Palo Alto Networks Panorama Reviews

It is a management tool, and we use it to manage many devices at many locations. 

Templates and the possibility to apply a configuration to many devices at the same time are the most valuable features. We are able to create templates, and we don't need to go to each firewall to make changes. We can make changes in Panorama, and it automatically applies those changes to all those firewalls on which we want to apply the changes. It provides centralized management.

It communicates with remote devices, and sometimes, there is a little bit of delay during its communication with remote devices. There should be real-time communication or updates from the manager to devices.

In Panorama and Palo Alto firewalls, I would like to have a traffic simulator. They have packet capture for troubleshooting, but it would help if they can provide a traffic simulator so that we can simulate the traffic and see the route the traffic is taking and get feedback about whether it is blocked or it is able to pass.

I have been using this solution for maybe a year and a half.

I don't have big deployments. It works and is stable for what I have, and I don't have concerns.

I don't have experience in big deployments. In terms of its users, our network engineers have access to it. We have less than 10 people.

I don't have any experience with their tech support.

Its main competitor is Cisco with the next-generation firewalls and FTD. They are managed by FMC, which is a little bit similar to Panorama and firewalls. There are some similarities, but there are also some different approaches. In general, they both are using the same standards. One major difference is that Palo Alto uses security zones, but Cisco doesn't have this feature, which makes Palo Alto better.

It is not so straightforward, but it is also not complex. It is acceptable.

I would advise others to completely evaluate the requirements and build properly with hierarchical templates. This will make it more scalable and manageable in the future.

I would rate Palo Alto Networks Panorama an eight out of 10.

We have five to six firewalls, and we manage those firewalls with Palo Alto Networks Panorama.

One valuable feature is centralized management. We are able to manage it centrally for two to three remote offices, our head office and our data centers. So, it is very simple to manage.

The second valuable feature is that it stores a lot of the logs. When we require it, we can get the dump, and we can get the logs.

Palo Alto must provide a cloud-based feature or solution.

The initial setup requires expertise and can be a bit complex.

I would like to see the management be a bit more simple than it is currently.

I've been using this solution for around two and a half years.

I find Panorama to be a stable solution.

As for scalability, I tried to add on a Prisma Access plugin, and it was able to take the load.

There are five firewalls behind Panorama, and there are 200-300 users behind these five firewalls.

We have made calls to and raised issues with technical support, and they have been responsive.

The initial setup is a bit complex and requires expertise. Configuring a firewall is a bit easier than configuring multiple firewalls at a time through Panorama. To create device groups and templates, and to manage everything is a bit difficult the first time.

We have a yearly license. The cost is not that high and not that cheap either.

If you have multiple firewalls, like around 10 to 15 firewalls, then you should go for Palo Alto Networks Panorama. If you do not have more than 10 firewalls, I would not recommend that you go with it.

If I were to rate it on a scale from one to ten, I would rate Palo Alto Networks Panorama at seven.

We have firewalls in different locations and we want to manage them centrally to see all the information available. The best way to do this is by using this solution, we are able to monitor, manage, and have visibility of the networks.

The most valuable aspect of this solution is the ability to manage our devices centrally. Additionally, we can monitor the workforce connections, receive reports, and use the backup feature.

There are times when we are backing up a device centrally, we do not get a full backup. We are able to do a full backup of all the devices but when we attempt to backup a single device, it only does the backup of a few presets and not the full configuration.

In the future, they could improve by providing better management of the devices, such as bandwidth. 

I have been using the solution within the last 12 months.

The stability is good.

The solution is scalable. You are able to go through this solution and download from the internet upgrades to push them to the certain devices that need it.

The technical support is good. I receive a resolution from the technical support whenever I have dealt with them.

We sometimes have difficulty with the deployment configuration.

The solution requires a license and the price is higher than competitors. It would be better for them to decrease the price or maximize the discount.

I would recommend this solution to others if you have multiple sites and you want to manage them centrally.

I rate Palo Alto Networks Panorama a nine out of ten.

Our primary use case is to have a centralized console for gateways.

It has shared profiles for all gateways. If I do not have Panorama, I need to create a separate profile for each and every gateway by logging into that particular gateway, but with Panorama, I can create a shared profile and just push it down to each and every gateway connected to it.

In our version, there is no feature to transfer or upload a database of third-party vulnerabilities or signatures so that Panorama can convert them into its own database. This kind of feature might already have come in version 10.

I have been using this solution for around four years.

As of now, I am not seeing any limitation in terms of technicality, deployment, and functionality. In terms of licensing, depending on the number of gateways or serial numbers, I need to purchase the license, which is not really a limitation.

They are good. Whenever there are some issues or bugs and we are not able to trace them out, we reach out to them. They provide the required support.

