We changed our name from IT Central Station: Here's why
Partner Alliance Director at a comms service provider with 1,001-5,000 employees
Real User
Top 20
Good interface and dashboards and very user-friendly
Pros and Cons
  • "The interface is very nice. We generally like the UI the product offers."
  • "The solution could offer better pricing. We'd like it if it could be a bit more affordable for us."

What is our primary use case?

We primarily use the solution for our internal network.

What is most valuable?

The active features on the solution are excellent.

The dashboard and management console are both very user-friendly. Everything is easy to navigate.

The interface is very nice. We generally like the UI the product offers.

What needs improvement?

The ability to check cases could be improved upon. We find that most of the packets we have to directly open with the PA. Until then, it's possible that there cannot be any support.

Take, for example, the XDR. The XDR is the real power to all our solutions from PA, however, when we are using their XDR, we have directly to contact PA. It's like this for the licensing or for any technical issues.

The solution could offer better pricing. We'd like it if it could be a bit more affordable for us.

The solution should offer SD-WAN.

For how long have I used the solution?

We've been using the solution since 2016. It's been quite a few years now, at this point.

What do I think about the stability of the solution?

The solution is quite stable. We don't have bugs or glitches. It doesn't crash or freeze. It's quite good and we've been happy with it.

What do I think about the scalability of the solution?

We haven't tried to expand the solution or to scale it up. It's not an aspect of the solution our company has explored just yet. Therefore, I can't speak to its capabilities in this aspect. I'm not sure what exactly is possible.

How are customer service and technical support?

I don't have any experience with technical support. I've never had to contact them. Other colleagues would be the ones that deal with this aspect. I wouldn't be able to comment on their level of knowledge of responsiveness.

Which solution did I use previously and why did I switch?

We're also using Check Point as a firewall.

How was the initial setup?

The initials setup was pretty straightforward. It was not complex at all for us. We didn't run into any issues during the implementation.

What's my experience with pricing, setup cost, and licensing?

The licensing is paid on a yearly basis. 

The pricing could be better, however, the cost depends on the sizing of the product. The pricing, therefore, varies from company to company for the most part.

What other advice do I have?

We have a partnership with Palo Alto.

We're using the 5000 series of Palo Alto. It's a next-generation firewall. We're currently using the Management Gateway and Virtual Firewall. Also, the Endpoint Solution.

I'd recommend the solution to other organizations. We've been pretty happy with it so far.

I'd rate the solution at an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
VinodPol
Vice President and Head - IT Telecom, Software License Management and Collaboration at a tech services company with 10,001+ employees
Consultant
Top 10
ATP provides superior security, it integrates well using the API, and the support is good
Pros and Cons
  • "The most valuable feature is the security provided by the ATP."
  • "I would like the option to be able to block the traffic from a specific country in a few clicks."

What is our primary use case?

We use this firewall as part of our overall security solution. It is used to protect our perimeter on the internet side. We have the on-premises version installed for our offices and the cloud-based version for our cloud offerings. For our cloud setup, we use both Azure and AWS.

What is most valuable?

The most valuable feature is the security provided by the ATP. It is definitely better than the security provided by other firewalls.

The API is available for integration with tools for automation and AI, which is very good.

What needs improvement?

The interface contains some decentralized tools, so simplifying it would be an improvement.

I would like the option to be able to block the traffic from a specific country in a few clicks.

Some of the implements under artificial intelligence should provide better visibility in terms of my traffic, such as where it originates and where it is going.

Better integration with industry tools would allow me to do quicker automation and reduce my operational costs.

For how long have I used the solution?

We have been using the Palo Alto Next-Generation firewall for almost five years.

What do I think about the scalability of the solution?

This solution is definitely not scalable. Although it is a next-generation firewall, it has its limitations in terms of policies. At one point in time, it becomes the bottleneck, which is something that we have to optimize.

We are using this firewall at between 10 and 15 locations.

How are customer service and technical support?

We have been in contact with technical support and we are satisfied with the service.

Which solution did I use previously and why did I switch?

We also use FortiGate VDOM, although this is for internal protection. The FortiGate interface is simpler in design than Palo Alto.

Prior to Palo Alto, we were using the Cisco ASA platform. When it was through with its lifecycle, we switched. Seeing the next-generation firewall competition in the market, Cisco definitely has a larger portfolio, but it is not as competitive in the security domain. Solutions from Palo Alto and Fortinet are better in this space.

