Prisma Access by Palo Alto Networks Reviews

We primarily use the solution for firewall technologies.

The interface is very good and the feature set is very good. The investigation options, for example, in the data are very useful.

The dependencies of applications sometimes are a bit confusing. All the dependencies you have between applications can be confusing when you fill in things. It's mostly the configuration with the different applications. Extra guidance in using applications and things like that might be helpful.

In terms of features, at the moment, the features we use are all in there. But we don't even use the full feature set at the moment. So I don't really have any need for anything else. For now, there's not really anything missing.

We've had no issue over the whole lifespan with any failures so we didn't have any problem with that. In terms of the scalability, supposedly the model you choose the scale goes up at the beginning. You can buy a firewall device and scalability is dependant on the model.

We used an integrator so we don't need to contact their technical support directly. 

The initial setup is very straightforward. With the standard deployment, I think it took a few days.

We used an integrator for the initial setup. They were very good.

I think that the Palo Alto solution is very good. The licensing in comparison to other competitors is not really an issue. The price is not low but you can't compare with all the premium firewalls in its range. The licensing cost is about 18,000 euros. 

I would recommend the solution. The solution really depends on your budget, of course. If you have a really low budget it's not a low budget solution, so it can really depend on the budget you have. But if you have a budget for enterprise or best of firewalls I think you should take this solution into consideration.

I would rate this solution at 8.5 or 9 out of 10. No product, of course, is totally perfect and a ten is something that I don't think that exists. I think maybe it needs a bit more ease of how applications and dependencies run. Because sometimes you push a firewall rule and you get lots of dependencies so that could be a more manageable thing. Extra guidance in using applications and things like that would be helpful.

The company I work for mainly uses Palo Alto Networks Prisma SaaS to secure our network.

Having them there to support our network and watch in real-time has been a huge benefit.

Its hands-off security and the fact that we don't have to maintain it are the most valuable features. 

They automatically update and they should give us time to fully understand what they're updating so that we can make sure it doesn't impact production. 

It is a very stable solution and I would rate them best in its class.

I believe in Palo Alto Networks' scalability. They will grow as our company grows.

Before we started using this solution, we tried to secure our networks ourselves. That did not work out so we started using another vendor. However, since we switched over to Palo Alto Networks, we've watched them support our network in real-time and it has been a huge benefit.

I wasn't personally involved in the initial setup, but our IT director was. He reported that it was straightforward and easy to configure.

It is difficult to determine a specific ROI as its main function is securing the network. Since installing this solution we haven't had any penetration or malware, so it has definitely kept us protected.

I am not sure about the cost, but my advice to others would be that it is not a mistake going with them. You get what you pay for and I believe they are the best in their class.

We did evaluate other options but only Palo Alto Networks could offer what we were looking for.

They're unique in that they're watching our network. They're just constantly updating and patching, watching for potential threats. As long as they keep on doing that but allow us time to understand what they're updating before they do it, it would help out.

You get what you pay for. They're the best in class. I would rate it a nine out of ten.

The tool's consolidation is pretty quick.

Prisma Access by Palo Alto Networks should consolidate the portals into a single portal. It is slow and takes more than ten seconds to load a page.

I have been working with the product for two years.

I rate Prisma Access by Palo Alto Networks' stability a seven out of ten.

I rate the tool's scalability an eight out of ten. My company has around 10-15 users.

Prisma Access by Palo Alto Networks' technical team responds fast.

Neutral

The tool's deployment difficulty is in the middle.

Prisma Access by Palo Alto Networks has flexible licensing models with different categories. It comes with different features which can be removed if not needed. However, its pricing is high.

I rate Prisma Access by Palo Alto Networks an eight out of ten.

I am an integrator. Prisma SaaS is the most preferred solution among our customers — my customers really like it. Currently, I have three customers that are using this solution. 

Many of my customers work in the financial sector. Prisma SaaS is a top-choice solution for customers who are looking for more flexibility and secure edge points. Prisma Saas has taken big steps to please its customers. It's a cloud-based solution and cloud security is at the edge of the market. The Coronavirus and the pandemic pushed the market to the cloud.

Prisma SaaS is very easy to use; it's common sense — it's the best-in-class.  

Palo Alto is always up to the challenge. It works great with the Oracle Cloud; other SaaS solutions don't always work with various clouds. Prisma Cloud is the best. My customers love it; they all use it in various ways.

I have been using Prisma SaaS for roughly two years. 

Prisma SaaS is very stable. Palo Alto is leading the market in terms of security solutions. Other security providers are slow and a year behind Palo Alto. By the time they catch up, Palo Alto will already be working on new questions. 

This solution is very scalable. I can't think of another solution that functions better. It's very flexible — that's one of the reasons why it's more expensive than similar solutions. 

Palo Alto offers great support to their partners — we're a partner. Their support team is very knowledgeable. 

