We use the solution for network protection. Previously, I worked for a physical organization, but last year we moved to a Proof of Concept. Following the POC, we had to deploy the solution in three different geographical locations. We deployed all of the Palo Alto solutions in the hub environment and connected them to another node.
VM-Series Next-Generation Firewall Bundle 1 [VM-300]
Palo Alto NetworksExternal reviews
181 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Best NGFW you can cosider
What do you like best about the product?
ACC report is fantastic, I also view the statistics and found a lot of useful information
What do you dislike about the product?
Throughput performance is lower compare to other vendors eg: Fortinet
What problems is the product solving and how is that benefiting you?
NGFW features (IPS, wildfire, WF, AV) protect against malware
Allows us to maintain consistent next-generation firewall protection across virtual, private, and public cloud infrastructures using a unified policy model
What is our primary use case?
How has it helped my organization?
VM-Series allows us to maintain consistent next-generation firewall protection across virtual, private, and public cloud infrastructures using a unified policy model. We can use the provided templates to generate policies based on both global and local rules.
Panorama plays a vital role in allowing us to maintain a consistent security policy model across on-premises and various public cloud environments. Presently, we utilize Panorama exclusively in the cloud, spanning three different geographical locations: East Asia, Eastern U.S., and Western Europe.
Once we were able to configure Panorama's centralized management system we were able to have uninterrupted connections with no security issues.
Using Panorama helped us streamline our security policies in a cloud-based environment, saving us time. With Panorama, we no longer need to log in and manually adjust the template before transferring data, which increased our comfort level.
What is most valuable?
Palo Alto Networks VM-Series' security features are all good.
Centralized management is valuable because it allows us to configure settings in one location and apply them across all three locations.
What needs improvement?
The migration of workloads to the cloud is difficult because the cloud provider and Palo Alto Networks are different platforms. We had to research many articles online and after our research and development were completed we were able to deploy. The migration of data to the cloud can be more user-friendly and has room for improvement.
The utilization monitoring and GUI have room for improvement.
Sometimes we encounter licensing issues where our licenses are not activated, and as a result, we are required to redeploy. This problem could be related to VM-Series or the template image and how they are integrated with Azure Marketplace.
For how long have I used the solution?
I have been using the solution for one year.
What do I think about the stability of the solution?
The solution is stable.
How are customer service and support?
The technical support is good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously, we utilized Azure Firewall, but we found it to be less mature compared to Palo Alto, prompting us to switch to the latter.
How was the initial setup?
The initial setup is straightforward but the deployment portion is complex. We require 15 minutes for one VM deployment.
What other advice do I have?
I give the solution a nine out of ten.
Network Security Solutions
What do you like best about the product?
The GUI interface of the Palo Alto Next-Generation firewall is straightforward to use. Firewall administration and deployment of this device were beneficial in our Production environment. We have around 60 productions of Palo Alto Next-Generation firewall in our environment.
What do you dislike about the product?
Every new software release has a bug; at least, we need to upgrade our Firmware version occasionally to avoid those bugs we encounter in our environment. Yearly we have upgrade activity on each of our firewalls.
What problems is the product solving and how is that benefiting you?
Our company uses it as our Network Security solution in our production environment. We also used a firewall to protect our backend resources facing the internet and for PCI compliance.
Palo Alto Networks Next-Generation Firewall
What do you like best about the product?
Easy to use great interface, the wizard for configuration is helpful and intuitive. Great product!
What do you dislike about the product?
Cost, very expensive and heavy uplift would state it would need long term commitment to implement and gain benefits.
What problems is the product solving and how is that benefiting you?
General administration
Define and manage rule set
Ensure dashboard is self evident to users and setting up of laerts and rules wih ease
Define and manage rule set
Ensure dashboard is self evident to users and setting up of laerts and rules wih ease
NGFW Review
What do you like best about the product?
Palo Alto NGFW is excellent for acting as the first line of defense, with proactive malware filtering, conditional access, and continual content updates. The system is easy to update and maintain from a beginner level to an expert.
What do you dislike about the product?
One of the drawbacks of Palo Alto is the technical support side. We have had mixed experiences when troubleshooting with the recommendations they provide. Not all resolutions to an issue may be a one size fits all type of fix; each environment will be different, so that must always be considered.
