IT Central Station is now PeerSpot: Here's why
Security Solution Engineer at a computer software company with 501-1,000 employees
Real User
Easy to deploy and manage devices, quite stable, but is expensive and not user-friendly
Pros and Cons
  • "The management and the deployment features are most valuable. We can easily deploy and manage the devices. We can do fast deployments without moving from our office and by just providing a short description to the end-user about how to install the physical device."
  • "It is very hard to understand the platform. It is not easy and user-friendly. You need a lot of experience to use Panorama. It is very complex, and you must know exactly what to do. I would like to have a more user-friendly product. FortiManager is comparatively very easy to use. It would be good if Panorama improves in terms of user-friendliness. It is also harder to use than Palo Alto Firewalls."

What is our primary use case?

I worked for a system integrator, and some of our clients  asked us to manage their firewalls. They have a large number of sites all around the world. One of them has got 25 sites, and the other one has got 13 sites. So, we deployed Panorama in our DataCenter, and we managed the gateway for our customers with Panorama.

What is most valuable?

The management and the deployment features are most valuable. We can easily deploy and manage the devices. We can do fast deployments without moving from our office and by just providing a short description to the end-user about how to install the physical device.
With Panorama you are able to manage a large number of firewall and to simplify change and incident management process .
With Panorama, firewall rules may be  managed mixing preconfigured templates (common on all/some firewalls) and more specific rules
From Panorama Dashboard you have an immediate view about the status of all the firewall deployed. 

What needs improvement?

It is quite hard to understand the platform. It is not easy and user-friendly. You need some experience and the proper technincal training  to use Panorama without risks.
It is very complex, and you must know exactly what to do.
The bigger problem is that Panorama Dashboard Logic is quite different than PanOS firewall Dashboard.
The second problem is that you dont have wizards or template .You need to build your enviroment from zero on your own incurring in possibile configuration or logic errors.

I would like to have a more user-friendly and simple to use product .
For istance FortiManager is comparatively much more easier  to use and understand.
Palo Alto Firewall too are Really easier to manage than Panorama. 

Panorama Logging and reporting features are quite good ( like PaloAlto Firewall) but not the best on the market ( for istance Checkpoint SmartEvent is still far better) 

For how long have I used the solution?

I have been using this solution for two years.

Buyer's Guide
Palo Alto Networks Panorama
July 2022
Learn what your peers think about Palo Alto Networks Panorama. Get advice and tips from experienced pros sharing their opinions. Updated: July 2022.
621,703 professionals have used our research since 2012.

What do I think about the stability of the solution?

It is quite stable based on my experience. I did not have any big issues regarding the operating system.

What do I think about the scalability of the solution?

It is quite easy to scale with Panorama. It is more for a medium or big enterprise. To manage an environment from Panorama, you must have people with high skills. Its cost is not suitable for a couple of gateways only.

How are customer service and support?

We have three levels of Palo Alto support. I also have email support in the Italian language. They provide very good support levels.

How was the initial setup?

I did not install Panorama from scratch. Palo Alto Gateway is quite easy to deploy and has a decent setup.

In terms of maintenance, it doesn't require too much effort. We usually check the best practices from their website. We update the Panorama server according to the best practices and the compatibility with the gateway.

What's my experience with pricing, setup cost, and licensing?

Panorama price is quite high (comparing with other Firewall management suites) 

What other advice do I have?

We have used it in the past for logging and reporting, but now we have another third-party product to manage the logs.

I would recommend Panorama for managing a large-sized or medium-sized network. To manage a center with a lot of devices or cloud services, Panorama is useful. 

I would rate Palo Alto Networks Panorama a seven out of 10.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
PeerSpot user
Swapnil Talegaonkar - PeerSpot reviewer
Technology consultant at a tech services company with 501-1,000 employees
Real User
Top 5Leaderboard
Superior firewall management, plenty of features, and scalable
Pros and Cons
  • "The most valuable features of this solution are that it works better than a normal firewall, easy to explorer all of its features, and it has the Log Collector mode. This mode allows us to store our logs for two years in the solution itself."
  • "There is a need to improve the upgrade process. When we are upgrading the solution we are facing some issues with Elasticsearch services. Every time we upgrade it takes a long time to become stable."

What is our primary use case?

We are using this solution to manage our two perimeter devices. We have two firewall setups; one perimeter and one internal firewall and we have two different Panorama for managing both set of firewall.

What is most valuable?

The most valuable features of this solution are that its look & feel is exactly same as normal firewall, easy to explorer all of its features, also it has the Log Collector mode. This mode allows us to store our logs for two years in the solution itself. 

What needs improvement?

