Re: Palo Alto Networks

Fair question.  At present we have an application aware firewall,  
technically it is a proxy but it doesn't cache/we have no need to  
cache.  Of course whilst it's smart enough to know whether what's  
passing through it is valid/rfc compliant http/ftp/https and so on,  
it has no idea if it's Skype, MSN Messenger, Webex and so on.  That's  
the key area that I'm interested in, combined with the integrated  
spyware/malware/virus filtering.

As for other vendors, in a nutshell no, as from what I can the PA kit  
seems kind of unique once you go above where we are now i.e. protocol  
aware proxy.

My plan is to configure the loan unit with the rules we need and put  
it in and see how it goes, but of course feedback from those more  
familar with the product is always a bonus.

Paul

On 8 Oct 2009, at 20:19, Cassell, Damon Z. wrote:

> What you are trying to accomplish? Firewall replacement? Proxy  
> replacement? DLP? The Palo Alto tries to hit a lot of areas. What  
> features are most important to you? Are you looking at other vendors?
>
> Test carefully (with real world traffic if you can) before you buy,  
> and it would help to benchmark against another product in your  
> testing.
>
> My experience with the product was prior to the release of PanOS 3  
> so I am not sure my observations would apply now.
>
> Damon
>
>
> -----Original Message-----
> From: [email protected]  
> [mailto:[email protected]] On Behalf  
> Of Paul Hutchings
> Sent: Thursday, October 08, 2009 1:01 PM
> To: Firewall Wizards Security Mailing List
> Subject: [fw-wiz] Palo Alto Networks
>
> Getting one of their boxes on eval for a couple of weeks.  Quite a
> broad and generic question I know, but does anyone have any experience
> (s) they wish to share?
>
> Cheers,
> Paul
>