Re: Palo Alto Networks

["Cassell, Damon Z." <dcassell () mitre org>]

> I remember it didn't have a central management, so having a few of
> those boxes may be ok, but when you're looking at 20+ clusters, it
> becomes time consuming to manage.

Palo Alto does have central management by using an additional product called Panorama.

http://www.paloaltonetworks.com/products/panorama.html

One observation on the topic of management; the Palo Alto logging scheme seemed clunky, especially with a lot of 
logging enabled. If you are a frequent user of, say, Check Point SmartView Tracker then you might be annoyed with a 
web-based viewer and have some trouble with the query capabilities. Maybe the experience improves when you spend more 
time with the product, but it was an initial concern. Look at this in your own environment if logs are important to 
you...

Again, this may have changed with PanOS 3. 

Damon


_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards