Sign in
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

VM-Series Next-Generation Firewall Bundle 1 [VM-300]

Palo Alto Networks | PAN-OS 8.1.25-h1

Linux/Unix, Other PAN-OS 8.1.25-h1 - 64-bit Amazon Machine Image (AMI)

Reviews from AWS customer

4 AWS reviews

External reviews

175 reviews
from and

External reviews are not included in the AWS star rating for the product.


    Sanket S.

Sécurité réseau robuste avec capacités de nouvelle génération

  • March 18, 2024
  • Review provided by G2

Qu'aimez-vous le plus à propos de the product?
La couche de pare-feu applicative a été la fonctionnalité la plus précieuse car elle offre des milliers d'ID d'application que nous pouvons utiliser pour contrôler le trafic entrant et sortant de notre réseau.
Que n’aimez-vous pas à propos de the product?
Le coût du produit est légèrement un peu plus élevé.
Quels sont les problèmes que the product résout, et en quoi cela vous est-il bénéfique?
Cela aide l'organisation à mieux fonctionner grâce à un accès et une utilisation d'Internet plus propres et plus sophistiqués effectués par les employés.


    Aqeel Junaid

Offers good UI and is user-friendly

  • March 14, 2024
  • Review provided by PeerSpot

What is our primary use case?

I use the solution in my company to block threats, detect vulnerabilities, and protect the organization's internal network.

What is most valuable?

The most valuable feature of the solution stems from the fact that its UI is good since it offers options. In terms of being compliant with the firewall security standards, the product falls in the first or second place. The product can also be considered as NGFW. In general, the product is user-friendly.

What needs improvement?

The reporting part of the product is an area of concern where improvements are required. Compared to Palo Alto Networks VM-Series's reports, FortiGate NGFW provides users with reports that are easy to understand.

For how long have I used the solution?

I have been using Palo Alto Networks VM-Series for three to four years.

What do I think about the stability of the solution?

The product's stability is good. Considering the cloud availability, I can say that the product is 99.99 percent stable. The firewall functions properly on the cloud, and there has been no downtime in the last couple of years. Unless the cloud services from Microsoft Azure go down, the firewall works properly.

What do I think about the scalability of the solution?

My company has 1,000 users of the product, but not all of them are connected to the product all the time since my company has three different fire products running in the cloud. I would say there are around 600 Palo Alto Networks VM-Series users.

How are customer service and support?

The technical support for the solution is very good.

How was the initial setup?

The product's deployment phase is not complex. The tool is easy to deploy.

The solution is deployed on the cloud.

What's my experience with pricing, setup cost, and licensing?

There is a need to make payments toward a yearly subscription-based model in which you need to add modules that you want to use in your company.

What other advice do I have?

I can't elaborate on how the product was deployed in our company's existing infrastructure since the product was not deployed by our company, as the vendor handled it. The product can be deployed on the cloud platform you want to use. If you are using Azure's cloud services, then we select VM-Series, take care of the configurations, and upload the required details to get the product.

In terms of the product's ability to improve our company's network security posture, I see that the tool keeps our systems protected since all the network traffic is routed through the tool. The tool provides protection against any malicious traffic that attempts to get into the company network as such networks get blocked and quarantined by the firewall. Been blocked on the firewall network. Malicious components in the network don't enter our company's internal network, so the users are protecting the systems attached to the internal traffic.

My company has not integrated the product with any third-party software.

Speaking about the benefits of dynamic scalability, I would say that my company has not used the product's scalability features. I don't think there is anything wrong with the tool's scalability functionalities.

The tool is good for enterprise-level organizations because it has many options for users in its office. The product also comes with a lot of add-ons. If you can leverage the benefits of everything the product offers, then it can be useful. It is easy if you want to integrate the tool or connect it with other applications or third-party software, and you can do cloud monitoring and SIEM. The tool also works with XDR products. In general, the tool has its pros and is good software.

I have not encountered any issues with policy management in the product.

The product helps find vulnerabilities in the system, especially opened ports and unwanted ports that are open. If there are any issues, you can explore your system further with Nmap and with the help of a given IP address.

I rate the tool an eight out of ten.


    Kim Ejby Lorentzen

Provides zero-trust security architecture and good integration with other services

  • March 06, 2024
  • Review provided by PeerSpot

What is most valuable?