There is a need to improve the upgrade process. When we are upgrading the solution we are facing some issues with Elasticsearch services. Every time we upgrade it takes a long time to become stable.

In an upcoming release, I recommend having policy segmentation because that will help Panorama. There is no policy segmentation as you would find in Check Point. 

For how long have I used the solution?

I have been using this solution for two years.

What do I think about the stability of the solution?

The stability needs some improvement during some operations.

What do I think about the scalability of the solution?

The solution is scalable. We have the solution on a VM and we only need to increase our storage to scale. One of my clients is a bank and they have approximately 2,000 employees using the solution.

We are using this solution on a daily basis. The operation team is using it for log search, deploying policies, and a few other operations. I do not think we need a second instance of this solution running because security features are working with the firewall and not on Panorama.

How are customer service and technical support?

The technical support is very good. Whenever we face an issue the technical support team helps a lot.

How was the initial setup?

In the initial setup in our case, we are using the single setup firewall with panorama. the usual templates, stacks, and devices group is works good with multiple firewalls. But with single firewall setup This whole process has become very complicated and very confusing. There should be some provision for a single setup firewall to avoid the template stacks and templates. 

What's my experience with pricing, setup cost, and licensing?

The solution is priced well and there is a license for this solution that we pay annually for. 

Which other solutions did I evaluate?

I previously evaluated Check Point and Fortinet. Check Point security management server is altogether a different GUI & cannot work without SMS and Fortinet is also different because FortiAnalyzer is only used for log collection.

This solution features I would recommend over Fortinet and Check Point because it has the same look as a firewall and there is no more difference between firewall and Panorama. We can deploy policy & other configurations without panorama as well. 

What other advice do I have?

I would advise those wanting to implement this solution that is pretty straightforward, and Palo Alto has written very detailed documentation on their website. If you go through that it is very easy to deploy. You will not run into any issues if you follow the documentation.

I recommend this solution to others.

I rate Palo Alto Networks Panorama a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Buyer's Guide
Palo Alto Networks Panorama
July 2022
Learn what your peers think about Palo Alto Networks Panorama. Get advice and tips from experienced pros sharing their opinions. Updated: July 2022.
621,703 professionals have used our research since 2012.
Network Engineer at a tech vendor with 10,001+ employees
Real User
Has good stability and a straightforward setup
Pros and Cons
  • "Palo Alto Networks Panorama has good stability. I didn't see any instability from it, and its initial setup was straightforward."
  • "My company's getting whatever it needs from Palo Alto Networks Panorama, but in the cloud, there's an issue with CPU management, and that's an area for improvement. Though the normal data traffic doesn't go through the management interface, whenever there's an increase in the throughput, CPU management becomes high. If you increase the load, CPU management spikes, and it's what needs to be taken care of in Palo Alto Networks Panorama."

How has it helped my organization?

Palo Alto Networks Panorama has improved the way my company works, which is why my company uses it.

What is most valuable?

What I like about Palo Alto Networks Panorama is that it's stable and setting it up isn't complex.

What needs improvement?

My company's getting whatever it needs from Palo Alto Networks Panorama, but in the cloud, there's an issue with CPU management, and that's an area for improvement. Though the normal data traffic doesn't go through the management interface, whenever there's an increase in the throughput, CPU management becomes high. If you increase the load, CPU management spikes, and it's what needs to be taken care of in Palo Alto Networks Panorama.

For how long have I used the solution?

I've been using Palo Alto Networks Panorama for the past four years.

What do I think about the stability of the solution?

Palo Alto Networks Panorama has good stability. I didn't see any instability from it, though at times, the CPU goes high in terms of usage, and that's what you need to take care of.

What do I think about the scalability of the solution?

Palo Alto Networks Panorama is a scalable solution.

How are customer service and support?

Technical support for Palo Alto Networks Panorama, in my experience, was initially good, but now the wait time is longer. My company has a dedicated account manager, so it gets support, but in general, the response time is longer.

How was the initial setup?

The initial setup for Palo Alto Networks Panorama was straightforward. I didn't see any complexity. It was a normal firewall configuration. I haven't done any new deployment of Palo Alto Networks Panorama, but in the cloud environment, it didn't take much time for me, and you can complete a setup within one to two hours.

What about the implementation team?

We implemented Palo Alto Networks Panorama through a vendor team by Palo Alto, specifically for the on-premises deployment, to migrate from Check Point to Palo Alto Networks Panorama, but in the cloud environment, as it is a VM, we did it ourselves.

What other advice do I have?

Palo Alto Networks Panorama is deployed everywhere, particularly in the public cloud and on-premises as well.

