Educause Security Discussion mailing list archives
Re: Palo Alto.
From: "O'Callaghan, Daniel" <Daniel.OCallaghan () SINCLAIR EDU>
Date: Tue, 20 Apr 2010 11:56:40 -0400
We have been using the Palo Alto firewalls for a couple of years and really like them. We initially piloted in 'tap only' mode in conjunction with our primary CheckPoint FWs, and gradually turned on blocking rules and controls of the PA as threats were identified. We recently migrated to using the PA as primary. They provide excellent visibility into Internet/network traffic and permit really granular control over applications and protocols, and the still support 'traditional' FW rules. The A-V/Malware blocking has significantly helped to reduce compromised machines. We have had a couple of false positive threats detected, but PA support has been easy to work with and very responsive. The one area we would like PA to improve is in offering education/training. The 'next generation' technology offers a lot of potential (DLP, secure social networking, PCI security zones, WAF, UTM), but there is little 'how to' documentation and training sessions have been mostly limited to their Sunnyvale, CA location. It does appear that PA's training offerings at other locations are beginning to increase. ___________________________________ Daniel V. O'Callaghan, Jr., MBA, CISSP, GCFA Chief Information Security Officer Sinclair Community College 444 W Third St, 13-000F Dayton, OH 45402 937-372-3005 -----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew Gracie Sent: Tuesday, April 20, 2010 9:10 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Palo Alto. We're looking at adding a Palo Alto firewall to our network in the near future - if anyone has experiences, good or bad, that they'd be willing to share I would appreciate it. -- Matt Gracie (716) 888-8378 Information Security Administrator graciem () canisius edu Canisius College ITS Buffalo, NY http://www2.canisius.edu/~graciem/graciem_public_key.gpg
Current thread:
- Palo Alto. Matthew Gracie (Apr 20)
- <Possible follow-ups>
- Re: Palo Alto. O'Callaghan, Daniel (Apr 20)
- Re: Palo Alto. Will Froning (Apr 21)
- Re: Palo Alto. Matthew Giannetto (Apr 21)