Re: Palo Alto.

["O'Callaghan, Daniel" <Daniel.OCallaghan () SINCLAIR EDU>]

We have been using the Palo Alto firewalls for a couple of years and
really like them. We initially piloted in 'tap only' mode in conjunction
with our primary CheckPoint FWs, and gradually turned on blocking rules
and controls of the PA as threats were identified.  We recently migrated
to using the PA as primary. They provide excellent visibility into
Internet/network traffic and permit really granular control over
applications and protocols, and the still support 'traditional' FW
rules.  
The A-V/Malware blocking has significantly helped to reduce compromised
machines. We have had a couple of false positive threats detected, but
PA support has been easy to work with and very responsive.

The one area we would like PA to improve is in offering
education/training. The 'next generation' technology offers a lot of
potential (DLP, secure social networking, PCI security zones, WAF, UTM),
but there is little 'how to' documentation and training sessions have
been mostly limited to their Sunnyvale, CA location. It does appear that
PA's training offerings at other locations are beginning to increase.

___________________________________
Daniel V. O'Callaghan, Jr., MBA, CISSP, GCFA
Chief Information Security Officer
Sinclair Community College
444 W Third St, 13-000F
Dayton, OH 45402
937-372-3005


 
 
      

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew Gracie
Sent: Tuesday, April 20, 2010 9:10 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Palo Alto.

We're looking at adding a Palo Alto firewall to our network in the near
future - if anyone has experiences, good or bad, that they'd be willing
to share I would appreciate it.

-- 
Matt Gracie                         (716) 888-8378
Information Security Administrator  graciem () canisius edu
Canisius College ITS                Buffalo, NY
http://www2.canisius.edu/~graciem/graciem_public_key.gpg