Prisma Access by Palo Alto Networks Reviews

My clients used Prisma Access essentially for security in the cloud. We integrated their SD-WAN into Prisma Access.

Palo Alto Firewall is one of the best firewalls in the world. It's very clear about the policies and all the security features they have. Also, the user integration works very well in Palo Alto. The WiFi, anti-threat, web filtering features and IT/OT separation are also good.

Though the monitoring is fine, the solution should improve its application graphs and interface monitoring. Additionally, the pricing could be improved.

I worked as a consultant on Prisma Access for one year for one integration project.

The product is very stable.

The product is scalable. Our clients are medium-sized businesses. There are 1,500 users worldwide.

The support is good. I rate the support an eight or nine out of ten.

Positive

The solution is not easy to implement. The first setup is a bit more difficult, but it gets better. The solution is easy to maintain.

A global partner did the setup.

I'm still comparing, but the solution is quite expensive.

I recommend people try the product out because it's really good. I rate Prisma Access an eight out of ten.

We are a services organization at the diagnostic stage. We generally see what matches the customer's requirements.

The primary use case of this solution mostly serves as remote access to the applications, and the secure access of applications both for the cloud and for their private data centers.

They are mainly using the zero-trust platform, which is very commonly used right now.

The most valuable feature is the zero-trust part of this solution.

This solution addresses most of our requirements.

I would like to see an increase in third-party integration, in terms of identity and access management, or strong authentication.

I have been working with this solution for the last six months.

This solution is stable we have not had any major issues with it.

This solution is scalable. Our customers are large enterprise companies with anywhere from 4,000 to 10,000 users.

The cloud setup is straightforward, and the onboarding process is much better, but the on-premises initial setup is slightly complex.

Anyone who is considering working with Prisma Access should go ahead and implement it. This is a product that I recommend.

I would rate this solution a nine out of ten.

Most of our customers here in Egypt are looking for how to manage their boxes in simple ways. They want good performance as well.

We sometimes need to apply proactive service on specific applications. We can do it with Palo Alto Networks in just a few clicks. On some projects, we work with other vendors like Juniper or Check Point and we are really facing some obstacles applying policies and proactive service in specific applications. But Palo Alto and its next next-generation firewall offers especially proactive services on a specific type of application, and in applications like tracking features.

The next-gen firewall performance is very good. The solution has very good architecture, software, and interface.

They could improve the proactive service on this application and application tracking in their next release.

Their next release should provide solutions for the mobile environment.

It's very stable. Sometimes after installing the boxes, we leave them for one or two years. We would just touch the box in the case of the customer needing new requirements or changes to the setup. It has a very stable performance because they have very good architecture and software.

We don't usually need technical support. My company is certified to provide the Tier 1 support for Palo Alto here in Egypt. Most of the time we are fielding the cases here in the technical support center in our company. Sometimes we need to escalate to their Tier 2 and Tier 3, and the response is very good. We are talking about just two hours to escalate to the next level of support. They have a very good policy about help features and support centers in our region here and in India.

There are many ways to deploy for the firewall in general. Sometimes we propose a firewall as a perimeter firewall, to protect the internet connections. Sometimes, we propose the firewalls to protect the data center and protecting the institutional traffic between servers. So it depends on the deployment model and the customer requirements.

Depending on the client, it may take time to gather the info and requirements from the customers, so it takes anywhere from two business days to two months to finalize the whole deployment for the Palo Alto Networks.

We have a technical team in our company that handles the implementation.

Palo Alto is not a cheap product. It's expensive because they provide very good technology.

Here in Egypt, there are about 93 system integrators and we have a partnership with Fortinet. We consider our connections because we need to avoid conflict with our partners and conflict with other solutions in our portfolio. We choose Palo Alto and Check Point to avoid conflict with our partners. The market is very crowded with FortiGate technical solutions and partners, so we avoid these.

We had a very good experience with their solutions, especially with their endpoint protections and the next-generation firewalls. We are a local distributor in Palo Alto here in Egypt. So we propose this technology to our customers and our partners here in Egypt.

Palo Alto offers very good technology and hardware. Its very good in this category of solution. You have options of providing or proposing to a customer a small box, or sometimes a mid range. It depends on the model and the deployment.

