What do you like best about the product?

Palo Alto Networks VM-Series Virtual Firewall is a fantastic choice for organizations that need enterprise-grade security in virtualized and cloud environments. It applies features like application-aware traffic management, threat protection, and packet analysis with packet flexibility on AWS, Azure, GCP, and Kubernetes environments.

One of its best features is offering consistent security policies for multi-cloud and hybrid deployments. The firewall is highly scalable, is automatable with tools like Terraform, and plays nicely in CI/CD pipelines. Management through Panorama also simplifies operations by providing centralized management over multiple instances.

The built-in WildFire service offers a secondary layer of real-time threat intelligence, helping to defend against new and emerging threats in a timely fashion.

What do you dislike about the product?

While the Palo Alto Networks VM-Series Virtual Firewall is excellent at security, it is not without its drawbacks. The most significant drawback is cost — licensing, subscription, and cloud resource use can easily become expensive, especially at scale. Setup is also extremely complex and usually requires specialist knowledge, so the learning curve is steep for beginners. Additionally, the firewall can be resource-intensive, consuming heavy CPU and memory, and that increases the operating cost in cloud environments. Last, Palo Alto's licensing options and feature sets are difficult to understand, making the onboarding more complicated.

What problems is the product solving and how is that benefiting you?

The Palo Alto Networks VM-Series Virtual Firewall is meeting the critical need to protect cloud and hybrid environments as securely as it is conventionally possible in on-premises data centers. It is confronting challenges like detecting advanced threats, fine-grained traffic control, application visibility, and consistent policy enforcement across multiple cloud platforms. With deep packet inspection, real-time threat intelligence, and automation tool integrations like Terraform, it enables us to securely migrate workloads into the cloud without relaxing security. This has enabled us to accomplish risk reduction, compliance enhancement, and centralized visibility and management for all our network infrastructure irrespective of where the workloads are directed.