I am Russian and Ukrainian. Palo Alto provides me with support in English. My customers are not English speakers, therefore, I act as a translator for them when I communicate with support — from English to Russian and then back. 

Installation is simple. There are a few steps involved but with help from customer service and some simple troubleshooting, it's not too bad.  

I have fully installed this solution for three customers. Depending on the project, you'll need anywhere from one to three engineers. Installation and configuration also depend on the cloud that the customer uses. 

Prisma SaaS is more expensive than similar solutions but I think it's worth it. 

If I were to choose a low-cost solution for another vendor, it wouldn't be as effective. With low cost comes low usability and low effectiveness. 

I would highly recommend Prisma SaaS to others. Speaking as an ambassador for Palo Alto and Prisma access, it's the best solution on the market. Overall, on a scale from one to ten, I would give Prisma SaaS a rating of ten. 

The price is my only concern, otherwise, Palo Alto is the best. Still, every year, Palo Alto lowers the price of its solutions. 

We are a solution provider and we have implemented Prism Cloud for a couple of clients.

Our clients use this product for their container security.

The remediation process is easy compared to other platforms.

The interface is user-friendly.

My clients would like to see a more feature-rich product.

We have been using Prisma SaaS for about three months.

Stability-wise, I feel that it is good.

We have not yet tried to expand beyond our integration with one cloud platform. This is something that we may do in the future.

There are three people in my organization who use it.

Technical support from Palo Alto has been responsive and they are good.

We implemented Azure Secure Center before trying this product.

This product is straightforward to set up and the integration is good.

The licensing fees are paid on a yearly basis and for what we get, the price is good. However, the pricing should be better.

We did not have a great deal of time to evaluate other products.

For anybody who is looking for a contained-based solution, I definitely recommend this product.

I would rate this solution an eight out of ten.

We are basically using it for cloud governance. We have AWS as our public cloud service, and we have multiple cloud accounts that we manage. We're using Prisma SaaS for the cloud governance of these accounts. 

It has been very useful so far. We are a part of a small team, and we have almost 20 accounts. Therefore, it is difficult for us to log in to each account and look at cloud trail and other things. It is not possible to log in manually and check each of the vulnerabilities. Prisma has helped us a lot. It shows the alerts in real-time, and we are pretty happy with the service it offers. We now know how to categorize alerts, which ones need immediate attention, and on which ones can we act a bit later.

It has predefined or preconfigured rules, which are getting periodically updated. They are providing continuous improvements and periodically updating all search queries that they are looking for. That is one thing that helps us to stay vigilant and focused. If we query our AWS account for any breaches or vulnerabilities with any of the cloud tests, and it alerts us based on these predefined rules. It also provides an option to configure our own rules, and based on these rules, it can query the cloud trail logs, pull the information, and trigger alerts in real-time. I haven't explored this feature much because there are multiple accounts, and we don't have enough time to explore this feature. 

It also provides multiple integrations. When vulnerabilities or breaches are happening, you should be aware of them immediately. It provides integration with tools such as Slack, PagerDuty so that you can get alerted as soon as the high severity stuff comes up. For example, you have a security group that has allowed public traffic on port 22. As TechOps, you should be aware of this immediately. You cannot scan each machine or look into all security groups to identify it. So, Prisma helps us and alerts us when this kind of high-priority stuff comes up. 

It has different statistics, analytics, and graphs for data. The description of alerts is also pretty good. They describe what are the possible causes for this and what are the solutions. From Prisma Cloud, you can directly go to the AWS account. When you click on an alert, a resource, or a resource ID, it takes you to the AWS console where you need to log in. If you are already logged in, it will take you to that instance directly, and you can fix the issue there. I have found this feature very useful.

We are using the SaaS offering. We use our applications for microservices. We use Twistlock to scan containers, and it displays these results in Prisma, which is a good feature because we can see vulnerabilities with respect to these containers. We can see everything in a very detailed manner. However, when you have different environments for a single application, such as DEV, QA, PROD, and TEST, all these environments run multiple containers, which can lead to a very high number of containers. In such a scenario, it shows you the alerts for all those containers that have vulnerabilities. If you show the results of all the containers that share the same image, it is not going to add any value. Therefore, they should narrow down the alerts based on a container. It should show information for a single container. Otherwise, the person who is looking at the results gets the impression that he has to fix all these issues. This is something that they can improve.

I have been using this solution for two years.

Its stability has been great. 

I have used different tools previously. I have used Evident. Prisma is much better than Evident in terms of the information it provides for alerts. In Evident, they provide a little bit of information about the triggered alert, whereas Prisma provides in-depth details.

It is pretty straightforward. It is a two-step procedure. You need to create the roles and mention the role in the Prisma config. You have to create a role in the corresponding AWS account or Azure account and give that role information while configuring Prisma. So, you need to provide the account ID number, the role that you have created, and a short description of the account that you're using. You also need to enable a couple of other things, such as VPC flow logs and cloud trail for Prisma. If these are not configured, Prisma will still get configured, but it will alert you that you have not configured the flow logs, cloud trail, and all other events. After that, Prisma will immediately start scanning the account. 

