VM-Series Virtual Next-Generation Firewall (BYOL)
Palo Alto Networks | PAN-OS 11.1.2-h3Linux/Unix, Other PAN-OS 11.1.2-h3 - 64-bit Amazon Machine Image (AMI)
No Rating
This is informational, the product allows you to launch on c5.large however that is not enough memory. It will boot to maintenance mode with an error in the system log about not having enough memory. Needs > 4GB, not 4GB.
- Leave a Comment |
- Mark review as helpful
Horribly Slow!
Earlier versions are super slow to launch (pass basic status checks), and super slow to bootstrap (respond even on ssh port). The latest version fails to launch fast enough to get past the basic status checks (10 minute timeout), and there is no means to alter this timeout for an auto scaling group (not the same timeout has HealthCheckGracePeriod). If you're designing for high availability, this is not the product for you.
Once a mighty company
I've been an advocate for using Palo Alto firewalls for over a decade. They were so far ahead of everyone else. The gap has closed quite signficantly, and they still shine when it comes to being a full layer 7 firewall. The problem is that the company has grown too large and the product has tons of bugs, support is non-existent. They hire people off the streets to support them because they have such a large customer base, and these "off the street" people in turn hire people with even less skill than them. It's a crap shoot when deploying PANS these days, as you run into all kinds of issues, and don't even think about opening a case. You will have to invest tons of times to over explain the issue, be fed with useless documents (you can find those yourself), and escalate multiple times, and then if you're lucky, you may find someone that can find a bug , which will almost never get fixed.
Launch at an older version
How can we launch the instance at an older version? like 10.1.4? when we launch an instance, it doesn't ask for the software version and launches by default to the latest version
Install Version
There is no way to Select the OS Version we want when deploying Palo from the AWS Market Place. Deploying the default version is not acceptable.
1st Exposure to Palo Alto for AWS
I'm very impressed with the product. There were quite a few hurdles to jump over and there are a few more to overcome but decided to purchase a license. It meets the short term security requirements for the cloud. Coming from an appliance world, the VM version has its quirks and some features are not supported.