Anyone share their experiences with Sonicwall, PaloAlto or similar security products?

Dale_tem

Suspended / Banned
Messages
2,839
Name
Dale
Edit My Images
Yes
We are currently using a Cyberoam Cr25i and we have a few niggly issues, but its main issue is the reporting on users

We are looking for a unified security device to report on users Internet access and block various applications (deep packet inspection)

We are looking at the Sonicwall TZ215 or the PaloAlto PA-200.

Thanks in advance
 
What sort of reporting does it give you?
 
Jack of all trades, firewall, VPN, web filtering, secure web access, block applications to user groups, AV, anti malware etc.

Needs to handle at least 50Mbps with all of this on.

:)
 
Dale_d3100 said:
Jack of all trades, firewall, VPN, web filtering, secure web access, block applications to user groups, AV, anti malware etc.

Needs to handle at least 50Mbps with all of this on.

:)


Our watchguard runs our VPN (radius backed to domain controller), firewall (port/ip/application blocking), nat for multiple web servers etc. Not sure if the newer models/software versions do av/malware. We have a separate web filter (needed one based on ad usergroups integration with full caching etc).

The model we have is a bit long in the tooth now but it has 5 interfaces (50mb fibre, 24mb adsl, 2 legacy sdsl and LAN) and handles 250 odd users.
 
We've got dual PA-4020s for our new 1gbit connection. Considered fortinet, juniper, watch guard, Cisco and many others (including building a home brew firewall server!) before we settled on PaloAlto.

Gotta say it's one of the best decisions I've made. It's a brilliant piece of kit and a pleasure to work with. We tested lots of the others but none of them came close to the PA's app and user identification. Being able to drill down to individual games on a web page and block them if we want, or identify bit torrent traffic regardless of port is a real benefit for us.

It's just so powerful and so easy to use (once you get your head around the slightly different way of working!) that I don't know how we coped before! Its not cheap to buy, but there's a reason it's the rolls Royce of the firewall world :)

My advice - go for the paloalto unit and don't look back!
 
I like Palo Alto, but due to the throughput we need (dual fibre connections) the cost is just too much.

3 year costs for Palo Alto PA-500 = £7700

3 year cost for Sonicwall NSA-220 = £1390

The difference is just too far and after having a web presentation with palo and going through the sonicwall demo interface, they both do the bits we need.
 
Back
Top