What problems is the product solving and how is that benefiting you?
The NGFW in our current environment is used for edge protection, and others are used for internal segmentation. They perform excellently in reducing the filtered traffic to what is genuinely needed within the network.
The Best Next Generation Firewall For your Organization: PALO ALTO
What do you like best about the product?
Palo Alto NGFW is the best firewall available in the market, and this product's stability is incredible. It provides complete visibility and control of our traffic and helps to detect and take prevention measures on vulnerable traffic or malicious event. It has many beneficial features for the organization, like DNS security, which provides sub-features like blocking malicious domains and URL filtering. The following fantabulous features are app-id, user-id and single parallel pass processing, which is the best about Palo alto. If we use different Palo alto firewalls, then we can manage them through panorama and do the changes all in one place, so manageability becomes an easy task. The threat signature database is updated regularly. The configuration part is easy and provides excellent throughput and speed despite the high traffic load.
What do you dislike about the product?
The dashboard or management console is very complex and can not be understood by an average L1 engineer. Configuring policies and making VPN tunnels is a big task and takes time. Talking about the cost, it is the most expensive firewall I have seen. The price is high compared to other firewall vendors. The tech support is not so good. Sometime it becomes tough for priority cases to resolve the issue. They launch a new feature release or some service pack now and then and it becomes tough to adapt to these changes as sometimes they contain bugs and are risky to implement in the production network. There is some issue with the VPN feature of Palo Alto. It needs strong expertise and an excellent team to handle this product.
What problems is the product solving and how is that benefiting you?
We can track down the traffic on the interface, and we can also see the bandwidth consumption that is used by the application. This firewall helped our organization to prevent malicious attacks, what user is using which services and what port, and we can block them according to the requirement. Another use case is that it has a sandboxing technique that helps isolate malicious applications and files containing viruses or malware. We can do DNS security, which is our primary focus and provides threat prevention. We can filter out bad traffic and create VPNs for remote users, and the functionality is flexible. If we compare it to other firewalls like FortiGate and SonicWall, it is the best firewall. The web interface can display all the information about our needs.
Good performance, powerful CLI, and offers zero-day signature updates
What is our primary use case?
We use this product to secure our entire network, for ZTNA structure, and for VPN purposes, allowing access to our servers behind the firewall.
How has it helped my organization?
Using this product has increased our security and has given us much better results in terms of security scans.
Palo Alto embeds machine learning into the core of the firewall to provide online real-time attack prevention, and I would rate that capability an 8 out of 10. It's definitely effective in terms of securing our network against threats that are able to evolve and morph rapidly.
This solution provides a unified platform that natively integrates all of the security capabilities, although we are not using parts of it. For example, we don't use the configuration tools like Panorama.
What is most valuable?
The most valuable feature is the CLI.
We have the firewall configured for zero-day signatures, which is very important to us. We must be HIPAA and PCI compliant, which means that we need those signatures immediately.
There is no noticeable trade-off between security and network performance. In fact, so far, we've not seen any negative network performance with it. We're very impressed in that regard.
What needs improvement?
The web interface, especially when committing changes, remains a bit slower than I would like, but it has improved over the years. Reboots for the VM series do take longer than I would have expected.
For how long have I used the solution?
I have been working with the Palo Alto Networks VM-Series for almost 5 years.
What do I think about the stability of the solution?
This product is very stable. We have had zero problems with stability.
What do I think about the scalability of the solution?
The scalability is fantastic. We're using the lowest-end product right now, and I don't foresee when we'll have to upgrade. We have a long way where we can continue to scale up.
We currently have multiple people that use it for VPN purposes, to access our servers behind the firewall. It is not used nearly as extensively as it should be. However, in the future we will start flowing all of our internet traffic through it.
We're all working remotely, and we're going to be connecting through the firewall. This means that our traffic is going to greatly increase, meaning that our usage will also increase. We'll also be using many more of the features.
How are customer service and support?
The technical support from Palo Alto is good, overall. However, their response times could be a little quicker.
We have not really had any big complaints with the technical support and I would rate them a seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
Prior to using Palo Alto, we were using an on-premises solution by Juniper. When we switched from onsite to the cloud, we changed products.
