Palo Alto's NGFWs can do anything but to understand it you have to forget everything you knew before
What do you like best about the product?
It can do anything, and even more.
Defining ACLs with services as "application-default" is a unique and great feature.
Defining ACLs with services as "application-default" is a unique and great feature.
What do you dislike about the product?
As someone who experienced Cisco's and Fortinet's NGFWs way before Palo Alto, i find it non-intuitive.
Configuring functions by combining building blocks is a great designs, but the way these blocks have to be all pre-defined to be able to put together makes a newcomers job way harder than it should be.
It would be much easier if the choice of creating new blocks on the fly while implementing a function would benefit administartors greatly.
Configuring functions by combining building blocks is a great designs, but the way these blocks have to be all pre-defined to be able to put together makes a newcomers job way harder than it should be.
It would be much easier if the choice of creating new blocks on the fly while implementing a function would benefit administartors greatly.
What problems is the product solving and how is that benefiting you?
We need a secure device that is capable of terminating multiple IPSec S2S tunnels and several client ssl vpns, while providing next generation threat defense for the internal subnets.
There are no comments to display