The most valuable feature of the solution is the zero-trust security architecture.

What needs improvement?

The solution's licensing could be improved, and training should be included before installation.

For how long have I used the solution?

I have been using Palo Alto Networks VM-Series for four years.

What do I think about the stability of the solution?

There are always glitches in every product, but the solution is reliable overall.

I rate the solution a nine out of ten for stability.

What do I think about the scalability of the solution?

I haven’t faced any issues with the solution’s scalability. Our clients for the solution are large corporate or global customers.

How are customer service and support?

The solution’s technical support is very good.

How would you rate customer service and support?

Positive

How was the initial setup?

The solution's initial setup is easy if you have training and know what to do. The solution's deployment time depends a lot on the customer's requirements. It takes around half an hour to install the solution.

What's my experience with pricing, setup cost, and licensing?

The smaller firewalls, like the PA-400 Series, are very good priced. Some of the challenges come with licensing and support on the larger boxes. Sometimes, it's cheaper to buy a new firewall with licensing instead of renewing the licenses of an old firewall.

Suppose you have a PA-3000 Series firewall. By the time of its renewal, Palo Alto will come up with the PA-1400 Series with better performance than the old PA-3000 Series. If the customer had one of the older ones, it would be cheaper for them to buy a new firewall on a lower tier and then get the licenses.

What other advice do I have?

The solution is deployed both on-premises and on the cloud. Palo Alto Networks VM-Series helps in securing our public cloud infrastructure. It is easy to integrate Palo Alto Networks VM-Series with other solutions. We have integrated the solution with Aruba ClearPass Policy Manager. It is easy to maintain the solution.

It is very important for users to get the solution implemented properly in the customer's network.

Overall, I rate the solution ten out of ten.


    Rahul Madan

Easy to use and adds one more security layer to protect from security threats or attackers

  • February 28, 2024
  • Review provided by PeerSpot

What is our primary use case?

We primarily use the solution for cloud firewalling, SASE, ZTNA, and CASB compared to the hardware-based NGFW or cloud firewalls.

What is most valuable?

The product is easy to use and deploy, and it enhances the overall security posture while deploying the application in the cloud. The most effective features of the solution for threat prevention are Layer 7 inspection, SSL decryption, IPS, and the web filtering profile. You can use the solution to easily protect your data from cyber criminals, including insider or outside-based attacks.

The solution is easy to deploy, easy to manage, and easy to create policies. An organization's overall security posture can be improved by deploying Palo Alto Networks VM-Series firewall.

What needs improvement?

The DLP functionality or data classification can be improved in the solution's basic firewalling.

For how long have I used the solution?

I have been using Palo Alto Networks VM-Series for two to three years.

What do I think about the stability of the solution?

Palo Alto Networks VM-Series is a stable solution.

I rate the solution a nine out of ten for stability.

What do I think about the scalability of the solution?

Compared to Checkpoint Maestro Firewall, the solution's scalability is not up to the mark. We'll need to upgrade the firewall for any tech refresh, throughput requirement, or hardware-based incremental. We have more than 100 customers for Palo Alto Networks VM-Series.

How are customer service and support?

The solution’s technical support is great.

How was the initial setup?

The solution’s initial setup is straightforward.

What about the implementation team?

The solution's deployment time depends on the business application or business requirement. Based on that, the solution is easy to deploy and use.

What's my experience with pricing, setup cost, and licensing?

Based on the customer budget, they can choose from 12-month, 36-month, or 60-month licensing models. The solution is quite expensive compared to Fortinet, Check Point, or Cisco. Customers can go for the solution's premium version, which I wouldn't say is expensive because it secures important data.

What other advice do I have?

We cannot say that we have achieved 100% security by deploying the solution, but we have added one more security layer to protect us from security threats or attackers. For deployment, we have more than 400 engineers handling our SOC, including the MSS part, the security of business center implementation, and manageability.

Deploying the solution does not provide a 100% data safeguard, but it adds another security layer. The solution provides single-pass parallel processing (SP3) architecture, which is more effective than other firewall vendors. From the hardware and architecture perspective, the solution is good compared to Check Point or Fortinet firewalls.

Overall, I rate the solution an eight out of ten.


