they can be managed efficiently through Panorama.
What needs improvement?
I find it difficult to reach technical support at Palo Alto Networks. Most customers go for partner-enabled support, which involves multiple layers, leading to delays. Additionally, the technical maturity level of support is not always high, resulting in dissatisfaction. The pricing of Palo Alto is relatively high, particularly for smaller companies.
For how long have I used the solution?
I have been familiar with Wildfire for nearly five years. I have been working with the VM-Series for nearly two years.
What do I think about the stability of the solution?
Palo Alto products are stable compared to others. Stability issues may arise when exceeding throughput limits, but hardware is generally very stable.
What do I think about the scalability of the solution?
Scalability is a strength of Palo Alto VM-Series. They are easy to upgrade, and with credit licensing, they scale effectively according to demand.
How are customer service and support?
I can give Palo Alto Networks technical support a six out of ten. It is very hard to reach, and the process can be lengthy and frustrating because support involves several layers.
How would you rate customer service and support?
Neutral
How was the initial setup?
Initial setup is easy, especially in public cloud environments where VM-Series can be obtained from the marketplace.
What was our ROI?
Our ROI is measured in terms of catch rate, however, customers often focus on the total price of the product rather than detailed ROI calculations.
What's my experience with pricing, setup cost, and licensing?
Palo Alto is expensive in terms of pricing, particularly when comparing features to cost. Their Premier Support is also very expensive and not widely chosen by customers.
Which other solutions did I evaluate?
I would recommend Check Point and Fortinet as alternatives for companies where the budget is a concern.
What other advice do I have?
I would recommend Palo Alto VM-Series to others and rate it an eight out of ten. However, for companies below midsize, it may not be a fit due to cost. For those companies, I suggest considering products like Check Point or Fortinet.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Experience robust security with fast and efficient VPN and antivirus capabilities
What is our primary use case?
The main gateway for my organization is Palo Alto because my SAP data is hosted there. My staff operates behind Palo Alto, and numerous software applications and websites are hosted on it. I wanted a strong product for security, particularly for ransomware, malware, and a strong VPN for accessing SAP through VPN and CloudProtect.
What is most valuable?
Palo Alto offers excellent security, with features such as email scanning, malware protection, and efficient VPN and antivirus capabilities. There is no latency, making it faster compared to my previous solutions. The services are hosted and run quickly, which enhances our operations. The security against DDoS attacks has also been improved significantly.
What needs improvement?
There is a need for two-factor authentication, particularly for VPN and CloudProtect. It would enhance security further. The individual certificate feature where a unique certificate is attached to each user would also be valuable. If Palo Alto adopts this, they would excel.
For how long have I used the solution?
I have been using Palo Alto for the last three months.
What do I think about the stability of the solution?
Palo Alto is very stable. I would rate it ten out of ten.
What do I think about the scalability of the solution?
It is very scalable. If I were to rate it on a scale, it would receive nine out of ten, and with two-factor authentication, it would be ten.
How are customer service and support?
The technical support is very good. I rate it nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I was previously using Sophos. The switch to Palo Alto was driven by the need for a product that could manage all my in-house data and offer superior security. Sophos was not offering the class A level of service that Palo Alto provides.
How was the initial setup?
The initial setup of Palo Alto was straightforward as the vendor completed it efficiently in one day.
What about the implementation team?
The product was installed by our vendor.
What was our ROI?
As of now, I am content with the pricing. Although the price might seem high, it reflects the quality of the product similar to the difference between Android and Apple products.
What's my experience with pricing, setup cost, and licensing?
The pricing is reasonable and reflects the quality of the product. There are no issues with the cost, as it is commensurate with the quality received.
What other advice do I have?
My overall rating for Palo Alto Networks VM-Series is nine points out of ten.
The solution effectively handles security issues and ensures data safety.
Advanced threat prevention with visibility and control
What is our primary use case?
We manage public or private cloud traffic, inspecting for security through various profiles. This includes managing traffic for southeast, east-west, inbound, and A access, applying security profiles to the traffic. I also work with the Check Point Next Generation Firewall and Palo Alto Firewalls.
What is most valuable?
The most effective features for threat prevention include the threat prevention signature level, the application filter capability, and the visibility provided by the firewalls.
