Centralized management and troubleshooting enhance operational efficiency
What is our primary use case?
I use Palo Alto Networks Panorama for the management of all the firewalls. Apart from that, I use Cloud Prisma for VPN management, as well as connectivity to the production, non-production environment. I use three flavors of Palo Alto Networks: Panorama, Cloud Prisma, and the on-prem, physical Palo Alto firewalls in the data centers.
I use Palo Alto Networks Panorama for all our production, non-production firewalls, which are onboarded on Panorama. Whatever changes I make in the individual firewall, I push that to the Panorama, and Panorama pushes to the individual devices.
What is most valuable?
The granular control of Palo Alto Networks Panorama stands out for me, as you have centralized management or a centralized view for all the firewalls. It's easy to create security policy, easy to create NAT policy, and easy to do any configuration. Second is easy troubleshooting, so rather than going to all the firewalls, I can centrally troubleshoot. If any issue occurs, I have a centralized monitor tab, and centralized logs are there, so I can easily troubleshoot any issues from the Panorama itself.
In terms of logging and reporting capabilities, there is centralized logging with Palo Alto Networks Panorama. In terms of ease of configuration and ease of troubleshooting, all individual firewalls forward logs to the Panorama, and Panorama forwards logs to the Syslog server. That is ease of configuration. The second thing is ease of troubleshooting, as all the centralized logs are present in the Panorama itself. Based on any issue occurred, I can troubleshoot it on the Panorama itself rather than going to the individual firewalls.
It's very easy to integrate with infrastructure and other systems.
What needs improvement?
I do see some disadvantages with Panorama. If your staff is not technical enough, you have to be very careful if you have production devices on Panorama because once you push any changes, those get pushed on the individual firewalls. In terms of operation, it is quite important that the staff managing the Panorama should be technically sound enough, and they should know exactly what they are doing. If you break anything in terms of config push, that could lead to an outage. That is one of the most important things I would say. Apart from that, I don't see any disadvantages as such.
For how long have I used the solution?
I have been using it for more than five years.
Which solution did I use previously and why did I switch?
Earlier we were using bare-metal hardware devices in the data center. Now we migrated to the AWS cloud, so we deployed the Palo Alto Networks Panorama firewall in the AWS cloud, and we manage it from there.
What was our ROI?
I'm not at that position to comment on ROI since I started using Panorama.
What's my experience with pricing, setup cost, and licensing?
If you go with the cloud-based deployment, it is pretty much affordable. If you go with the physical bare-metal hardware, then it is quite expensive.
What other advice do I have?
This solution receives a rating of 10 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Palo alto Networks Panorama Review
What do you like best about the product?
For me, one of the best features that Palo Alto Networks Panorama offers is: the centralized management and the visibility across multiple firewalls.
What do you dislike about the product?
For me Palo Alto Networks Panorama offers many good features, the Complexity for New Users, Learning Curve and the Initial Setup are some aspects that the users can find hard or difficult at the beginning.
What problems is the product solving and how is that benefiting you?
One problem experienced was that Without centralized management, the organization face a hard time trying to enforce uniform security policies across a large network. And that generate security vulnerabilities for the company.
The Solution that Palo alto offers is that allows the centralized creation and the enforcement of security policies, that can be applied across all the managed firewalls in the network of the company.
From my point of view, the benefit that i can observed is that the consistency in the security posture and a stronger defense against differents attacks, that offers Palo Alto, and the security policies are uniform across the whole environment, it will reduce the chances of a policy loophole and a hard time for the company.
Provides a centralized and efficient management solution for multiple firewalls
What is our primary use case?
Palo Alto Networks Panorama is essential for those adopting a centralized landing zone firewall approach as it provides a unified management point for enforcing security policies. It becomes particularly crucial in multicast strategies and cloud environments, streamlining configuration and monitoring across multiple firewalls.
How has it helped my organization?
Using Palo Alto Networks has brought numerous benefits to our organization. It effectively addresses security vulnerabilities, incorporates advanced AI technology, ensures reliability, and continually innovates with a demand-driven approach to security features.
What is most valuable?
The most valuable feature of Palo Alto Networks Panorama is its innovation and impressive capacity to handle network traffic efficiently.
What needs improvement?
A potential improvement for Palo Alto Networks Panorama could be a more competitive pricing structure.
For how long have I used the solution?
I have been working with Palo Alto Networks Panorama for three years.
What do I think about the stability of the solution?
It is a fairly stable solution.
What do I think about the scalability of the solution?
I would rate the scalability of the product as an eight out of ten. We have approximately 30 to 40 customers using it.
How are customer service and support?
