Re: Palo Alto Networks

> I remember it didn't have a central management, so having a few of
> those boxes may be ok, but when you're looking at 20+ clusters, it
> becomes time consuming to manage.

Palo Alto does have central management by using an additional product called Panorama.

http://www.paloaltonetworks.com/products/panorama.html

One observation on the topic of management; the Palo Alto logging scheme seemed clunky, especially with a lot of logging enabled. If you are a frequent user of, say, Check Point SmartView Tracker then you might be annoyed with a web-based viewer and have some trouble with the query capabilities. Maybe the experience improves when you spend more time with the product, but it was an initial concern. Look at this in your own environment if logs are important to you...

Again, this may have changed with PanOS 3. 

Damon