We use these tools to prevent all known and unknown threats using Palo Alto Networks' Wildfire and other data filtering tools to gather information, analyze traffic, manage malicious traffic, and offer visibility, control, and attack prevention.
What needs improvement?
When managing the firewall, it involves a Strata Cloud web browser that requires improvement to enhance deployment ease and call center efficiency.
Additionally, focusing more on enhancing the Stata Cloud Manager would be beneficial.
For how long have I used the solution?
I have used this solution for three years.
What do I think about the stability of the solution?
The solution is very stable and has been in the market for the last 16 weeks.
What do I think about the scalability of the solution?
We are very much satisfied with the tool's scalability.
It rates up to nine out of ten for scalability satisfaction.
How are customer service and support?
The support is quite responsive, but the support quality could be improved. They should focus on enhancing the support provided.
How would you rate customer service and support?
Positive
How was the initial setup?
The setup is easy; I would rate it ten out of ten for ease of setup.
What was our ROI?
Customers can see data within a week, indicating a quick return on investment.
What's my experience with pricing, setup cost, and licensing?
The pricing is at a reach level. I'm not the person who deals with exact pricing details.
What other advice do I have?
I recommend going with the VM series, as it integrates advanced technological standards on a single platform and supports Kubernetes and Docker, which other vendors often don't offer.
I rate the overall solution ten out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Enhanced threat prevention with advanced security controls
What is our primary use case?
The primary use case involves using next-generation firewalls, hardware, VM-Series, Prisma Access for SASE solutions, Prisma Cloud for cloud security posture management, and Cloud Workload Protection. It's used primarily for securing customers' virtualized data center environments as well as public cloud environments.
How has it helped my organization?
The additional visibility, which was lacking with cloud-native tools, has improved the organization's cloud security posture. Advanced enforcement and granular security controls help manage potential threats.
What is most valuable?
The most effective feature for threat prevention is the threat prevention model in the VM-Series. This is bundled with advanced URL filtering, decryption, and wildfire sandboxing.
What needs improvement?
If additional web application firewall capabilities could be integrated into the existing firewall, it would negate the need for additional products.
For how long have I used the solution?
I've been working with Palo Alto VM-Series for at least five to six years now.
What do I think about the stability of the solution?
We haven't had challenges with failovers yet.
What do I think about the scalability of the solution?
We've controlled the scalability via VMSS in Azure, using auto-scale groups in AWS. It's quite seamless, though there's room for improvement in cost management, especially during traffic spikes.
How are customer service and support?
The technical support is great. We've had no challenges and there are established channels for customer success and professional services.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
In the past, I used to work with Check Point, but haven't worked with them lately. Given the support from Palo Alto, there hasn't been a necessity to explore others.
How was the initial setup?
The integration process involved using a Panorama setup for centralized firewall administration, transitioning from cloud-native firewalls to VM-Series.
What about the implementation team?
We are primarily a consulting firm and reseller, so we've had significant involvement in the process.
What's my experience with pricing, setup cost, and licensing?
The solution tends to add to costs especially when scaling, although measures like using large compute instances minimize the need for scaling.
Which other solutions did I evaluate?
Potential competitors mentioned are Check Point and Cisco but haven't been evaluated recently.
What other advice do I have?
For straightforward firewall inspection and basic IPS, IDS requirements, native firewalls might suffice. For more advanced needs, using VM-Series or Palo Alto Firewalls is recommended.
I would rate it an eight out of ten.
Which deployment model are you using for this solution?
Enables us to address a lot of customer queries
What is our primary use case?
I use it for two main reasons. In case there is a customer query, Palo Alto firewall is one of the vendors that we support for syslogs, rule management, change management, and traffic monitoring.
Our product is used to query the firewall and provide a dashboard that raises alarms if any suspicious activity is detected. It involves the management of the firewall. We have a partnership with Palo Alto, and I have worked with VM-Series.
When a customer encounters an issue with our product in accordance with Palo Alto, I analyze the problem and provide solutions. Additionally, I have constructed a lab with network devices for partner training. This lab uses Palo Alto firewalls for communication.
How has it helped my organization?
By using this firewall, we were able to address a lot of customer queries and answer to their VM-Series. This helped us retain our customers and gain confidence from them.
What is most valuable?
Palo Alto is easy to use. The UI is very easy to understand and does not require any certification or highly skilled technician to handle the firewall. It is very user-friendly and straightforward out of the box.
What needs improvement?
