Checkpoint to PaloAlto

[Sanjay_Ramaiah]

Hi Team,

We have Checkpoint 5400 may i know which will be the replacement model in PaloAlto? Is there any Link to compare before we plan the migration?

Regards,

Sanjay S

[Claw4609 · Accepted solution]

Hello,

This link would probably be the easiest way to filter for a similar model. Next-Generation Firewalls - Product Selection - Palo Alto Networks

[BPry]

@Sanjay_Ramaiah,

If you reach out to a reseller they should be able to help you identify your actual needs. Otherwise as @Claw4609 mentioned you can go through yourself and identify a similar product. The PA-3220 from a quick glance would be your most direct replacement just looking at the spec sheet of the 5400 briefly.

You really need your utilization numbers on the 5400 to see what you're actually hitting, and you'd really need to know what features you have enabled to make a direct comparable. If you only have NGFW or you're not even doing that on your checkpoint that severely changes things really quick. 

[Brandon_Wertz]

---

@BPry wrote:

@Sanjay_Ramaiah,

If you reach out to a reseller they should be able to help you identify your actual needs. Otherwise as @Claw4609 mentioned you can go through yourself and identify a similar product. The PA-3220 from a quick glance would be your most direct replacement just looking at the spec sheet of the 5400 briefly.

You really need your utilization numbers on the 5400 to see what you're actually hitting, and you'd really need to know what features you have enabled to make a direct comparable. If you only have NGFW or you're not even doing that on your checkpoint that severely changes things really quick. 

---

Just FYI, I think the 3200/5200 are going to be EOS soon (if not already) any new hardware purchase should be 3400s or 5400s.

Another consideration point would be SSL decryption requirements.  SSL decrypt really brings down throughput capacity.

[MurphyConsidine]

Thanks for the info, I appreciate it.