Palo Alto Networks URL Filtering with PAN-DB Reviews

We operate in the automotive industry. Internally we work with computing and networking equipment, concentrated on collecting, storing, processing, and distributing enormous amounts of data. Our company deploys this solution for internal web security purposes.

The Palo Alto solution has improved our organization by providing threat protection across a variety of internet connections. Our company also gets valuable insights regarding threat analysis.

One way Palo Alto can improve is by offering sandboxing. I don't know if they currently offer a sandboxing feature together with the firewall or not. They should provide secure sandboxing with the firewalls.

The stability of the solution is good.

The initial setup and configuration was straight-forward.

The solution was deployed by a small team of about five people in our facility. Their roles included end users, application developers, and system administrators, etc.

I would say it will take another three to four years to realize any significant returns on our investment.

I would recommend using this solution as an enterprise-class security, including a firewall and protection for Microsoft Edge. This solution can also be used as a data center or file storage tool for workloads (small or large).

I would rate this tool as a 7 out of 10.

Our primary use case of this solution is for both internal and external firewalls.

It's allowed us to have better visibility and protection from threats.

• Next generation rule set 
• Much more granular

Performance monitoring could use improvement. 

It's incredibly stable. 

Their technical support is very good. 

We were previously using Fortinet Fortigate.

The initial setup was very straightforward. The deployment took five minutes. Our implementation strategy was to build everything out using existing data. 

We implemented with ANM. They were good. 

Pricing and licensing are excellent.

We also looked at Cisco Firepower.

Demo this first and then other competitors and you'll quickly see what's the right fit and which is the superior product. 

I would rate this solution a ten out of ten. 

We are not using it for the general population, just for a select group of users in an isolated subnet. We are using it primarily as a whitelist with little reliance on the PAN-DB.

I cannot say that PAN-DB has provided any significant improvements, since we are using it primarily as a white list.

Being able to manage blacklists and whitelists easily is very useful, especially for internal access and limiting outbound access.

The biggest improvement is the categories per site. For hosting sites like Blogspot, they host sites that should be in different categories, but get lumped together in general. There needs to be more granularity or multiple categorizations.