Palo Alto Firewalls

[soulravanger]

Hello,

Does anyone use Palo Alto as there firewall or proxy solution.
If so what are your views on them ?

 

[staunchy20]

Hello,

Does anyone use Palo Alto as there firewall or proxy solution.
If so what are your views on them ?

:wtf: never even heard of them before

Juniper and Fortinet FTW

 

[Burzum]

Go Cisco.

 

[staunchy20]

Go Cisco.

Cisco is hell of a lot more expensive and not necessarily better

 

[syntax]

Go Cisco.

cisco is not even in the utm market. You have to combine products to get something out of them.

Palo alto made a name for themselves a while back because they had decent AD integration. Allowing AD groups and usernames to be in the rulebase, instead of IP address's. So it created identity awareness.

The support here is not great though, and i would probably go fortigate. Fortigates are buggy, but they are getting quite good.

For a straight proxy, use squid.
If you have a microsoft environment, use isa or tmg or whatever they call it nowdays.

If you need further advice, provide more details like
size of company
features required
budget

and i will assist

 

[The_Unbeliever]

Smoothwall. For beginners. Easy to set up, default configuration (half-open) is secure enough for most users' needs.

As a bonus, half-open blocks torrents.

Seasoned veterans may try out Cisco et al.

 

[eCliPSe]

use isa or tmg

NO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Just no. TMG fails even MS doesnt like it.... yeah fortigate (faultigate ) is good option in that range. Another one that my one friends medium sized company used to replace the ISA with as sonicwall.

 

[staunchy20]

NO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Just no. TMG fails even MS doesnt like it.... yeah fortigate (faultigate ) is good option in that range. Another one that my one friends medium sized company used to replace the ISA with as sonicwall.

sonicwall but that is even still better then MS TMG/ISA....

end of the day it comes down is what is your requirements and size of company.

 

[syntax]

NO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Just no. TMG fails even MS doesnt like it.... yeah fortigate (faultigate ) is good option in that range. Another one that my one friends medium sized company used to replace the ISA with as sonicwall.

i have seen tons of tmg installations work as a proxy and average firewall. I mentioned it as many companies have the licensing already as part of a bundle. Depending on the requirements, it can be completely adequate for what the OP wants.

I have also used fortigate for years, it is very well priced and as long as you read the release notes and make sure you understand whats happening when you firmware upgrade its not a real problem. You can a decent utm product with more features than most companies know what to do with,