An area for improvement would be AI-related features, particularly in rule management or threat intelligence. Focusing on AI-based threat detection would be beneficial.
Additionally, enhancing the ease of accessing technical support would be useful.
For how long have I used the solution?
I have been using Palo Alto Networks VM-Series for about three to four years.
What do I think about the stability of the solution?
Stability is good. Once it is configured, it is stable, and I would rate it nine out of ten. I have not experienced any outages with Palo Alto, unlike other vendors like Sophos.
What do I think about the scalability of the solution?
Scalability is good, and I would rate it eight out of ten. We use it for testing with a low load, and it works well. In production setups, I have observed it being used effectively with a large number of transactions per second.
How are customer service and support?
Reaching technical support is challenging, and I may not be eligible for direct support since I'm not a customer. It involves multiple channels. I would rate their technical support seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I previously used Cisco ASA, an older version, due to its market leadership at the time. We moved to Palo Alto due to multiple customer requests for other solutions like Sophos, FortiGate, SonicWall, and WatchGuard.
How was the initial setup?
The initial setup was very easy and can be rated nine out of ten. It is straightforward to configure, and the UI is simple.
What about the implementation team?
I did everything myself. One person is sufficient for the deployment and maintenance of five to seven firewalls.
What was our ROI?
The return on investment is seen in customer retention and addressing their queries rather than in revenue.
What's my experience with pricing, setup cost, and licensing?
I'm not the right person to give a rating for pricing, as I use a not-for-sale license provided by Palo Alto for testing.
Which other solutions did I evaluate?
We evaluated Cisco ASA, but due to diverse customer demands and requests for vendors like Sophos, FortiGate, SonicWall, and WatchGuard, we extended our support to Palo Alto as well.
What other advice do I have?
For software application firewalls, this is the best solution. If you are using it in a cloud or as an application firewall, then Palo Alto Networks VM-Series is the best one for you.
I would rate it an eight out of ten.
Which deployment model are you using for this solution?
Advanced protection and good integration capabilities with good reliability
What is our primary use case?
We use Palo Alto Networks VM-Series to offer services to our customers as a managed security service provider. We provide solutions and services to our customers across the globe. For example, if I want to host a firewall in the cloud or somewhere where the physical appliance is not a possibility, we provide that image of the firewall on virtual machines.
How has it helped my organization?
It helps in offering advanced protection against malware and anti-spyware, which is based on customer feedback stating the product has very good threat prevention capabilities.
What is most valuable?
Very good reliability and feature set, such as advanced protection against malware, anti-spyware, and Wildfire. It also has good VPN capabilities and integration capabilities.
What needs improvement?
The scalability could be improved further. The virtual instances of the firewall are not as scalable as their hardware firewalls.
For how long have I used the solution?
We have been using Palo Alto Networks VM-Series firewalls for over five years.
What do I think about the stability of the solution?
I find the solution to be a good, stable product.
What do I think about the scalability of the solution?
The virtual instances are not as scalable as the hardware firewalls.
What about the implementation team?
A separate team handles implementation. I am mostly involved in the designing aspect of the product.
What was our ROI?
It is hard to get into the ROI aspect. Generally, ROI can be determined by comparing a physical appliance-based firewall versus a virtual instance of a firewall.
What's my experience with pricing, setup cost, and licensing?
Pricing can be an issue when competing with products like Fortinet, which often offer similar functionality at a lower cost.
Which other solutions did I evaluate?
There are many competitors like Fortinet offering similar functionality.
What other advice do I have?
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Provides excellent filtering and blocking features and enables users to examine reports easily
What is our primary use case?
All the PwC offices in Pakistan use Palo Alto in their environment. It is a global solution.
What is most valuable?
Palo Alto is a good product. The features are up to the mark. No other product can compete with Palo Alto’s features. The filtering feature is good. We can block the traffic and examine the report easily. The blocking functionality works very well compared to other firewalls. I rate the ability of the tool to keep up with the trends in firewalls an eight out of ten.
What needs improvement?
The product must create some awareness in Pakistan. People are less aware of Palo Alto. Everyone knows about Fortinet and Cisco. Very few vendors are promoting the tool.
For how long have I used the solution?
I have been using the solution for four to five years.
What do I think about the stability of the solution?
The stability is fine. I rate the stability a seven out of ten.