    Deja Srivatjanapong

Easy to use, provides more visibility into the traffic, and streamlines security operations

  • February 22, 2024
  • Review from a verified AWS customer

What is our primary use case?

We use the solution for inter-VPC traffic segmentation and inspection. I also use it for external interfaces.

How has it helped my organization?

The product gives us the ability to do malware detection and file inspection.

What is most valuable?

The tool provides ease of use for GUI management and deployment. The product provides more visibility into our traffic. It also helps with troubleshooting a bit of high-level next-generation platforms. The auto-update feature of App-ID is valuable. Traffic monitoring, threat monitoring, and dashboards are the most impactful for our network security.

Having visibility and alerts and being able to react to them is valuable. The integration of VM-Series with cloud services has helped us a lot to streamline our security operations. The solution has ease of use. The web interface and the traffic monitoring are more centralized.

What needs improvement?

The cost must be improved. The tool is very costly.

For how long have I used the solution?

I have been using the solution for more than five years.

What do I think about the stability of the solution?

I rate the tool’s stability a nine or ten out of ten.

What do I think about the scalability of the solution?

I rate the tool’s scalability an eight or nine out of ten.

How are customer service and support?

The technical support is really good. I rate the technical support a nine or ten out of ten.

How was the initial setup?

We deploy AWS VPC as a virtual appliance, as a security VPC. The initial deployment was moderately easy. It is not complex, though.

Which other solutions did I evaluate?

I have used Juniper. Palo Alto’s next-generation features are better than Juniper’s.

What other advice do I have?

The cloud service providers are also coming up with similar features. It can get really competitive for Palo Alto. People who want to use the solution must engage the system engineer for the deployment, vetting process, and initial implementation. Overall, I rate the product a nine to ten out of ten.


    Serge Birdi

Successfully detects unauthorized traffic streams

  • February 21, 2024
  • Review provided by PeerSpot

What is our primary use case?

For remote access and securing our perimeter, Palo Alto Networks VM-Series greatly enhances our network security posture. It serves as a primary firewall for enterprise security and ensures secure remote access to our environment. As for traffic handling in our multi-cloud deployment, Palo Alto Networks' solution effectively manages it, delivering on its promises.

What is most valuable?

We've integrated all necessary functions into a single box shop currently. This setup is convenient for those who aren't yet in the cloud and prefer to stick with familiar tools. However, there's now a plethora of cloud-based tools that offer similar functionalities, leading to potential duplication and increased costs. 

In terms of security breaches, the product aids in categorizing and monitoring traffic, allowing for the identification of potentially malicisous or incorrectly formatted applications. While there are often false positives, the product has successfully detected unauthorized traffic streams.

What needs improvement?

I believe that the licensing and overall cost could be more transparent and aligned with how features are utilized, especially considering the duplication of features. 

Sometimes, it's challenging to determine which features to activate or deactivate.

For how long have I used the solution?

I have been using Palo Alto Networks VM-Series for the past 5 years.

What do I think about the stability of the solution?

In terms of stability, it's quite reliable once it's up and running. I'd rate it a 9 out of 10. However, it's not a perfect 10 due to the need for manual intervention, especially during firmware upgrades and certificate management. This aspect isn't as seamless as with cloud-native firewalls.

What do I think about the scalability of the solution?

As for scalability, it can be scalable if deployed correctly from the start. Regarding usage, the number of users will likely remain consistent, but the deployment of various firewall types may increase. This could include different instances or flavors beyond the Palo Alto VM series, such as cloud-native versions on Azure or from other vendors. 

How are customer service and support?

The support team is quick, knowledgeable, and responsive. They address issues promptly and escalate them efficiently if needed. Overall, we haven't encountered any significant problems.

How was the initial setup?

The performance of the product hasn't been affected, although access depends on the applications and how well traffic is defined. It can be challenging to ensure traffic flows correctly through the firewall if not fully configured initially. However, once operational, there have been no performance issues.
Setting up the Palo Alto Networks VM-Series was complex and required following a detailed list of instructions. Once it's configured, managing it becomes manageable, but it's not as user-friendly as some cloud-native firewalls that offer click-and-deploy functionality. Building it from scratch involves addressing numerous issues and ensuring it's set up resiliently for availability and reliability.We're using scripts to integrate the Palo Alto Networks VM-Series. 

What about the implementation team?

We managed the deployment in-house, which presented some challenges.

As for technical staffing, we aim to reduce the team size needed for deployment, ideally managing it with minimal personnel or even through code automation. Currently, we don't have a dedicated firewall team.

What was our ROI?


What's my experience with pricing, setup cost, and licensing?

Regarding pricing, I initially downloaded the product for feature comparison purposes, not specifically due to pricing concerns. However, the current licensing model can be a sore point as we're paying for features we're not fully utilizing. Simplifying the pricing structure would be beneficial, especially given the duplication of services in some cases, leading to increased costs.

What other advice do I have?

I'd rate it a 9, considering it's an industry-leading firewall with excellent support and features. However, as more customers shift to cloud-native solutions, some unique features of the Palo Alto solution may become less relevant. The company may need to offer a more robust and feature-rich solution to remain competitive. Currently, the monolithic nature of the firewall can be challenging to maintain and secure, which could impact its future viability compared to more agile competitors like Cisco.

When considering the Palo Alto Networks VM-Series, organizations need to carefully assess their specific use case and the extent of changes planned for the firewall. It's crucial to determine if all features are necessary and if they are not replicated elsewhere in the infrastructure. For those already operating in a cloud-native environment, leveraging native security features may be more cost-effective, as they are already included in the package. Conversely, organizations accustomed to traditional on-premises setups may prefer a single firewall device for security. Ongoing support and the frequency of changes to be made on the firewall should be factored in, as these can significantly impact the overall cost and effectiveness of the solution.


    PrashanthM

Enables real-time inspection for vendor security

  • February 01, 2024
  • Review provided by PeerSpot

What is our primary use case?

The primary use case for the Palo Alto Networks VM-Series is real-time inspection for vendor security.

For how long have I used the solution?

We have been using Palo Alto Networks VM-Series for three years.

What do I think about the stability of the solution?

I rate the stability a ten out of ten.

What do I think about the scalability of the solution?

The product has good scalability. We have small to enterprise businesses as our clients for it.

How are customer service and support?

As per premium support licenses, we received 24/7 support services. Apart from that, they join the calls quickly to resolve the issues for distributors' performance.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup is easy. We managed and configured it with the help of existing management tools and courses. We deployed it on the cloud and on-premises.

The deployment time depends on specific business requirements and bandwidth. It takes around one to two weeks to migrate and configure for large organizations. For small organizations, it takes one or two days to complete.

What's my experience with pricing, setup cost, and licensing?

The product is costly but provides all essential security features. I rate the pricing a seven out of ten.

What other advice do I have?

VM-Series enhances the security of our virtualized infrastructure. It ensures that every interaction, pre and post-loan processing, undergoes a thorough inspection, leveraging VPN features and comprehensive security protocols. It reviews the data for encryption and decryption before sending it to the server.

By applying Palo Alto's robust security measures, we enhanced the overall security posture of the cloud development process. Generally, it is challenging to scale hardware while increasing the bandwidth. When it comes to VM-Series, it is more scalable than other firewalls.

Certainly, the prevention capabilities can have an impact on bandwidth. Without the imposition of security profiles, the bandwidth can operate at its full capacity, reaching up to 100 Gbps. However, upon introducing security profiles, there may be a slight decrease in bandwidth due to the utilization of a software control plan and software data plan. The data plan involves a parallel processing mechanism, incorporating multi-scan and multi-action functions. While this may introduce a minimal latency, it efficiently prevents threats with lesser bandwidth. The operation efficiency is enhanced after the deployed VM-Series. We can easily fetch all licensing details, including serial numbers.

I rate it a nine out of ten.


    Mitul Rajput

A stable and straightforward solution that provides valuable features and strengthens an organization’s IT posture

  • January 31, 2024
  • Review provided by PeerSpot

What is our primary use case?

We are using the solution for IDS, IPS, and security.

How has it helped my organization?

We need a perimeter firewall to expose anything on the internet. Our inbound and outbound traffic is controlled via Palo Alto. It has multiple features. We have Palo Alto in every location and have a central console where we control all the firewalls.

What is most valuable?

IDS, IPS, web filtering, and URL filtering are valuable features. Palo Alto is a good product. We have become a major reseller of the product. The tool is beneficial to us. The solution strengthens our IT posture.

What needs improvement?

