Palo Alto Networks NG Firewalls Reviews

Name: Palo Alto Networks NG Firewalls
Brand: Palo Alto Networks
Rating: 4 (174 reviews)

4.3 out of 5

174 reviews
96% willing to recommend

1,629 followers

What is Palo Alto Networks NG Firewalls?

Palo Alto Networks NG Firewalls are next-generation firewalls used for security to protect networks from threats and attacks. It is used for perimeter security, data center protection, and managing secure access to environments. Users highlight the NGFW's effectiveness in providing comprehensive security without impacting network performance. Users appreciate its ease of use, particularly in setup and ongoing management, making it a favored choice for businesses looking to secure their cloud environments.

Get the Palo Alto Networks NG Firewalls Buyer's Guide and find out what your peers are saying about Palo Alto Networks NG Firewalls, Fortinet FortiGate, Netgate pfSense and more!

Palo Alto Networks NG Firewalls is the #7 ranked solution in best firewalls. PeerSpot users give Palo Alto Networks NG Firewalls an average rating of 8.6 out of 10. Palo Alto Networks NG Firewalls is most commonly compared to Fortinet FortiGate: Palo Alto Networks NG Firewalls vs Fortinet FortiGate. Palo Alto Networks NG Firewalls is popular among the large enterprise segment, accounting for 58% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Palo Alto Networks NG Firewalls

August 2024

Get the report

Helped 801,394 peers since 2012

Featured reviews

Simon Webster

Security Architect at University Corporation for Atmospheric Research

One of the best features is that Palo Alto NGFW can embed machine learning in the core of the firewall to provide inline, real-time attack prevention. We aren't using the AWS-offered firewalls in the cloud or Azure. When I read over the specs on it, it is more like a traditional firewall where a port is open to an IP address, and that is all you know. Palo Alto can decide if traffic is of a certain kind, regardless of what port and protocol it is using. Then, it can figure that out and I can write my rules based on that. That is a huge functionality and super important to me. The machine learning as well as being able to send stuff to WildFire is pretty important too. We like to get those types of reports and know that we have more protection from zero days than most traditional companies would. The WildFire reporting and Cortex XDR platform have huge infrastructures in the cloud that secures the network against threats. So, we have the potential on the system, specifically for users, where we take care of this since the user is the most dangerous. We get reports back from WildFire on a minute-by-minute basis, rather than a daily or weekly update like I used to with different AV vendors. These features can detect viruses and malware more quickly, which is super important. We have some large data movers that we can't put behind the firewalls. We don't have the largest firewalls, we have the 5200 Series firewalls. Their throughput is about 20 gigs a second, and it is protecting networks that have 100 gig connections. So, we have to be kind of choosy as to what we put behind the firewalls, but for the stuff that we put behind it, the latency really isn't problematic at all. Even though the firewall location is just one aspect, we have three different areas that talk to each other over multiple 240 gig links or 200 gig lengths. The firewall is not hindering that at all.

Read full review

Matt Gahafer

Network Engineer at Samtec, Inc.

The WildFire feature that they offer is very nice to have. The URL filtering that they offer has been a great help to us as well. We have found with the URL filtering that they offer that we are able to categorize what traffic can go outbound to the Internet from our internal network. By doing the URL filtering, we are able to say that we are not allowing gambling, adult content, or certain URL categories that we just don't want to allow. Then, with WildFire, that helps detect any viruses coming inbound or on east-west traffic inside of our network. Palo Alto Networks NG Firewalls embeds machine learning in the core of the firewall to provide inline, real-time attack prevention, which is very important. I got an email saying that there was going to be a new 400 series firewall, and it was talking about the ML and AI features that it is offering. That is very exciting to see coming for all our firewalls. We have the Palo Alto Next-Gen firewalls as well as Cortex XDR for the antivirus side. We are making use of Cortex XDR and Data Lake to correlate the data. We definitely see the benefits of having all that in one unified platform. Some of my colleagues are able to see how certain malware security incidents can correlate to how the virus or malware came into the network, then how it traversed our network based on the XDR information. I can manage 1,000 firewalls from a single pane of glass.

