topic Re: Replacing ssg140 Netscreen with Palo Alto in General Topics

Replacing ssg140 Netscreen with Palo Alto

inderjit21 — Wed, 10 Aug 2016 00:53:12 GMT

I am looking at replacing an ssg140 with Palo alto product. This fw is running 35% cpu ,10000 sessions, 60 ip-sec tunnels at the moment. Would it be PA500 or something better than that.

Re: Replacing ssg140 Netscreen with Palo Alto

kiwi — Wed, 10 Aug 2016 07:33:00 GMT

Hi,

Based on those numbers the PA-500 should do the trick. I do recommend to check the products comparison page where you can verify/compare other numbers for performance, sessions, policies, objects, user-id, decryption, url-filtering, interfaces, routing and much more.

This allows you to get a more complete view of the limitations of all of the Palo Alto Networks Firewall models and will give you a much better idea of the model that will best fit your needs :

Compare Firewalls

Cheers !

-Kim.

Re: Replacing ssg140 Netscreen with Palo Alto

reaper — Wed, 10 Aug 2016 07:35:41 GMT

based solely on your listed requirements the PA-500 should do the trick, but you may want to verify some other parameters like throughput and potential growth (more tunnels, more connections, more bandwidth?)

https://www.paloaltonetworks.com/content/pan/en_US/products/product-comparison.html?chosen=pa-200,pa-500,pa-3020

Re: Replacing ssg140 Netscreen with Palo Alto

nextgenhappines — Wed, 10 Aug 2016 16:49:14 GMT

Check out the PA 3000 series instead of PA500, if you search on the community. PA500 commit is very slow and it is based on the older generation hardware refresh.

Best to talk to your sales team and see if you can get a loaner for POC.