How to select firewall model

cancel
Showing results for 
Search instead for 
Did you mean: 

How to select firewall model

L1 Bithead

We are planning to have new firewall pair at one of our branch offices. Now we need to decide which model we should buy? Could you please help to know on which parameters we should decide our approach? We also need to consider future requirements and increase in the user head counts while deciding it.

2 ACCEPTED SOLUTIONS

Accepted Solutions

Cyber Elite
Cyber Elite

Hi @d.spider 

 

There are various points which needs to be consider while selecting the appropriate firewall model like various features and levels of security required. Additionally, choosing a firewall is mostly dependent on the size, scope, different features set requirement and scale of your company. You can refer below article to get specifications of different firewall models along with its throughput and capacity. You can also need to consider the feature set requirements like threat protection, URL filtering, Advanced requirement for Global Protect, DNS security etc as it needs to have separate license for such features.

 

https://www.paloaltonetworks.com/products/product-selection#

 

 

Hope it helps!

Sutare.M

View solution in original post

L4 Transporter

Hi @d.spider ,

 

The Product Summary Specsheet, https://www.paloaltonetworks.com/resources/datasheets/product-summary-specsheet, is a great tool for firewall selection.  Throughput will be the most important factor, and you will want to take into consideration decryption and growth.  Your Palo Alto Networks SE can give you specific throughput numbers for decryption.  A good rule of thumb is to size your model without decryption, and then pick the next model up.  Decryption is critical because the subscriptions are almost useless without it.  Ninety % of web traffic today is encrypted.

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

View solution in original post

6 REPLIES 6

Cyber Elite
Cyber Elite

Hi @d.spider 

 

There are various points which needs to be consider while selecting the appropriate firewall model like various features and levels of security required. Additionally, choosing a firewall is mostly dependent on the size, scope, different features set requirement and scale of your company. You can refer below article to get specifications of different firewall models along with its throughput and capacity. You can also need to consider the feature set requirements like threat protection, URL filtering, Advanced requirement for Global Protect, DNS security etc as it needs to have separate license for such features.

 

https://www.paloaltonetworks.com/products/product-selection#

 

 

Hope it helps!

Sutare.M

View solution in original post

L1 Bithead

The provided link gives much of the details about the models. Thanks for your response and sharing details. This is helpful 

L4 Transporter

Hi @d.spider ,

 

The Product Summary Specsheet, https://www.paloaltonetworks.com/resources/datasheets/product-summary-specsheet, is a great tool for firewall selection.  Throughput will be the most important factor, and you will want to take into consideration decryption and growth.  Your Palo Alto Networks SE can give you specific throughput numbers for decryption.  A good rule of thumb is to size your model without decryption, and then pick the next model up.  Decryption is critical because the subscriptions are almost useless without it.  Ninety % of web traffic today is encrypted.

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

View solution in original post

L1 Bithead

Thanks Tom.. this is also helpful. Both the posts gives me lot of clarity on the points that I should consider. Thanks again to Sutare as well.

 

I am glad that I came to the community. I am learning various this through each of answer on my questions. 😊

 

 

L1 Bithead

After lot of internal discussions and brainstorming, we have now finalized our target firewall model. Both posts really helped us while making our decision. Thanks to the Live community members. Happy to be part of it.

Cyber Elite
Cyber Elite

Hey @d.spider ,

 

Glad to know that above replies helped you! And yes, we all members are happy to be part of such an awesome community. 😉

Sutare.M
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!