Read full review

Jeff Walton

Senior Network and Security Engineer at a computer software company with 501-1,000 employees

I've used other brands of firewalls in another company, and this company has used some older firewalls. I have used Juniper SRX and NetScreen firewalls. I've also worked with Cisco ASA and SonicWall firewalls. Palo Alto firewalls provide better visibility into the data and excellent logging that enables you to track all threats and activity. They seem to be more resilient to attacks. Other brands get overwhelmed by DDOS attacks, whereas Palo Alto has multiple levels of security that can head off some of those floods. They act almost like an intrusion detection system and some form of DDoS protection. They do a good job if you can't afford a separate product.

Read full review

Palo Alto Networks NG Firewalls video interviews

Watch a video interview with a real Palo Alto Networks NG Firewalls user to learn how the Firewalls solution helped improve their organization. The video includes info about the challenges and benefits of implementing Palo Alto Networks NG Firewalls.

Oct 24, 2022

Makes it easier for tier-two staff to get involved in deeper root cause analysis

reviewer172354

Chief Data Center Operations at a government with 10,001+ employees

Read review

Palo Alto Networks NG Firewalls mindshare

As of September 2024, the mindshare of Palo Alto Networks NG Firewalls in the Firewalls category stands at 3.1%, down from 3.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Firewalls

Key learnings from peers

Valuable Features

Palo Alto Networks NG Firewalls have great features including:

Application symmetries
Embedded machine learning for threat detection and prevention
A unified platform for integrating all security capabilities
Application awareness
Remote access and URL filtering features
Packet inspection
IDM (Identity Management)
Application layer firewalling
GlobalProtect VPN feature
Time-saving benefits
Ease of integration
Wireless cloud features
Prisma log collection
Comprehensive security capabilities
Advanced URL filtering
Performance
Network protection
A zero-delay signature feature
IPS (Intrusion Prevention System)

These features provide security, ease of management, threat prevention, real-time attack detection, integration with other security solutions, and performance optimization.

"The ease of updating the platform was valuable. We could easily update the OS and different modules within the platform. It was a fairly user-friendly and easy-to-use platform."
"Palo Alto Networks NG Firewalls' single-path architecture offers a valuable feature, ensuring stable performance for our customers."
"The Palo Alto Networks NG Firewalls excel in their integration capabilities."

Room for Improvement

Some of the areas for improvement in Palo Alto include:

Price: Many customers feel that the price of Palo Alto Networks NG Firewalls is high and should be more affordable.

Partner support: Customers have mentioned that not all partners are knowledgeable or helpful when it comes to opening a case.

Analysis capabilities: The analysis of ITS ID by Palo Alto Networks NG Firewalls could be improved.

Routing in virtual firewall creation: Customers would like to see support for routing in virtual firewall creation.

Update process: The process of applying updates to Palo Alto Networks NG Firewalls needs improvement.

Technical support: Customers have reported that technical support could respond faster and that the documentation and tech support available need improvement.

Reporting and metrics: Some customers would like to see more reporting and metrics in the solution.

Cloud support: The cloud capabilities of Palo Alto Networks NG could be improved, including providing more visibility of network vulnerabilities.

Unified platform: Customers have mentioned that Palo Alto Networks NG Firewalls do not provide a unified platform that natively integrates all security capabilities.

User interface and ease of use: Some customers feel that the user interface and dashboards could be more user-friendly and easier to understand.

Training and certification: Customers have mentioned that Palo Alto Networks should improve their training and make it more comprehensive, accessible, and cost-effective.

Integration and compatibility: Some customers would like to see better integration with other tools and products, such as Google Chrome and Active Directory.

Performance and scalability: Customers have mentioned that the performance, scalability, and stability of Palo Alto Networks NG Firewalls could be improved.

Machine learning and artificial intelligence: Some customers would like to see more machine learning and AI capabilities in Palo Alto Networks NG Firewalls.

VPN functionality: The VPN functionality of Palo Alto Networks NG Firewalls could be improved.

Customer service and engagement: Customers have mentioned that the customer-facing side, including customer service and support staff, needs improvement.