What do I think about the scalability of the solution?
I rate the product’s scalability an eight out of ten. We have 2500 users. We use the tool daily. All our traffic passes through it.
How was the initial setup?
I rate the ease of setup a seven out of ten. The setup is moderately easy. The product is deployed on the cloud. The deployment takes two to three days since it has global rules.
What about the implementation team?
The tool was deployed in-house.
What was our ROI?
We have seen an ROI of 60% to 70%.
What's my experience with pricing, setup cost, and licensing?
Companies in Pakistan have limited budgets. Palo Alto is more expensive than other products. So, people are reluctant to put Palo Alto in their environment. It's too costly compared to other tools. I rate the pricing a nine out of ten.
What other advice do I have?
We had deployed the solution in 2018. We used a different product before, but my organization switched to Palo Alto. It was the management’s decision. Overall, I rate the tool an eight out of ten.
Offers threat prevention and WildFire features with outstanding stability
What is our primary use case?
Our company sometimes uses a data center edge firewall from Cisco, Fortinet, Forcepoint, or any other vendor, and the solution is used to cover apps and data.
What is most valuable?
The threat prevention and WildFire features are the most valuable features. DNS is another good feature of the product.
What needs improvement?
The flexible throughput in Palo Alto Networks VM-Series can be improved. The customers of our organization demand 500 meg throughput and the payment also depends on it. The basic firewall from Palo Alto has the size of one gig, and it isn't logical for a customer to buy for one gig when just 500 meg is required. Palo Alto Networks VM-Series should become a more flexible firewall.
VM management in an environment is difficult with Palo Alto Networks VM-Series, but it can be smoothly managed through Panorama. The vendor can work on enhancing and processing that will not affect the server itself or the VM firewall protection. In our company, we have multiple VMs implemented on the same server, and the Palo Alto Networks VM-Series is used to protect these VMs completely. The tools being used should not affect the operations between VMs.
For how long have I used the solution?
I have been using Palo Alto Networks VM-Series for almost four years.
What do I think about the stability of the solution?
I would rate the stability of the product a nine out of ten. I am facing multiple stability issues with other competitor tools in our company.
What do I think about the scalability of the solution?
I would rate the scalability a seven out of ten. I would've rated Palo Alto Networks VM-Series more if the flexible throughput was better. I would rate the scalability of other competitor tools a four out of ten. Palo Alto Networks VM-Series is suitable for businesses of every size or scale.
How are customer service and support?
The vendor provides two support modules: backline and premium support. If you need to open a case directly with Palo Alto to solve a problem, you must purchase premium support.
Premium support is highly expensive—almost five times the cost of availing backline support. Local distributors of the product manage the backline support and have extended response time, and the team might not have mature knowledge to solve issues.
How was the initial setup?
The solution's initial setup process is very easy. A hybrid deployment model is available for Palo Alto Networks VM-Series. Panorama can manage the solution's VM, physical, and cloud versions, making it an impressive monitoring tool.
A more mature and enhanced tool can be used in integration to migrate from other competitor solutions to Palo Alto Networks VM-Series. For instance, if a customer has a legacy firewall from Cisco or Fortinet and there is a need to migrate to Palo Alto, I will require a mature migration tool that will make the process easier for engineers to migrate the rules, policies, and application IDs.
What's my experience with pricing, setup cost, and licensing?
The licensing model should be improved. Palo Alto Networks VM-Series is the most expensive tool among competitors.
Which other solutions did I evaluate?
Palo Alto Networks VM-Series and the competitor products provide multiple series of bandwidth, features, implementation models and capable management tools. But Palo Alto Networks VM-Series is the most stable compared to all other competitor tools. The signature or behavior of the database is more mature in Palo Alto Networks VM-Series than others.
Palo Alto Networks VM-Series allows you to analyze the behavior of any traffic or probable attack.
What other advice do I have?
The solution easily integrates with the client's cloud security architecture. If in our company, we get a customer who's depending on the container, then security is required for the container from OpenShift or any other vendor, I use Prisma to secure the environment instead of traditional firewalls.
The solution's sizing and architecture are highly expensive. It's an effective and stable firewall that detects all attacks. Palo Alto Networks VM-Series can adapt quickly to an organization's changing security or policy needs. Overall, I would rate the product an eight out of ten. I will definitely recommend Palo Alto Networks VM-Series to other users.