It also has a provision for grouping your accounts into a particular group. If you have a project that has multiple accounts, you can group them together as a central group. If all those accounts are managed by a single team, you can enable alert notifications for that single team instead of each account. Everything is pretty good in terms of management activities.

Deployment hardly takes five to ten minutes. It is a SaaS offering. It is a managed service by Palo Alto. You don't have to configure anything at your site for Prisma. You don't have to create any sort of instances or deploy it. You just need to onboard the accounts.

It doesn't require any maintenance. It is managed by our corporate IT team. They have onboarded all the AWS accounts with respect to my organization. These AWS accounts belong to multiple groups of people. 

My department has around 30 people who use this solution as DevOps, and we have the access to the portal. We have enabled read-only access for certain groups so that they can go and look into the alerts and do the necessary things. We have created multiple read-only groups, and we have assigned a set of users to each read-only group.

It has definitely provided an ROI.

We looked into multiple options, and we chose Prisma considering the price and the features it offered.

We started off with AWS three years ago. As the number of accounts grew, we felt the need to use some sort of cloud governance tool because it is not possible for us to log in to each account and look for issues that may impact the organization. That's why we started to use Prisma. We are using multiple solutions from Palo Alto. We use Twistlock for container scanning and things like that.

I have positive feedback about this product. We are happy with this product and the features it offers for the price. 

I would rate Prisma SaaS an eight out of ten.

We are a services organization at the diagnostic stage. We generally see what matches the customer's requirements.

The primary use case of this solution mostly serves as remote access to the applications, and the secure access of applications both for the cloud and for their private data centers.

They are mainly using the zero-trust platform, which is very commonly used right now.

The most valuable feature is the zero-trust part of this solution.

This solution addresses most of our requirements.

I would like to see an increase in third-party integration, in terms of identity and access management, or strong authentication.

I have been working with this solution for the last six months.

This solution is stable we have not had any major issues with it.

This solution is scalable. Our customers are large enterprise companies with anywhere from 4,000 to 10,000 users.

The cloud setup is straightforward, and the onboarding process is much better, but the on-premises initial setup is slightly complex.

Anyone who is considering working with Prisma Access should go ahead and implement it. This is a product that I recommend.

I would rate this solution a nine out of ten.

Most of our customers here in Egypt are looking for how to manage their boxes in simple ways. They want good performance as well.

We sometimes need to apply proactive service on specific applications. We can do it with Palo Alto Networks in just a few clicks. On some projects, we work with other vendors like Juniper or Check Point and we are really facing some obstacles applying policies and proactive service in specific applications. But Palo Alto and its next next-generation firewall offers especially proactive services on a specific type of application, and in applications like tracking features.

The next-gen firewall performance is very good. The solution has very good architecture, software, and interface.

They could improve the proactive service on this application and application tracking in their next release.

Their next release should provide solutions for the mobile environment.

It's very stable. Sometimes after installing the boxes, we leave them for one or two years. We would just touch the box in the case of the customer needing new requirements or changes to the setup. It has a very stable performance because they have very good architecture and software.

We don't usually need technical support. My company is certified to provide the Tier 1 support for Palo Alto here in Egypt. Most of the time we are fielding the cases here in the technical support center in our company. Sometimes we need to escalate to their Tier 2 and Tier 3, and the response is very good. We are talking about just two hours to escalate to the next level of support. They have a very good policy about help features and support centers in our region here and in India.

There are many ways to deploy for the firewall in general. Sometimes we propose a firewall as a perimeter firewall, to protect the internet connections. Sometimes, we propose the firewalls to protect the data center and protecting the institutional traffic between servers. So it depends on the deployment model and the customer requirements.

Depending on the client, it may take time to gather the info and requirements from the customers, so it takes anywhere from two business days to two months to finalize the whole deployment for the Palo Alto Networks.

We have a technical team in our company that handles the implementation.

Palo Alto is not a cheap product. It's expensive because they provide very good technology.

Here in Egypt, there are about 93 system integrators and we have a partnership with Fortinet. We consider our connections because we need to avoid conflict with our partners and conflict with other solutions in our portfolio. We choose Palo Alto and Check Point to avoid conflict with our partners. The market is very crowded with FortiGate technical solutions and partners, so we avoid these.

We had a very good experience with their solutions, especially with their endpoint protections and the next-generation firewalls. We are a local distributor in Palo Alto here in Egypt. So we propose this technology to our customers and our partners here in Egypt.

Palo Alto offers very good technology and hardware. Its very good in this category of solution. You have options of providing or proposing to a customer a small box, or sometimes a mid range. It depends on the model and the deployment.

I would rate this solution 8 out of 10.