My company is just a customer of Palo Alto Networks Panorama, but because it's a big company, it has a dedicated account manager in Palo Alto.

My company uses the solution extensively. There are more than six Panoramas. Forty to fifty firewalls are managed currently through Palo Alto Networks Panorama.

I'm rating Palo Alto Networks Panorama nine out of ten. It's a good solution. What would make my rating a ten is if the CPU management spike issue was addressed and if the delayed response of technical support was addressed as well. A few years ago, the response time from support was immediate, but now, there's a delay with the response, even though my company has a dedicated account manager from Palo Alto Networks Panorama, and this makes you think about a midsized company with no account manager in terms of how much time it gets a response from Palo Alto support.

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
PeerSpot user
Network Implementation Engineer at a comms service provider with 501-1,000 employees
MSP
Great centralized management, easy to set up, and scales well
Pros and Cons
  • "The solution, especially the latest versions, is very stable."
  • "The customer support needs to be better."

What is our primary use case?

Panorama is one centralized management server through which all our devices are protected. It's a security management tool.

What is most valuable?

One of the most valuable aspects for us is the fact that all of the policy management and configuration management is able to happen right from the centralized management. This makes everything much easier.

The initial setup is pretty simple.

The solution, especially the latest versions, is very stable.

The product can scale well.

What needs improvement?

The customer support needs to be better. Sometimes we need to wait for hours before getting someone from the product team or someone from the Palo Alto customer support to get on a call if we are facing some issue. They could reduce the wait times.

For how long have I used the solution?

I've been using Palo Alto for about a year and a half.

What do I think about the stability of the solution?

The solution is quite stable. The more high-end devices you take, the more stability. If you're using a little old model of firewalls, then there are issues with regard to stability. In such cases, Palo Alto would likely recommend you upgrade to the latest hardware. The latest hardware is really very stable.

What do I think about the scalability of the solution?

The solution is quite scalable. 

How are customer service and technical support?

Technical support is quite slow. They are not quick to respond.

How was the initial setup?

The initial setup is easy. It is not that complex. There are articles and documentation, readily available on the Palo Alto website, the Palo Alto Portal, which can help you figure out how to configure the device.

Our deployment strategy for any new customer is to directly implement it in a testing phase. In a testing phase, we try to see if all the requirements that the customer wants to see if we will be facing any challenges. We want to initially try and replicate that in a lab scenario. That way, if there are any issues, we can get back to the team at Palo Alto and ask them questions. If it works, then the customer goes into production.

We don't have any dedicated person for maintaining anything. The antivirus, everything, can be directly, automatically updated on the firewall. That is not an issue. On top of that, if a particular device is getting into trouble then we get the NMS alerts for that device. In such scenarios, once we have a device failure at a particular site, we can have that device replaced. We can open a case with the vendor and once we give them a particular serial number or the VM instance, we can initiate an RML to replace that device with a new device. It takes a couple of days for that to happen.

What's my experience with pricing, setup cost, and licensing?

We have another team that handles licensing. In operations, we do not have any visibility with regard to cost.

What other advice do I have?

I'd rate the solution at a nine out of ten. We've been very happy with its capabilities.

Disclosure: My company has a business relationship with this vendor other than being a customer: Implementer
PeerSpot user
Sr. Director, Security and Architecture at a pharma/biotech company with 11-50 employees
Real User
Top 20
Provides visibility into what is going on, 100% stable, and infinitely scalable
Pros and Cons
  • "Panorama enables you to provision all your firewalls and other things as a cluster. It is quite useful for that."
  • "Its UI and usability could be improved. The way the UI looks could be improved to make it a little bit more intuitive. Other than that, it is a pretty simple product."

What is our primary use case?

It is essentially a lightweight SIEM, so it'll detect and flag any sort of vulnerabilities or attacks on your network.

I've been using the most recent version of it. In terms of deployment, it is on the cloud. It is a private cloud. It is Palo Alto's Cloud, and I think they host on AWS.

How has it helped my organization?

It centralized the management of our Palo Alto systems. It provided more visibility into what was going on. It sort of gave a single painted glass picture instead of 25 different pictures.

What is most valuable?

Panorama enables you to provision all your firewalls and other things as a cluster. It is quite useful for that.

It is a very simple product. It does what it is designed to do.

What needs improvement?

Its UI and usability could be improved. The way the UI looks could be improved to make it a little bit more intuitive. Other than that, it is a pretty simple product.

For how long have I used the solution?

I have been using this solution for four or five years.

What do I think about the stability of the solution?

It is 100% stable.

What do I think about the scalability of the solution?

It is highly scalable. It is pretty much infinite.

In terms of the users, the Firewall Management team and the Security team use it. There are probably only 10 people who really have access to it. They also take care of its maintenance.

It is being used extensively at the moment. Its usage will just kind of naturally grow over time. As we deploy more devices, we'll put them into Panorama for management.

How are customer service and support?

Palo Alto is very good at technical support. They're a 10 out of 10. They're very good.

Which solution did I use previously and why did I switch?

We used FireMon in the past. It does a little bit more, but it is not as tightly integrated as the Palo Alto solution.

How was the initial setup?

It was very straightforward and very simple. I helped them roll it out and watch them spin it up. I didn't do anything configuration-wise, but I think it took us 10 minutes. It was that fast.

What about the implementation team?

It was done in-house.

What's my experience with pricing, setup cost, and licensing?

Its licensing is yearly and multi-yearly. It is not expensive.

What other advice do I have?

Be prepared for simple. It is not complicated. You're up and running in 10 minutes, so you'll be surprised.

It is only for Palo Alto products, so you can't scale it to anything else. It does what it is designed to do, which is to manage Palo Alto firewalls and other Palo Alto equipment.

I would rate it a 10 out of 10. It is a pretty simple platform; it is just the UI that can be made a little more intuitive. That's it.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Senior System Engineer at a financial services firm with 10,001+ employees
Real User
Top 10
An easy initial setup with good policies and good scalability
Pros and Cons
  • "The firewall rules and policies are the most valuable aspects of the solution."
  • "The product could offer more integration with other solutions."

What is our primary use case?

We primarily use the solution in order to protect our perimeter. It's used for security purposes.

How has it helped my organization?

The product is set up so that we can handle more than one firewall. We can handle a bunch all in one application. It makes it simpler that everything is more centralized.

What is most valuable?

The firewall rules and policies are the most valuable aspects of the solution.

The interface and dashboard are quite good. 

We haven't had any issues with the management of the solution.

The product offers good technical support and documentation.

We haven't had issues with scalability or performance. It's been very stable over the years.

I don't recall the initial setup giving us any troubles.

What needs improvement?

I haven't come across any issues with the product. Overall, it's been very positive.

I don't recall missing any features. It's a fairly complete solution.

The product could offer more integration with other solutions.

For how long have I used the solution?

I've been dealing with the solution for five or six years at this point. It's been a while. It's not new to our company.

What do I think about the stability of the solution?

The solution is quite stable. There are no glitches or bugs. It doesn't crash or freeze. the performance is reliable.

What do I think about the scalability of the solution?

We are currently in a hardware upgrade and I hope that it's very seamless. It is scalable; we checked the hardware and I do not expect to upgrade again due to the current hardware performance being really good.

How are customer service and technical support?

We've connected with technical support a few times. It was normal, much like our experience with other vendors. They are average and provide the support we require. We are satisfied so far with their level of attention.

Which solution did I use previously and why did I switch?

I also have experience with various firewalls, such as Checkpoint, Palo Alto, and Cisco.

How was the initial setup?

The initial setup was not handled by myself. It was handled by a colleague. However, I do not recall them struggling with the implementation. The setup seemed to be quite straightforward. It's not overly complex, from what I witnessed.

What about the implementation team?

My colleague handled the implementation.

What's my experience with pricing, setup cost, and licensing?

I can't directly speak to the price of the solution. It's not an aspect of the solution I handle.

What other advice do I have?

We are just customers and end-users. We don't have a business relationship with the organization.

I'd rate the solution at a ten out of ten. It's been very useful for our organization and we've been quite happy with its capabilities.

It is a next-generation firewall, and therefore you can use it for a lot of requirements, and lots of solutions. I would highly recommend it.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Leandro Soares Costa - PeerSpot reviewer
Cloud Security Architect at a computer software company with 5,001-10,000 employees
Real User
Top 5
Awesome stability and comes with useful features like IPS, App-ID, and content inspection
Pros and Cons
  • "The application ID or App-ID feature is a good feature for us. We are also using IPS and content inspection features. The firewall can inspect the packages that are passing through my network."
  • "It should have more connection with Threat Intelligence Cloud. They can also include features related to SecOps and automation API."

What is our primary use case?

Our firewall uses IPS and other features. We have some firewall rules using the IPS feature. For the VPN users using the MFA authentication protocol, we are using the SAML protocol.

What is most valuable?

The application ID or App-ID feature is a good feature for us. We are also using IPS and content inspection features. The firewall can inspect the packages that are passing through my network.

What needs improvement?

It should have more connection with Threat Intelligence Cloud. They can also include features related to SecOps and automation API.

For how long have I used the solution?

I have been using Palo Alto Networks Panorama for two years. 

What do I think about the stability of the solution?

It is awesome in terms of stability.

What do I think about the scalability of the solution?

In terms of scalability, it is complicated because you have to scale up. Its scalability could be better. It would be great if you could scale out by integrating another node, and you are good to go. 

Currently, you have to buy new hardware with more power in terms of CPU and memory. You cannot simply increase the nodes in a cluster. In the last five months, we had to acquire new hardware because we are facing some higher usage in the Palo Alto hardware. We have about 15,000 users.

How are customer service and technical support?

They provide good support. I would rate them an eight out of ten. 

They can increase the SOA time. When dealing with your case, sometimes, they take time. In the queue, you need to pass through one analyst and then go to the next level, which takes some time.

How was the initial setup?

It was quite straightforward. In terms of technology, it was okay. As our environment is quite complicated, we had to deal with several phases of the implementation because we don't have only one appliance installed. We have implemented four Palo Altos. That's why it took some time, but it was just because of the complexity of our environment, not because of the solution itself. The whole project took one year.

We did some POCs to understand this solution. We had a lot of discussions in terms of the best way to implement this solution in our environment. It took the effort that this kind of solution normally takes.

What's my experience with pricing, setup cost, and licensing?

It is not a cheap solution.

What other advice do I have?

I would advise studying and understanding the best factors for implementing Palo Alto Networks Panorama and creating a roadmap to use all the features because it is not a cheap solution. Understand the possible ways to implement Palo Alto Networks Panorama and create a roadmap that implements all the features.

Palo Alto is constantly improving its solutions. They have been doing a great job and putting a great effort into their products. I would rate Palo Alto Networks Panorama a nine out of ten. We are satisfied with the solution.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Luke Wainwright - PeerSpot reviewer
Cybersecurity Engineer at Networks Unlimited Africa
Real User
Top 5Leaderboard
Secure, performs well, and is simple to use
Pros and Cons
  • "Everything about the reporting and everything about Palo Alto Networks Panorama is good."
  • "There is always room for improvement in anything."

What is our primary use case?

We use Palo Alto firewalls, for our perimeter security. It is our perimeter security product, which we use as our perimeter security firewall. As a firewall should, protect us and our organization at the perimeter.

What is most valuable?

It's an excellent product. It's doing its job, and we like it. The ease of use is quite nice. Everything about the reporting and everything about Palo Alto Networks Panorama is good.

What needs improvement?

Everyone, I suppose, would like the price to be improved. Price is always a good thing to change.

There is always room for improvement in anything. But I couldn't really comment on that off the top of my head.

In terms of updates, I believe everything is in order. That is not an issue for me.

For how long have I used the solution?

I have been working with Palo Alto Networks Panorama for five months.

What do I think about the stability of the solution?

Palo Alto Networks Panorama is 100 percent stable. We have it running in HA status, obviously, for failover, but It's extremely stable. There are no complaints.

What do I think about the scalability of the solution?

Palo Alto Networks Panorama is scalable.

We have a large organization. We are a retail company, with approximately 4000 users who are protected by this firewall.

How are customer service and support?

I have never contacted technical support personally. We do outsource our support to another company. When there are issues, they are responsible for resolving them.

Which solution did I use previously and why did I switch?

We use their product called, Cortex XDR.

We use an onboard, a custom CRM platform that we created in-house. At the moment, we do not use a commercially available one.

I have been with my current company for five months. And we were using checkpoints as our perimeter security when I first joined, and we moved to the Palo Alto Panorama platform. And it's a fantastic product; we love it. As an organization, it has been very well written.

How was the initial setup?

I wasn't involved in the installation because, as I previously stated, I just started working for my current organization. 

I wasn't directly involved in the transition, but it went smoothly.

What's my experience with pricing, setup cost, and licensing?

I couldn't comment on price as I am not really involved in the commercial side of the business.

I am not aware of the licensing fees.

Which other solutions did I evaluate?

I am aware of XSOAR, but we haven't had any dealing with it yet. We are on a journey to potentially onboard that within our environment. But, at this point, we don't have, the budget for it.

What other advice do I have?

It's doing its job for us. Since we cut it out, from Checkpoint to Palo Alto, everything has improved noticeably. I recommend it.

I would rate Palo Alto Networks Panorama a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
PeerSpot user
Buyer's Guide
Download our free Palo Alto Networks Panorama Report and get advice and tips from experienced pros sharing their opinions.
Updated: July 2022
Buyer's Guide
Download our free Palo Alto Networks Panorama Report and get advice and tips from experienced pros sharing their opinions.