Firmware and software updates: Some customers have experienced issues with bugs and software updates, and they would like to see more reliable and less buggy releases.

Log management and visibility: Customers have mentioned that log management and visibility could be improved, including capturing the beginning of sessions and providing better insights from logs.

Authentication and access control: Some customers have mentioned issues with user authentication and access control, including double authentication and limited control over VPN connections.

Simplification and usability: Customers have mentioned that Palo Alto Networks NG Firewalls can be complex and would benefit from simplification and more user-friendly features.

Feature enhancements: Some customers feel that Palo Alto Networks should focus on improving reliability and performance rather than adding new features.

"It is probably as good as it can be in terms of being highly sophisticated but having a very small leap to learn the platform and deploy it. I do not have many complaints about the platform."
"I would like Palo Alto Networks to provide a free virtual firewall."
"The integration with AI needs improvement."

ROI

Users have seen a good return on investment, with some even describing it as an ROI that justifies the cost of the solution. Users have reported saving time and being protected from security issues, which contributes to their ROI. Palo Alto has also been praised for its wide range of features and effectiveness in preventing attacks.

While the return on investment may not be immediately apparent, users have highlighted the importance of preventing potential breaches and maintaining business operations.

Pricing

The pricing, setup cost, and licensing for Palo Alto Networks NG Firewalls is generally considered expensive compared to other vendors. The cost of the firewall itself is high, and there are additional costs for features such as GlobalProtect licenses and maintenance plans. The pricing model is seen as complicated and there are extra charges for every feature that is added.

That said, many users believe that the protection and capabilities provided by Palo Alto are worth the price. There are also recommendations to consider multi-year licenses for cost savings.

"I do not have much opinion on that because I have not been involved in the procurement process of the Palo Alto devices with the exception of pay-as-you-go through AWS, but all of this stuff is very expensive, in my opinion."
"Palo Alto Networks NG Firewalls are expensive compared to other solutions."
"Palo Alto can be priced higher than some less capable firewalls. However, they are exceptional when you consider the completeness of the solution and its ability to handle threats. Palo Alto is better than other solutions, which justifies a slightly higher price point. You have other tools that are easier to deploy, reducing your total cost of ownership. The newer models are faster, making the pricing more attractive."

Popular Use Cases

Palo Alto Networks NG Firewalls is used to protect clients from remote threats. These firewalls serve as powerful and important devices for businesses and are used as gateways for data centers and server files, providing reliable and robust security. They are also used for analytics, traffic filtering, IPS, VPN connections, and threat prevention.

Palo Alto Networks NG Firewalls are used to protect end-to-end environments, provide internet gateways, ensure perimeter security, and mitigate risks. They are also utilized for VPN access, application layer security, and gateway security.

These firewalls are deployed in various locations, including corporate offices, branch offices, and data centers. They are used for network security, segmentation, basic routing, and as perimeter firewalls.

Service and Support

Customer service and support from Palo Alto has received mixed reviews with some customers rating the technical support highly and describing it as helpful and others mentioning that the technical support is generally good but can sometimes be difficult to reach the right person.

Sometimes support is provided through distributors, which can lead to delays in getting a solution. Some users highlight the availability and helpfulness of support during specific business hours and others mention challenges with non-English support or support in certain regions.

Deployment

The initial setup for Palo Alto Networks NG Firewalls varies in complexity and duration depending on the customer's requirements and level of experience. Some users find the setup process easy and straightforward, while others find it moderate or complex.

The physical installation of the firewall is generally considered easy. The deployment time can range from a few hours to several weeks, depending on the complexity of the network and the number of rules to be implemented. A basic security setup typically takes a couple of hours, however, configuring advanced features and implementing rules in the cloud environment can take longer. Some users mention that the deployment process was facilitated by the availability of documentation and training materials.

Scalability

The solution is highly scalable and suitable for a wide range of organizations. It is particularly well-suited for midsize companies and distributed networks. The solution can handle traffic from thousands of users and is used by enterprise-sized financial institutions.