We made the switch because Juniper became unbearable regarding complexity and performance. It was getting very bad; we couldn't manage it well, and the performance was quite poor.
How was the initial setup?
The initial setup can be quite complex. There is a steep learning curve and we failed at it a few times before we were able to put a production machine into place.
Our final deployment took between three and four hours.
What about the implementation team?
Our in-house team was responsible for the deployment.
What was our ROI?
We have absolutely seen a return on our investment. We are definitely more secure. With the features that are in Palo Alto, we do not have to worry about people busting into our network. Even just out of the box, with the base features, it's very solid. The default configurations are quite secure.
Our return on investment comes from the fact that no longer need to spend hours monitoring our network the way we did before. We've saved man hours and we've saved stress. I am unable put a monetary value to that, but that would be the return.
What's my experience with pricing, setup cost, and licensing?
This is not the cheapest firewall but it's not the most expensive of the options on the market.
The new licensing structure is a little difficult to understand at first, but with the right thought put into it, would like save some money.
Which other solutions did I evaluate?
Beyond Palo Alto, we evaluated two or three other products. Two of them that I can recall are Fortinet and the Microsoft Azure Firewall.
We did some extensive reviews and some extensive testing and what we found is that for the price, Palo Alto gave us the best options. It had the best set of security features. It wasn't the cheapest product but it was the best solution that fit our requirements.
What other advice do I have?
We have not yet implemented the DNS security features but we will in the future.
If one of my colleagues at another company were to say that they were just looking for the cheapest and fastest firewall, I would suggest that they be careful. Palo Alto has a great balance. It's not super expensive compared to other options on the market, and it's quite quick when it comes to throughput and performance.
In summary, this is a good product but I do suggest that people shop around a little bit.
I would rate this solution an eight out of ten.
THE BEST NEXT GENERATION FIREWALL
What do you like best about the product?
It is one the best network security tool which orovides all round protection to your network and endpoints. This is easy to deploy and manage providing software and hardware together which are all developed all by PA. Having different plane for control and management is very helpful.
What do you dislike about the product?
1. It is more on the expensive side if you compare with other firewall solutions.
2. Buying license for different usecase is also an expense.
3. Log analysis and review is not really user friendly.
2. Buying license for different usecase is also an expense.
3. Log analysis and review is not really user friendly.
What problems is the product solving and how is that benefiting you?
1. This enables us to cover all the network and endpoints which is really helpful in avoiding all the types of vulnerabilities.
2. Managing vpn is also amazing and managing client networks as well.
2. Managing vpn is also amazing and managing client networks as well.
Recommendations to others considering the product:
Go for it if you have kind of bank balance required.
Palo Alto, Reliable High Performance Firewall Solution!
What do you like best about the product?
Palo Alto is a solution that provides software and hardware as a complete setup. The other vendors could be deployed as an open server. I mainly consider Palo Alto like iPhone which develops it's own software; iOS and produces the hardware as iPhone. Also, I consider the other rival vendors like Android as an OS and this OS is capable to work with Samsung, Google, Sony, Xiaomi, Oppo, etc. hardware.
What do you dislike about the product?
The zone limitations give me a headache always. And also log screen and log searching syntax are very complicated and not user-friendly. This interface needs to be revised by a UX Designer
What problems is the product solving and how is that benefiting you?
Palo Alto is one of the leaders in Next-Generation Firewall solutions. We can do App-ID, Content-ID, and User-ID based on Application Control. Also, we can manage security policies and NAT policies which are based on Access Control or port control. Site to site VPN works well without any problem but is hard to configure on the Dashboard; you can add the definitions as objects and use them in VPN policies
Recommendations to others considering the product:
Sizing is important before deploy. Initial setup is supposed to be done by an experienced expert.
Palo Alto review
What do you like best about the product?
The end-to-end security solutions using the product Palo alto can provide security features for layer three to layer seven. One box solutions for all the security issues.
What do you dislike about the product?
Sometimes this device is over-intelligent and creates policies by blocking genuine traffic, which causes production impact. The development team needs to review these issues.
What problems is the product solving and how is that benefiting you?
the device was helping me identify dangerous operating systems and files; with one-click options, we mitigate these kinds of attacks and product the IT infrastructure
showing 151 - 160