Re: Next Generation Firewalls

["Tevlin, Dave" <dtevlin () VISI ORG>]

For Palo Alto there is a good initial Security Configuration Benchmark from
the SANS Institute which you can find below.

http://www.sans.org/reading-room/whitepapers/auditing/palo-alto-firewall-security-configuration-benchmark-35777

Dave Tevlin, MS
Network/ Systems Administrator
Georgetown Visitation Prep School


On Thu, Jun 18, 2015 at 1:00 PM, Tornoe, Eric J. <EJTORNOE () stthomas edu>
wrote:

> We also replaced our Cisco ASA's with an Active/Passive pair of Palo Alto
> NGFW in January 2015 and are very happy with our choice. I agree with
> Andrea that the increase in visibility and protection right out of the box
> is impressive. Ease of management was  a big deal to us since we have
> limited staff and the Palo has delivered on that aspect. Palo Alto was
> great to work with and we have an ongoing relationship with our sales
> engineer that has been extremely fruitful even following the sale. We
> considered Cisco, CheckPoint and PA before choosing the PA on cost,
> effectiveness and ease of management.
>
> Eric
>
>
> Eric J. Tornoe
> Enterprise Architect and Manager, Security and Database Operations
> Information Resources and Technologies
> University of St. Thomas
> 2115 Summit Avenue
> St. Paul, Minnesota 55105
> Mail Location: 5046 Office: AQU LL13G
> Phone: 651.962.6217
>
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv [mailto:
> SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Di Fabio, Andrea
> Sent: Thursday, June 18, 2015 11:30 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Next Generation Firewalls
>
> Hi Tim,
>
> We migrated from a pair of CISCO ASA's 5540 to an Active/Passive pair of
> PaloAlto NGFW 3 years ago and we couldn't be happier with features,
> performance, and ease of management. We are managing the pair without the
> management server, Panorama. They have increased our security posture and
> network visibility by a great deal. Our bake-off was, PA vs CISCO vs
> Barracuda vs SonicWall.
>
> Andrea Di Fabio
> Interim Chief Information Officer (CIO)
> Office of Information Technology
> Marie V. McDemmond Center for Applied Research, Rm 401H
> 555 Park Avenue, Suite 401
> Norfolk, Virginia 23504
> (757) 823-2896 (Office)
> (757) 823-2128 (Fax)
> adifabio () nsu edu
> www.nsu.edu
>
> ________________________________________
> From: The EDUCAUSE Security Constituent Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Carroll, Tim <
> Carrolltd () ROANESTATE EDU>
> Sent: Thursday, June 18, 2015 10:00
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Next Generation Firewalls
>
> All,
>
> Roane State Community College is in the process of reviewing next
> generation firewalls.  Since this is a significant investment, I would be
> interested in hearing from the community what you are using, your
> experience, why you made the choice and your satisfaction with the vendor
> chosen.
>
> Thanks in advance for any feedback.
>
> Regards,
>
> Tim Carroll
> Assistant Vice President and Chief Information Officer Information
> Technology Roane State Community College
>
> ________________________________
>
> This email is intended for the addressee and may contain privileged
> information. If you are not the addressee, you are not permitted to use or
> copy this email or its attachments nor may you disclose the same to any
> third party. If this has been sent to you in error, please delete the email
> and notify us by replying to this email immediately.