topic Re: Checkpoint to PaloAlto in General Topics

Checkpoint to PaloAlto

Sanjay_Ramaiah — Tue, 30 Apr 2024 14:48:59 GMT

Hi Team,

We have Checkpoint 5400 may i know which will be the replacement model in PaloAlto? Is there any Link to compare before we plan the migration?

Regards,

Sanjay S

Re: Checkpoint to PaloAlto

Claw4609 — Tue, 30 Apr 2024 19:00:47 GMT

Hello,

This link would probably be the easiest way to filter for a similar model. Next-Generation Firewalls - Product Selection - Palo Alto Networks

Re: Checkpoint to PaloAlto

BPry — Wed, 01 May 2024 01:34:39 GMT

@Sanjay_Ramaiah,

If you reach out to a reseller they should be able to help you identify your actual needs. Otherwise as @Claw4609 mentioned you can go through yourself and identify a similar product. The PA-3220 from a quick glance would be your most direct replacement just looking at the spec sheet of the 5400 briefly.

You really need your utilization numbers on the 5400 to see what you're actually hitting, and you'd really need to know what features you have enabled to make a direct comparable. If you only have NGFW or you're not even doing that on your checkpoint that severely changes things really quick.

Re: Checkpoint to PaloAlto

Brandon_Wertz — Thu, 02 May 2024 15:27:18 GMT

@BPry wrote:

@Sanjay_Ramaiah,

If you reach out to a reseller they should be able to help you identify your actual needs. Otherwise as @Claw4609 mentioned you can go through yourself and identify a similar product. The PA-3220 from a quick glance would be your most direct replacement just looking at the spec sheet of the 5400 briefly.

You really need your utilization numbers on the 5400 to see what you're actually hitting, and you'd really need to know what features you have enabled to make a direct comparable. If you only have NGFW or you're not even doing that on your checkpoint that severely changes things really quick.

Just FYI, I think the 3200/5200 are going to be EOS soon (if not already) any new hardware purchase should be 3400s or 5400s.

Another consideration point would be SSL decryption requirements. SSL decrypt really brings down throughput capacity.

Re: Checkpoint to PaloAlto

MurphyConsidine — Mon, 13 May 2024 13:50:54 GMT

Thanks for the info, I appreciate it.