Thereal_ba;8073455 said:
King Erauno;8073390 said:
i just got my palo alto certification - PCNSE6 - Palo Alto certified network security engineer. it was easy and its the equivalent of a CCNP in security (which i already have)
Palo alto is the future in security.
whats makes it superior?
I wouldn't call PA superior overall, but their management platform is better than Cisco. And well so are centralized management platforms for Juniper SRX and Checkpoint (better than Cisco). Performance wise, Cisco is better. Damn near all of them are Linux boxes on the backend with different chipsets and asics (other than Checkooint variations e.g. Nokia).
Other than that, Palo Alto networks is a player staying in their lane. It's a relatively small company with a couple of buildings. They moved into Yahoos old buildings 2 years back. Their major selling point is that they are focused on firewalls. So it's a laser focus for the entire company vs. companies with business units that do firewall products. This focus puts them ahead in their lane like Riverbed cut into and took over the WAN Optimization market so Cisco is (feature depth-wise) playing catch up in both of those lanes. PA along with Checkpoint lead the way for next gen firewall products mainly because their mgmt platforms are so scalable vs Cisco who's major advantage has been performance and but weak point is enterprise management. But Cisco did buy Source Fire which is going to add to their depth to make their firewalls "next gen firewalls" like Checkpoint and PA. The drawback and irony of it all is that "next gen" features (ips, scanning, automated response to VMs, etc) take so much fine tuning, impede performance, and throw so many false positives (sec threat alerts) that people end up turning most of that shit off. As long as they have a cluster of firewalls performing well, a bank of web caches, load balancers, and some inline sec scanning tools most businesses are happy.
PA is partnering with other players like A10 to bring integrated solutions so there are some emerging things coming down the pipe. Depending on what's needed I guess it could be superior......for a particular customer.
Also, deployment wise (depth of integrated sec features aside) PA isn't doing anything any of the other companies aren't. The way their firewalls work are pretty much the same as everyone else's...clusters, failover pairs, blah blah. Cisco clustering is currently more scalable than PAs though (but they function damn near identical as far as how they handle network traffic).
To wrap it all up......know them all and how what fits where....and you can sell any of them to get that bread.