Re: Palo Alto.

[Matthew Giannetto <MGiannetto () MC3 EDU>]

We've been using Palo Alto as a content filter for a few months now and have been extremely satisfied.  We put it in 
tap mode to start, and immediately had much more visibility into our Internet traffic.  We slowly rolled out URL 
filtering, anti-virus, anti-spyware, and IPS.  We've also used it a number of time to investiage incidents.

One of my favorite features is that, using their AD agent, we can correlate users with IP addresses, allowing us to 
apply different policies to different groups of users.  For instance, we can't block porn for library staff, faculty, 
and students, but we can block it for staff and public access machines.  Palo Alto lets us do this much easier by user 
instead of IP.

Another great use is you can pick out the bulk of P2P traffic and either rate limit it (QoS) it or block it completely. 
 Or create an AD group of allowed users and only allow it for them.

Easy to troubleshoot with, no false positives yet, good reporting, very customizable.  It's worth a 30-day demo unit if 
you're in the market.

Feel free to contact me if you have any questions.

Thanks,

Matt Giannetto
Manager of IT Security
Montgomery County Community College
mgiannetto () mc3 edu | (215) 619-7442



-----Original Message-----
From: Matthew Gracie [mailto:graciem () CANISIUS EDU]
Sent: Tuesday, April 20, 2010 9:10 AM
Subject: Palo Alto.





We're looking at adding a Palo Alto firewall to our network in the near

future - if anyone has experiences, good or bad, that they'd be willing

to share I would appreciate it.



--

Matt Gracie                 (716) 888-8378

Information Security Administrator  graciem () canisius edu

Canisius College ITS              Buffalo, NY

http://www2.canisius.edu/~graciem/graciem_public_key.gpg

________________________________
Montgomery County Community College is proud to be
the #1 ranked technology-savvy community college in the nation,
as determined by the Center for Digital Education and Converge magazine.