The solution must improve Zero Trust integration and use cases. The Zero Trust solution has limitations.

For how long have I used the solution?

I have been using the solution for four years.

What do I think about the stability of the solution?

The stability is good. The vendor communicates about the releases in advance. We keep updating the operating systems based on compliance and security notifications.

What do I think about the scalability of the solution?

Scalability might be an issue for large organizations. The throughput is a challenge. Multiple segregations need to be done. More than 40 customers are using the solution. We don't face challenges in deployment and maintenance.

How are customer service and support?

The support is responsive.

How was the initial setup?

The setup is not complex, but it is not simple. We get everything from Microsoft Marketplace. We buy the license outside Microsoft Marketplace because it is more cost-effective. All our VMs are deployed on the cloud.

What's my experience with pricing, setup cost, and licensing?

The license fee is slightly high. We must choose the right licensing.

Which other solutions did I evaluate?

Palo Alto’s compatibility and integrations are better than Juniper's. Zscalrer’s Zero Trust solution is better than Palo Alto’s. We recommend Palo Alto over Fortinet, Juniper, or Check Point. Palo Alto is less complicated.

What other advice do I have?

Palo Alto is a straightforward solution. The solution does not have any negative impacts on our organization. Overall, I rate the product a nine or nine and a half out of ten.


    Rishabh P.

Leader dans le segment des pare-feu de nouvelle génération

  • January 31, 2024
  • Review provided by G2

Qu'aimez-vous le plus à propos de the product?
Palo Alto NextGen Firewall arrive en premier en ce qui concerne les nouvelles versions de fonctionnalités. Toute nouvelle mise à jour par Gartner sur les nouvelles tendances est ajoutée au PA Firewall en premier. Les autres fournisseurs les suivent. L'interface utilisateur est intuitive avec beaucoup de documentation en ligne pour l'assistance. La meilleure partie est que l'on peut tout configurer sans impliquer leur équipe de support simplement en consultant une documentation détaillée, approfondie et à jour. Aucun autre concurrent sur le marché ne peut égaler leur niveau. Nous utilisons le pare-feu PA pour le déploiement sur les sites clients sur place. Ils ont beaucoup d'options d'intégration disponibles qui augmentent la valeur globale qu'ils fournissent. La disponibilité de l'API aide à automatiser les tâches soit en utilisant des scripts postman/ansible/python.
Que n’aimez-vous pas à propos de the product?
Bien que vous puissiez configurer la plupart d'entre eux à partir de zéro, mais vous aurez besoin d'une assistance pour le dépannage de tout problème. C'est à ce moment-là que vous verrez des retards dans la réponse, ce qui s'ajoute à la frustration. Nous pensons que les corrections de bugs sont également un peu lentes.
Quels sont les problèmes que the product résout, et en quoi cela vous est-il bénéfique?
Nous sommes une entreprise SDWAN qui déploie des pare-feu de plusieurs fournisseurs sur le site du client. Le pare-feu de nouvelle génération Palo Alto est la première préférence du client et cela nous aide à étendre notre base de clients en les déployant dans plusieurs endroits à travers le monde. Indirectement, cela nous aide à augmenter notre chiffre d'affaires d'année en année.


    Santé, bien-être et fitness

Visibilité et contrôle granulaires sur le trafic de l'entreprise

  • January 31, 2024
  • Review provided by G2

Qu'aimez-vous le plus à propos de the product?
La visibilité complète du trafic et le contrôle granulaire avec la possibilité de visualiser en fonction des utilisateurs, des appareils ou des applications.
Que n’aimez-vous pas à propos de the product?
Il y a beaucoup de fonctionnalités dont je sais qu'elles sont disponibles mais que nous n'utilisons pas. Il serait utile d'en avoir plus par défaut, ou d'avoir une meilleure assistance pour les configurer et les mettre en place pour notre organisation afin de profiter des avantages. Je pense que cela faisait défaut.
Quels sont les problèmes que the product résout, et en quoi cela vous est-il bénéfique?
Cela nous donne une visibilité sur le trafic entrant et sortant de nos appareils et centres de données que nous n'aurions pas autrement. Cela nous permet d'arrêter les menaces et problèmes potentiels, ainsi que d'avoir des métriques sur nos utilisateurs, appareils et le trafic en général.