I would rate this solution 8 out of 10.

This solution helps us with visibility of the data stored in the cloud and it even scans our files. If a user is trying to upload any kind of malware file or a script, Prisma SaaS scans those files and helps us identify anything malicious. If it finds something, it directly cleans the file. We are partners with Prisma SaaS.

I've evaluated multiple solutions on the market but to quarantine and clean a malware file is something I haven't seen anywhere else. It's a great feature and provides a lot of security.  

I would like to see a hybrid model which has API plus in-line security, where the user's data is controlled via an API call and also controlled in-line. 

We been using this solution for over a year. 

We've never had any issues in terms of stability. 

In terms of scalability, we initially went with the out-of-the-box solution which was able to support around 40 to 50 users and it was fine. There was no need for any add-ons. We now have a license for 200 users and it scales well. 

Technical support is responsive. We contacted them a few times and they were helpful. 

The initial setup was straightforward. It was completely on cloud and easily activated, and we were up and running quite quickly.

The licensing of this solution is a little expensive and is paid on an annual basis. 

If a company is looking for an API-based technology to control their SaaS data uses and user access, then Prisma SaaS is a good product but if they're looking for a complete CASB solution, then this is not suitable. The solution provides a lot of security but when you look at it in terms of the high cost for licensing, then it is not cost effective to spend that amount just to protect the data stored by the user.

I rate this solution a six out of 10. 

We use it to securely access cloud data centers or cloud platforms. If a customer has a lot of workload in the cloud, then from the Prisma Access cloud, they can create secure access to all cloud platforms.

The users can securely access any cloud data centers or cloud platforms. In terms of the features, it has all the features that Palo Alto Next-Generation Firewall has. It is also very stable and scalable.

When it comes to the VPN, it uses the global protect VPN functionality to connect remotely, but it has a feature limitation for assigning multiple IP subnets to different user groups. It would be much better if we are able to assign the current IP blocks for the subnets based on the user groups.

We got its distribution about eight months ago.

It is very stable.

It is very scalable. The scalability can be based on the number of users or the number of networks. You can expand it the way you want. In Sri Lanka, we have about 3,000 users.

Palo Alto's technical support is good because they have multiple methods and licenses. Their premier support seems better.

The initial setup is straightforward in a way, but there are certain things that may require Panorama, which is a centralized management platform. The management of certain things can only be done through Panorama. For the initial integration, a few steps have to be followed, but after that, it is easy to configure and use.

For the console-side deployment, one or two engineers would be enough. A complete user deployment may take a few weeks to complete.

Prisma Access is a little bit expensive.

I would recommend this solution to others. I would rate Prisma Access a nine out of ten.

The features I find most valuable is WildFire, user integration, and the basic technology features.

I would like to see better pricing and an easier logging process. Also, if there was a way to log a global log, everything could go onto the system. It would be better if there was a third log, otherwise one would have to do everything manually. 

From an audit or security perspective, the solution has been very stable so far. But I am not sure if it will stay stable once deployment takes place. 

The initial setup was really straightforward.

I will give this solution an eight out of ten rating because theoretically, I looked at a lot of other products but Palo Alto seems to be covering all aspects and I'm sure the competitors like to tell everybody they have more features, but I've not experienced it yet.

Prisma SaaS can be used to secure sanction applications that people use on enterprises. You can integrate the solution using ATI to sanction applications such as Office 365, Google, and Salesforce. You can apply controls to protect from data leakage and then apply cloud-based DLP policies.

The valuable features are that it is easy to use, easy to integrate, and is stable. It's scalable as well.

When it comes to integration mechanisms, Prisma SaaS does not support reverse proxy type of integrations. For example, a product like Netskope has a lot more integration mechanisms than does Prisma.

I've been using it for about one year.

It's a stable product.

It's scalable. We have about 500 users.

The technical support has been good.

Prisma SaaS requires a small implementation. Two engineers would be sufficient for the deployment process.

We implemented it ourselves.

I would rate Prisma SaaS at seven on a scale from one to ten. It is easy to integrate and is stable and scalable, but it needs to support reverse proxy integrations.