It was straightforward. The gateway integration with Panorama was also a pretty straightforward configuration for us. 

We deployed it site-wise. For each HAPS, it took us around two hours to take an existing production gateway behind Panorama.

I would recommend this solution to others. It is a good solution. If any environment has multiple gateways, such as 50 or 100 gateways, it is good to have Panorama. If you have only one or two gateways of Palo Alto, you can easily manage them individually without having Panorama.

I would rate Palo Alto Networks Panorama a nine out of ten.

We used Panorama to control all the other modules from Palo Alto and to create the rules.

The threat prevention and layer seven security features were the most used and important for us. All operations are quite good in this solution.

We found a vulnerability where when we have a low flow, like 2.7K, it is not getting fired by the threat prevention. That's something important to improve on. They should have a proxy or some solution to solve the issue.

We also found some issues around decrypting the flow. When we have more flow than expected to decrypt, the performance goes down.

I have used this solution for one year. 

Its stability is fine. It supports the only point used here to decrypt the flows. When we have the right configuration, it has good stability.

We didn't scale up the solution because it requires a load balancer, which is not there. We have around 40,000 users.

They should have a local technical team. I would rate them a seven out of ten.

It wasn't easy, but it also wasn't very difficult. I would say it was medium. The deployment took around three months.

In order to have the right security level, you need to understand how decryption works or is used in Palo Alto. We had to clarify some points with them related to how decryption works.

I would rate Palo Alto Networks Panorama an eight out of ten.

Panorama is very easy, easy to administrate, and easy to control.

It's difficult to implement. 

I have been using Palo Alto Networks Panorama for approximately five years. 

Palo Alto is very stable and is a great global solution.

There are more than 5,000 users in my company.

I would rate their support a ten out of ten. 

I would recommend this solution. 

I would rate it a ten out of ten. 

Our firewall uses IPS and other features. We have some firewall rules using the IPS feature. For the VPN users using the MFA authentication protocol, we are using the SAML protocol.

The application ID or App-ID feature is a good feature for us. We are also using IPS and content inspection features. The firewall can inspect the packages that are passing through my network.

It should have more connection with Threat Intelligence Cloud. They can also include features related to SecOps and automation API.

I have been using Palo Alto Networks Panorama for two years. 

It is awesome in terms of stability.

In terms of scalability, it is complicated because you have to scale up. Its scalability could be better. It would be great if you could scale out by integrating another node, and you are good to go. 

Currently, you have to buy new hardware with more power in terms of CPU and memory. You cannot simply increase the nodes in a cluster. In the last five months, we had to acquire new hardware because we are facing some higher usage in the Palo Alto hardware. We have about 15,000 users.

They provide good support. I would rate them an eight out of ten. 

They can increase the SOA time. When dealing with your case, sometimes, they take time. In the queue, you need to pass through one analyst and then go to the next level, which takes some time.

It was quite straightforward. In terms of technology, it was okay. As our environment is quite complicated, we had to deal with several phases of the implementation because we don't have only one appliance installed. We have implemented four Palo Altos. That's why it took some time, but it was just because of the complexity of our environment, not because of the solution itself. The whole project took one year.

We did some POCs to understand this solution. We had a lot of discussions in terms of the best way to implement this solution in our environment. It took the effort that this kind of solution normally takes.

It is not a cheap solution.

I would advise studying and understanding the best factors for implementing Palo Alto Networks Panorama and creating a roadmap to use all the features because it is not a cheap solution. Understand the possible ways to implement Palo Alto Networks Panorama and create a roadmap that implements all the features.

Palo Alto is constantly improving its solutions. They have been doing a great job and putting a great effort into their products. I would rate Palo Alto Networks Panorama a nine out of ten. We are satisfied with the solution.

This product is part of our overall security solution.

The most valuable feature is the Threat Intelligence.

It is easy to use.

I would like to have better analytics.

The network traffic analysis (NTA) is something that you can add on to get more insight from the traffic passing through the firewall, and it should be included.

We have been working with Panorama for at least five to six years.

Palo Alto Panorama is a stable product.

We did not have any challenges with respect to scalability.

Our team has managed properly so we have not often needed to contact technical support. I would say that they are okay, as we have not had any problems with them.

We are currently using several different firewalls. There is Check Point, Fortinet, Juniper, and Palo Alto. Check Point was the first one that we used.

The initial setup is straightforward and it took a couple of weeks to deploy.

Our in-house team handled the deployment and is responsible for maintenance.

Palo Alto is expensive and there are many cheaper firewalls, but they do not work as well.

My advice to anybody who is looking at this solution is that it is easy and straightforward to use, although more difficult than some to deploy. It is expensive but if you can afford it, then it's worth it.

I would rate this solution an eight out of ten.