How was the initial setup?

It is easy to install and we did not find the initial setup complex at all. The basic firewall can be set up, and then it takes a little time for the hardening. In total, the deployment can usually be completed within two or three hours.

What's my experience with pricing, setup cost, and licensing?

The pricing is competitive in the market.

What other advice do I have?

Palo Alto NG is definitely a firewall that I recommend for the right size of deployment.

I would rate this solution an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Learn what your peers think about Palo Alto Networks NG Firewalls. Get advice and tips from experienced pros sharing their opinions. Updated: January 2022.
564,599 professionals have used our research since 2012.
Network Security Engineer at a tech services company with 1,001-5,000 employees
Real User
Top 20
A next-generation firewall with useful functions and features
Pros and Cons
  • "I like all the functions and features."
  • "I think automation and machine learning can be improved to make bulk configurations simpler, easier, and faster"

What is our primary use case?

We use it for LAN users, internet access, and more. The NG Firewall has many functions like user control, access control for servers, natural controls based on applications, schedules, ports, RTs, and IPS functionality with antivirus or security functionality. We also use it to control internet access, traffic shaping for bandwidth control, and fraud prevention.

What is most valuable?

I like all the functions and features.

What needs improvement?

I think automation and machine learning can be improved to make bulk configurations simpler, easier, and faster. Scalability can also be better.

For how long have I used the solution?

I've been working with NG Firewalls for six years.

What do I think about the stability of the solution?

Palo Alto Networks NG Firewalls is a stable solution.

What do I think about the scalability of the solution?

I don't think Palo Alto and Fortinet firewalls are scalable. Only Cisco is scalable. For clustering, Cisco activity models like the 4000 model are better. For example, if the firewall is undersized due to expansion, you can cluster and add more appliances to the system.

How are customer service and technical support?

I think Palo Alto has good support. Technical support helped me solve most of my issues very quickly. 

How was the initial setup?

The initial setup depends on the client's infrastructure and the project's scope. 

If it's migration, Palo Alto has a great tool called the Expedition tool. It helps to migrate any firewall to the Palo Alto firewall. This process takes about a day, and it's very simple.

If it's a fresh installation, it depends on the number of policies you need to apply and the number of metrics. You can do it using the command line. You can do it easily and quickly, but it depends on how much the customers prepare. Sometimes the customer has no information to provide, and you struggle to get this information. Sometimes this process can take two to five days or take weeks. 

What about the implementation team?

We implement and maintain Palo Alto Networks NG Firewalls for our customers.

What's my experience with pricing, setup cost, and licensing?

Paul Alto is the most expensive solution in this category. The subscriptions and support are also expensive, but everything is included in the hardware, including the subscriptions.

If a customer is price-sensitive, I will go for Fortinet without a second thought. If customers are willing to invest in their data centers, I might go with Palo Alto and Cisco.

What other advice do I have?

On a scale from one to ten, I would give Palo Alto Networks NG Firewalls a ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Antonio El Khoury
System Engineer at IRIS
Reseller
Top 20
Good web and application filtering, but the traps needs to be improved
Pros and Cons
  • "The most valuable features are web filtering and application filtering."
  • "I would like to see better integration with IoT technologies."

What is our primary use case?

We resell products by Palo Alto and Cisco, and this next-generation firewall by Palo Alto is one of the products that we are familiar with.

What is most valuable?

The most valuable features are web filtering and application filtering.

The IPS functionality is very good.

The performance is good.

What needs improvement?

The price is expensive and should be reduced to make it more competitive.

Information about Palo Alto products is more restricted than some other vendors, such as Cisco, which means that getting training is important.

The traps should be improved.

I would like to see better integration with IoT technologies. Having a unified firewall for OT and IT would be very good.

For how long have I used the solution?

We have been working with Palo Alto for about one year.

What do I think about the stability of the solution?

This is a stable firewall and you don't have a lot of surprises. The performance, throughput, and decryption are all good. It is important to remember that at the end of the day, it depends on the configuration.

For special functionality, you are going to have some exceptions. However, for the well-known functionality, it is stable.

What do I think about the scalability of the solution?

It is scalable in that the performance is good and you don't need a large cluster to operate it.

How are customer service and technical support?

The technical support is good. The team is responsive and they gave us the right information at the right time to solve the difficulties and complexities that we were experiencing.

Which solution did I use previously and why did I switch?

We also sell products by Cisco and there are some differences between them. Palo Alto is more expensive and the performance is better. With Cisco, the documentation is better and it is easier to install. There is a lot more information available for Cisco products.

What's my experience with pricing, setup cost, and licensing?

This is an expensive product, which is why some of our customers don't adopt it.

What other advice do I have?

My advice for anyone who is implementing the Palo Alto Next-Generation firewall is to take the training that is available. This will allow them to better work with the technology.

This is an ambitious company with a good security roadmap. The product is being continuously developed and they are professionals who are focused in this area of technology. It is the firewall that I personally recommend.

I would rate this solution a seven out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Abhirup Sarkar
Director, Middle East, East India & SAARC at a tech company with 51-200 employees
Real User
Top 5Leaderboard
It is fine normally but has issues during peak business hours and needs better load handling, VPN connectors, and support
Pros and Cons
  • "It worked fine normally."
  • "The VPN connectors should be better. We had some challenges in terms of the VPN with Palo Alto Networks NG Firewall, and that's one of the main reasons why we moved to Sophos. Its load handling can also be improved. There were challenges when traffic was high. During peak business hours, it did not function very well. There was a lot of slowness, and the users used to complain, especially when they were connecting from outside. We even reported this to the support team. Their support should also be improved. Technical support was a bit of a concern while using this solution. We didn't get very good support from the Palo Alto team."

What is our primary use case?

We were mainly using it because we had two ISP links, so it was a kind of gateway device. Whenever a link went down, the firewall used to automatically switch over to the secondary link so that the internet connectivity is kind of highly available.

What is most valuable?

It worked fine normally.

What needs improvement?

The VPN connectors should be better. We had some challenges in terms of the VPN with Palo Alto Networks NG Firewall, and that's one of the main reasons why we moved to Sophos.

Its load handling can also be improved. There were challenges when traffic was high. During peak business hours, it did not function very well. There was a lot of slowness, and the users used to complain, especially when they were connecting from outside. We even reported this to the support team.

Their support should also be improved. Technical support was a bit of a concern while using this solution. We didn't get very good support from the Palo Alto team.

For how long have I used the solution?

I have been using this solution for almost two to three years.

What do I think about the stability of the solution?

It was fine normally, but during peak business hours, it used to have challenges. We faced this issue at least two to three times a month.

What do I think about the scalability of the solution?

It is not very scalable. We had around 100 users. We had around ten people in our IT team.

How are customer service and technical support?

Support was a bit of a concern while using this solution. The support that we received was not too great, which caused a lot of issues. They were not very customer friendly.

Which solution did I use previously and why did I switch?

This was the first firewall that we used. 

How was the initial setup?

I didn't do the installation.

What other advice do I have?

I would not recommend this solution. I am sure they will come up with better models to overcome some of the challenges that we faced, but I would definitely not recommend this particular model.

I would rate Palo Alto Networks NG Firewalls a six out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Virendra Vishnu
Vice President of Digital Transformation at Sysnet Global Technologies
Real User
Top 20
Comprehensive, stable, with good services, application layers, and good support
Pros and Cons
  • "The most valuable features of this solution are all of the services it provides."
  • "I would like to see it provide us with intelligent information from the data that it captures, within the same cost."

What is most valuable?

The most valuable features of this solution are all of the services it provides. 

The application layer to the hardware Layer is good, as are all layers it offers.

It's a very comprehensive solution.

What needs improvement?

The features should be built into the system. For example, it generates many logs with a lot of information that can be converted into security and business information and shown to the user. This is a time-consuming job.

I would like to see it provide us with intelligent information from the data that it captures, within the same cost.

For how long have I used the solution?

I have been using this solution for two years.

What do I think about the stability of the solution?

It's a very stable product, so far.

What do I think about the scalability of the solution?

It's very scalable. We have 300 users in our company.

How are customer service and technical support?

Technical support is very good.

Which solution did I use previously and why did I switch?

We have worked with various firewalls such as Check Point, Sophos, Cisco, and some unknown product names as well.

There are several things to consider before recommending a solution. It depends on the business requirements, the budget, and the complexity of the security needs.

I believe that Palo Alto is the best one, then Check Point and Sophos. Those are my three preferences.

Palo Alto and Check Point would be rated an eight out of ten and the others would be a seven out of ten.

How was the initial setup?

The initial setup is complex, but it can be done.

The rollout takes a couple of weeks but you have to keep improving it every day.

What about the implementation team?

Part of the setup was completed by me, with some help externally.

We have a subcontractor for maintenance.

What's my experience with pricing, setup cost, and licensing?

This is an expensive product, as are the others of this type.

What other advice do I have?

Know your business requirements, the features, the ease of use, and know what type of budget you have. These are the types of requirements to know before you use this product.

I would rate this solution an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Security Consultant at a computer software company with 201-500 employees
MSP
An easy setup with good malware protection and excellent technical support
Pros and Cons
  • "The application control portion of the solution is its most valuable aspect."
  • "The price of the solution is very high."

What is our primary use case?

We primarily use the solution as security - as a next-generation firewall.

What is most valuable?

The application control portion of the solution is its most valuable aspect.

The malware protection on offer is excellent.

The initial setup is very easy.

We found the scalability to be quite good.

The stability is excellent.

Technical support is great.

The interface is very user-friendly.

What needs improvement?

Either the application or the vendor needs to provide a more updated list of internet applications.

The price of the solution is very high.

For how long have I used the solution?

We've been dealing with the solution for about three or so years at this point. It's been a while now.

What do I think about the stability of the solution?

The solution has been extremely stable. There are no bugs or glitches. It doesn't crash or freeze. It's very reliable.

What do I think about the scalability of the solution?

We tend to work with enterprise-level organizations.

The scalability is quite good. If a company needs to scale, it can do so with ease.

How are customer service and technical support?

We found the technical support to be quite good. They are helpful, knowledgeable, and responsive. We have no complaints. We are very satisfied with the service they provide to us.

Which solution did I use previously and why did I switch?

We also work with Fortinet.

I'd likely recommend Palo Alto over Fortinet as I find Palo Alto to be more user-friendly. The performance is also very good.

How was the initial setup?

We found the initial setup to be very simple and straightforward. It was not overly complex or difficult. A company shouldn't have any trouble implementing the solution.

The deployment is also very quick. It only takes about ten to 15 minutes or so.

What's my experience with pricing, setup cost, and licensing?

The cost, overall, is pretty expensive.

What other advice do I have?

We are a Palo Alto partner. We are a systems integrator.

I'd recommend the solution. If a company has the budget, I would suggest the product to them. If a customer has a more limited budget, however, I would highly recommend Fortinet as an option.

I'd rate the solution at an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Flag as inappropriate
Network Engineer & Security Specialist at a tech services company with 51-200 employees
Real User
Top 10
A user-friendly solution with useful application control, IPS, and sandboxing features
Pros and Cons
  • "Application control, IPS, and sandboxing towards the cloud are the most valuable features. It is a very user-friendly product with a very easy-to-use interface."
  • "Its stability can be better. Their technical response from the support side can also be better."

What is our primary use case?

It protects from any unwanted traffic or any kind of attack toward your LAN. It just minimizes the risk. It does not completely eradicate the risk.

We have the latest version of this solution.

What is most valuable?

Application control, IPS, and sandboxing towards the cloud are the most valuable features. It is a very user-friendly product with a very easy-to-use interface.

What needs improvement?

Its stability can be better. Their technical response from the support side can also be better.

For how long have I used the solution?

I have been using this solution for a couple of years.

What do I think about the stability of the solution?

It is stable, but its stability can be better.

What do I think about the scalability of the solution?

If you got the product for 100 users and the company has grown to 500 people, this product will not be scalable. You will need another hardware that has more resources.

How are customer service and technical support?

Their technical support is very good, but their technical response can be better. You might face some difficulties due to COVID, but they have been very good most of the time. It also depends on the region from where you are calling.

How was the initial setup?

It is very much straightforward. It is a friendly product, but one should have basic knowledge of networking and security.

The deployment duration and the number of people required vary based on the requirements. A security product doesn't work in a way where you just install it, and it starts functioning. You need to keep improvising and updating it. It is an ongoing process for all security products.

What's my experience with pricing, setup cost, and licensing?

You pay based on the kind of license you require, but comparatively, it is not very expensive.

What other advice do I have?

I would recommend this solution to others. If you have internet, you should definitely have a firewall in your network. When you're exposed to the internet, you're exposed to risks. You definitely need a next-generation firewall in corporate networks.

I would rate Palo Alto Networks NG Firewalls an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Product Categories
Firewalls
Buyer's Guide
Download our free Palo Alto Networks NG Firewalls Report and get advice and tips from experienced pros sharing their opinions.