4 ms·

Our firewall guy thinks Palo Alto firewalls are really good and I don't dispute that they are. But I may just show him this tomorrow morning as, another perspec

Our firewall guy thinks Palo Alto firewalls are really good and I don't dispute that they are. But I may just show him this tomorrow morning as, another perspective never hurts.

RKearney 6y ago
I've used Palo Alto, Fortinet, and Cisco firewalls. Cisco is the worst by far, the Fortinet are not fun to use but have an incredible $/performance ratio, and the Palo Alto ones are by far the most expensive but also the most enjoyable to use. They're certainly not without their faults, and we've had issues with them that took time to remedy, but I wouldn't trade them for anything else I've seen so far from competitors.
- canarypilot 6y ago
  Did you just publish the result of a benchmark or performance comparison test you ran to establish the difference in $/performance ratio between competitors? If so, I have bad news for your license compliance...
  - RKearney 6y ago
    Nope, I read the manufacturers published specifications for their equipment and looked up the pricing on publicly accessible websites. https://www.paloaltonetworks.com/products/product-selection https://www.paloaltonetworks.com/products/product-selection https://www.fortinet.com/products/product-compare?cat=ngfw https://www.fortinet.com/products/product-compare?cat=ngfw And you can get pricing from any VARs website such as CDW.com Good try though.
    - thaumasiotes 6y ago
      That is a performance comparison test; it's just not one that requires access to the hardware.
      - RKearney 6y ago
        Their performance test, not mine. I'm going off the numbers they cited.
  - MereInterest 6y ago
    That's a good thing to warn people of, but feels like a complete red flag in a license. If a company isn't willing to stand by their product in reviews, then that should be a reason to disqualify their product from consideration.
- pmart123 6y ago
  Have you ever worked with Check Point's firewall?
  - guardiangod 6y ago
    Check out https://www.reddit.com/r/networking/ https://www.reddit.com/r/networking/ and search for the firewall/company names, sorted by Newest. (I don't subscribe to the sub nor have I posted anything in it. I do read it from time to time and find the comments alright from an end-user (ie. sysadmin) point of view.)
    - pmart123 6y ago
      Thanks.
      - bnjms 6y ago
        FWIW, I know a Checkpoint guy and he swears they’re the best. I haven’t had a chance to do a comparison with him yet but the impression I get is that Checkpoint gets overlooked more than anything so they don’t do great on r/networking. There is another guy in this thread who gives a good review saying Checkpoint got good in response to competition. Forti is the value option. And, FTD is looked down upon while ASA has some niches. So, PAN, Checkpoint, and Fortinet appears to be the leaders.

Our firewall guy thinks Palo Alto firewalls are really good and I don't dispute that they are. But I may just show him this tomorrow morning as, another perspective never hurts.

RKearney 6y ago

I've used Palo Alto, Fortinet, and Cisco firewalls. Cisco is the worst by far, the Fortinet are not fun to use but have an incredible $/performance ratio, and the Palo Alto ones are by far the most expensive but also the most enjoyable to use. They're certainly not without their faults, and we've had issues with them that took time to remedy, but I wouldn't trade them for anything else I've seen so far from competitors.

canarypilot 6y ago
Did you just publish the result of a benchmark or performance comparison test you ran to establish the difference in $/performance ratio between competitors? If so, I have bad news for your license compliance...
- RKearney 6y ago
  Nope, I read the manufacturers published specifications for their equipment and looked up the pricing on publicly accessible websites. https://www.paloaltonetworks.com/products/product-selection https://www.paloaltonetworks.com/products/product-selection https://www.fortinet.com/products/product-compare?cat=ngfw https://www.fortinet.com/products/product-compare?cat=ngfw And you can get pricing from any VARs website such as CDW.com Good try though.
  - thaumasiotes 6y ago
    That is a performance comparison test; it's just not one that requires access to the hardware.
    - RKearney 6y ago
      Their performance test, not mine. I'm going off the numbers they cited.
- MereInterest 6y ago
  That's a good thing to warn people of, but feels like a complete red flag in a license. If a company isn't willing to stand by their product in reviews, then that should be a reason to disqualify their product from consideration.
pmart123 6y ago
Have you ever worked with Check Point's firewall?
- guardiangod 6y ago
  Check out https://www.reddit.com/r/networking/ https://www.reddit.com/r/networking/ and search for the firewall/company names, sorted by Newest. (I don't subscribe to the sub nor have I posted anything in it. I do read it from time to time and find the comments alright from an end-user (ie. sysadmin) point of view.)
  - pmart123 6y ago
    Thanks.
    - bnjms 6y ago
      FWIW, I know a Checkpoint guy and he swears they’re the best. I haven’t had a chance to do a comparison with him yet but the impression I get is that Checkpoint gets overlooked more than anything so they don’t do great on r/networking. There is another guy in this thread who gives a good review saying Checkpoint got good in response to competition. Forti is the value option. And, FTD is looked down upon while ASA has some niches. So, PAN, Checkpoint, and Fortinet appears to be the leaders.