It offers a wide range of models to cater to different requirements and can handle a variety of features without compromising performance. The solution is also flexible, allowing for easy addition of nodes and virtual firewalls.

That said, some users have mentioned limitations in scalability, particularly for larger enterprises or in comparison to other vendors.

Stability

Palo Alto Networks NG Firewalls is highly stable and reliable and users consistently mention that they have not encountered any problems with stability and have experienced minimal downtime. It is praised for its stability in various scenarios, including during firmware updates, application ID changes, and OS modifications. Users also appreciate the quick resolution of any issues that arise. The stability of Palo Alto Networks NG Firewalls is considered excellent and industry-leading.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Palo Alto Networks NG Firewalls Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

Manufacturing Company

Government

Educational Organization

University

Healthcare Company

Energy/Utilities Company

Retailer

Comms Service Provider

Construction Company

Insurance Company

Media Company

Non Profit

Real Estate/Law Firm

Hospitality Company

Logistics Company

Outsourcing Company

Wholesaler/Distributor

Transportation Company

Legal Firm

Performing Arts

Consumer Goods Company

Pharma/Biotech Company

Recreational Facilities/Services Company

Engineering Company

Compare Palo Alto Networks NG Firewalls with alternative products

Learn more about Palo Alto Networks NG Firewalls

The firewall provides application control, malware protection, scalability, stability, user-friendly interface, threat hunt capabilities, application visibility and awareness, URL filtering, traffic monitoring, machine learning for attack prevention, a unified platform for all security capabilities, DNS security, VPN, and embedded machine learning. Palo Alto Networks NG Firewalls is easy to manage, reliable, and balances security and network performance well. It also provides complete visibility through logs and alerting.

Palo Alto Networks NG Firewalls Features

Palo Alto Networks NG Firewalls has many valuable key features. Some of the most useful ones include:

Secure Application Enablement (App-ID, User-ID, Content-ID)
Malware Detection and Prevention (threat prevention service, buffer overflows and port scans, anti-malware capabilities, command-and-control protection, and WildFire)
DNS Security (URL filtering, predict and block malicious domains, signature-based protection, extensible cloud-based architecture)
Panorama Security Management (including graphical views and analytics, manage rules and dynamic updates, customizable application command center (ACC), log collection mode, physical or virtual appliance)
Threat Intelligence (high-fidelity threat intelligence, priority alerts, automatic extraction and sharing of prevention indicators, native integration with Palo Alto Networks products)

Palo Alto Networks NG Firewalls Benefits

There are several benefits to implementing Palo Alto Networks NG Firewalls. Some of the biggest advantages the solution offers include:

Dedicated management interface for managing and initial configuration of the device
Regular threat signatures and updates
Import addresses and URL objects from the external server
Configure and manage with REST API integration
Great throughput and connection speed is fair even in high traffic load
Deep visibility into the network activity through Application and Command Control
Easy to manage and very user friendly

Reviews from Real Users

Below are some reviews and helpful feedback written by Palo Alto Networks NG Firewalls users.

A Solutions Architect at a communications service provider says, “The product stability and level of security are second to none in the industry. We value the security of our client's infrastructure so these features are valuable to us. An example of a very valuable feature behind Palo Alto is the application-aware identifiers that help the firewall know what its users are trying to do. It can block specific activities instead of just blocking categories. For example, you can block an application, or all unknown applications.”

PeerSpot user Gerry H., CyberSecurity Network Engineer at a university, mentions that the solution has a “Nice user interface, good support, is stable, and has extensive logging capabilities.” He also adds, “Wildfire has been a very good feature. This solution provides a unified platform that natively integrates all security capabilities, which is 100% important to us. This is a great feature.”

Eric S., Network Analyst at a recreational facilities/services company, states, "With its single pane of glass, it makes monitoring and troubleshooting a bit more homogeneous. We are not looking at multiple platforms and monitoring management tools. It is more efficient from that perspective. It is more of a common monitoring and control system for multiple aspects of what used to be different systems. It provides efficiency and time savings."

Palo Alto Networks NG Firewalls was previously known as Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall.

Product Video

Palo Alto Networks NG Firewalls customers

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments