IT Central Station is now PeerSpot: Here's why

Palo Alto Networks NG Firewalls Pros

AB
Solutions Architect at a computer software company with 10,001+ employees
This is arguably the best security protection that you can buy.
View full review »
Ali Mohiuddin - PeerSpot reviewer
Security Architect at a educational organization with 201-500 employees
One of the key features for us is product stability. We are a bank, so we require 24/7 service.
View full review »
GH
CyberSecurity Network Engineer at a university with 5,001-10,000 employees
When we put it on the border, it was blocking everything that we were getting ahead of time, and we weren't getting any hits. This includes URL filtering, spam prevention, and anti-virus.
View full review »
Buyer's Guide
Palo Alto Networks NG Firewalls
July 2022
Learn what your peers think about Palo Alto Networks NG Firewalls. Get advice and tips from experienced pros sharing their opinions. Updated: July 2022.
621,703 professionals have used our research since 2012.
Gabriel Franco - PeerSpot reviewer
Senior Service Delivery Engineer at NetData Innovation Center
The first time I came across these firewalls, what surprised me the most was their web user interface. It is complete and gives you a lot of information. You can do 80% of the things related to your network and firewall through the web UI. In some of the other devices, the UI is not as complete. App-ID is also very valuable in customer networks. When you're seeing a lot of traffic in your network, you can see in your web UI which users have the applications that are consuming the most bandwidth. You have a broad context, which is very good.
View full review »
ES
Network Analyst at a recreational facilities/services company with 1,001-5,000 employees
With its single pane of glass, it makes monitoring and troubleshooting a bit more homogeneous. We are not looking at multiple platforms and monitoring management tools. It is more efficient from that perspective. It is more of a common monitoring and control system for multiple aspects of what used to be different systems. It provides efficiency and time savings.
View full review »
OM
Chief Architect at a recruiting/HR firm with 1,001-5,000 employees
Palo Alto NGFW provides a unified platform that natively integrates all security capabilities, which is very useful. This prevents us from having to go to a lot of different systems, and in some cases, many different systems in many different regions, because we are a global company with 60 remote offices around the world in 30 different countries. Its centralized platform is really what we look for in all services, whether it be security or otherwise.
View full review »
Ferenc Balku - PeerSpot reviewer
System Engineer at a tech vendor with 1-10 employees
All the features are valuable, but my main one is the straightforward and well-designed GUI. I'm over 50 and have been in this business since the internet started. I'm not a GUI guy; I prefer using the command line. The product's GUI is excellent, and so is the threat intelligence. It's also straightforward to configure and flexible. The solution even has good networking, such as VLAN and subinterfaces, which is great because, in my experience, if the firewall is good, then the router usually isn't and vice-versa, but Palo Alto has both.
View full review »
Marcin Chudzik - PeerSpot reviewer
Senior Security Engineer at T Systems Poland
The most significant benefit is threat protection. Anti-malware uses signatures, so dynamic analyzers like WildFire are the best way to protect the company. It is a firewall based on application control, user ID, and security policy. We can use it based on user and application ID without a stateless firewall or TCPIP ports.
View full review »
Matt Gahafer - PeerSpot reviewer
Network Engineer at Samtec, Inc.
We have not had to replace hardware routers nor purchase additional hardware. So, that has provided a little bit of an ROI.
View full review »
SG
Network Administrator at a real estate/law firm with 201-500 employees
The machine learning in the core of the firewalls, for inline, real-time attack prevention, is very important to us. With the malware and ransomware threats that are out there, to keep abreast of and ahead of those types of attacks, it's important for our devices to be able to use AI to distinguish when there is malicious traffic or abnormal traffic within our environment, and then notify us.
View full review »

Palo Alto Networks NG Firewalls Cons

AB
Solutions Architect at a computer software company with 10,001+ employees
The only real drawback to this product is that it is expensive. But you get what you pay for and there is no way to put a price on top-notch security.
View full review »
Ali Mohiuddin - PeerSpot reviewer
Security Architect at a educational organization with 201-500 employees
There are some advanced features that we aren't able to use, which include active IP authentication and app ID. We are facing challenges with implementing those two features.
View full review »
GH
CyberSecurity Network Engineer at a university with 5,001-10,000 employees
From a documentation standpoint, there is room for improvement. Even Palo Alto says that their documentation is terrible.
View full review »
Buyer's Guide
Palo Alto Networks NG Firewalls
July 2022
Learn what your peers think about Palo Alto Networks NG Firewalls. Get advice and tips from experienced pros sharing their opinions. Updated: July 2022.
621,703 professionals have used our research since 2012.
Gabriel Franco - PeerSpot reviewer
Senior Service Delivery Engineer at NetData Innovation Center
Palo Alto can do a little bit better when it comes to the User-ID part. I've been facing problems related to double authentication. You have a computer user, but you also have a VPN user, and when you do a single sign-on to another page, these logs can sometimes generate a problem notification. It doesn't happen a lot, but in some networks, it could be a problem. It would be very helpful to have the ability to restrict the connections that you can have in your VPN. For example, if you have the credentials, you can connect with the same user account from different computers or devices. If you have the domain information, you can connect from different devices. That's a problem that they need to address and resolve. They should ensure that at any moment, only one person is connected through a specific user account.
View full review »
ES
Network Analyst at a recreational facilities/services company with 1,001-5,000 employees
Once in a while, they have new features being released that can be buggy. My criticism is more general to all sorts of network or security devices. In general, everybody is releasing less-tested software. Then, it usually ends up that the first few customers who get a new release need to end up troubleshooting it.
View full review »
OM
Chief Architect at a recruiting/HR firm with 1,001-5,000 employees
When we looked at it originally, we needed to host the Panorama environment ourselves. I would prefer it if we could take this as a service. It might be that it is available, but for some reason we didn't choose it. The downsides of hosting are that we need to feed and water the machines. We are trying to move to a more SaaS environment where we have less things in our data centers, whether they be in our cloud data centers or physical data centers, which can reduce our physical data center footprint.
View full review »
Ferenc Balku - PeerSpot reviewer
System Engineer at a tech vendor with 1-10 employees
The solution's VPN, called GlobalProtect, could be improved as I've had a few issues with that.
View full review »
Marcin Chudzik - PeerSpot reviewer
Senior Security Engineer at T Systems Poland
Unfortunately, Palo Alto Networks products aren't cheap, but you have to pay the price for good security technology. I don't know the exact price, but it's about $10,000 to $15,000 without a subscription. Cisco is priced similarly. FortiGate is inexpensive in Poland, so a lot of customers prefer that.
View full review »
Matt Gahafer - PeerSpot reviewer
Network Engineer at Samtec, Inc.
We have a lot of the older firewall models, i.e., the PA-220. It seems that with newer operating systems the PA-220 is becoming slower than when I first bought it. It is not really an issue for users who are passing traffic through the firewall, but more from the management access of it.
View full review »
SG
Network Administrator at a real estate/law firm with 201-500 employees
The SD-WAN product is fairly new. They could probably improve that in terms of customizing it and making the configuration a little bit easier.
View full review »
Buyer's Guide
Palo Alto Networks NG Firewalls
July 2022
Learn what your peers think about Palo Alto Networks NG Firewalls. Get advice and tips from experienced pros sharing their opinions. Updated: July 2022.
621,703 professionals have used our research since 2012.