The technical support is good.
How was the initial setup?
The setup of Palo Alto Networks Panorama is moderately complex. In my experience, the deployment of Palo Alto Networks Panorama involves considering accessibility, and if it's on-premises, it may face challenges like procurement delays. The cloud version tends to be smoother and more straightforward for deployment.
What's my experience with pricing, setup cost, and licensing?
The pricing structure could use some improvement.
What other advice do I have?
I highly recommend Palo Alto Networks Panorama. It is a mature, solid, and innovative technology. Overall, I would rate it as a ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
It’s a very nice easy to maintain and all in one security solution
What do you like best about the product?
It has a very nice interface and most of the things can be done through GUI and can manage the NGFW through one centralise console also it has lot more features than traditional firewalls like Cisco ASA. Ice deployed correctly it will become all in one security solution .
What do you dislike about the product?
It's little but costly and sometimes it's support is late responsive
What problems is the product solving and how is that benefiting you?
Apart from traditional firewall it also doing ssl inspection and url filtering it also has different modules like antivirus and preloaded application signature which are always updated automatically from palo cloud an also it has Suberin vpn solution
Your perfect firewall solution!
What do you like best about the product?
Panorama can easily handle, manage various firewalls that are deployed in different parts of the world. I am currently working with 5 firewalls centrally managing them from panorama alone. The GUI is super easy, easy to push configurations from panorama itself.
What do you dislike about the product?
The monitoring logs appear faster in individual firewalls as compared to the panorama. When i am troubleshooting with the customers I want to see the logs as quick as possible for which I connect to individual firewalls instead of panorama.
What problems is the product solving and how is that benefiting you?
Acting a perfect product for my perimeter security. The feature set is amazing. Palo alto panorama is leading in the field these days.
Palo Alto Networks Panorama review
What do you like best about the product?
Global protect
Visibile traffic
Threat prevention
Fail safe operation
What do you dislike about the product?
Pricing is quite high but worth it.
Need lot of comprehensive understanding to use .
What problems is the product solving and how is that benefiting you?
Team time threat protection and fail safe operation.
A short note on Panorama
What do you like best about the product?
Panorama is a solution offered by Palo Alto Networks, which manages and controls the Firewall centrally. Below is the best part of Panorama :
1. We can centrally manage and controls the connected Palo Alto Firewall
2. We can collect logs from various connected firewalls to Panorama
3. We can configure the connected firewall centrally by Panorama
What do you dislike about the product?
My overall experience with Panorama is very excellent, but there are some points where there is a chance for improvement :
1. In log collector mode, we can't get GUI access of the firewalls.
2. There is no option of dual-homing where we can use IPv4 & IPv6 together on the management port.
3. There should be some default template and device group that the user can use for the basic configuration of the firewall.
What problems is the product solving and how is that benefiting you?
We are working on a project where we installed multiple firewalls in various locations; now, there is two option :
1. We configure all the Firewalls by physically accessing the device
2. We can configure the management port of all the firewalls, then add the firewall in Panorama and centrally configure all the firewalls from Panorama
I want to go with option number 2. Panorama provides the advantage of controlling and configuring all Firewalls from a central location.
Best network security appliance ever used
What do you like best about the product?
Easy to use and manage all aspects of my network and protection provided was outstanding.
What do you dislike about the product?
I cannot think of anything I disliked. It did take awhile to find some functions but that normal for any new product you use.
What problems is the product solving and how is that benefiting you?
Create the rules to allow traffic to flow efficiently and fast while protecting your data without causing any bottleneck.
even no need any extra additional devices to inspect from L2 to L7 layers
What do you like best about the product?
Wildfire, HA configuration, Content filtering, application filtering, even GUI also, even in NAT/PAT configuration, even policies, deployments and much more deep packet inspection also
What do you dislike about the product?
License need to purchase, if we require more features need to buy individual permissions, Contexting features and HA functional capabilities need to improve, zone based firewall will good thing
What problems is the product solving and how is that benefiting you?
Synchronous between Active and Passive time in HA configuration need to improve more and more, some times even tried correct password but not able to access the management ports
useful in complex environments
What do you like best about the product?
The interface is the same as that of firewalls so if you are comfortable you don't have to learn a new thing but you can already apply your knowledge.
Useful for centralizing logs, configurations and certainly firewal management in general.
What do you dislike about the product?
Understanding how reports work is really hard.
And even when you understand it, you realize that it could be done much better: it would be enough to apply a little theory of the realistic db
What problems is the product solving and how is that benefiting you?
Being a client based on browser and xml configurations, it is possible to manage many things quite quickly
