Did anyone do a trade-in for their PA-2000/4000 series device (under the so called Customer Care Upgrade Program) ?
What about current subscriptions ? Is the remaining value completely reimbursed ?
As in 1 year of the 3 year contract to go, so 1/3rd of the initial contract value reimbursed ?
At least I would expect so, because:
Can anyone share their experience ?
Well, the matter of fact is I already have a quote. I even had contact with the regional Palo Alto account manager about this...
The issue (and reason for asking here) is in fact not that attractive:
So from a financial point of view, this is not interesting.
Sure, we would benefit from the better functionality of a PA-3000, but it's not like we really need it performance wise.
We'd be happy if Palo Alto would recognise the actual issue with the PA-2000 and offer a remedy. But instead they are just trying to sell us a new box...
@dieterb and all.
I too received a call yesterday from a Palo Alto Networks Business Development representative and they were asking about my PA-2020 experience and I mentioned that particularly after upgrading to PAN OS 6 that commits failed somewhere between 60% to 75% of the time and it took about 15 to 20 minutes to actually commit things - which becomes really frustrating when you only need to commit one change. I was then offered by the rep (the customer care upgrade program - there is nothing Customer Care about this!) this idea of being able to upgrade for new hardware (the PAN-3020) - they would give support and other license credit to move over to the new platform. It was also eluded to that PAN knew of some hardware defect/issue (whether it is a inferior management plain, RAM, or something else? I didn't get any other details.) that caused these issues and wasn't going to be resolved with a simple OS patch. This lead to me explaining to them that they can't expect me to upgrade when we are only a little bit under halfway of the life cycle we expect from the devices. I work for a non-profit that doesn't have endless amounts of money to fix a issue that Palo Alto created (I spoke with our VAR and it will cost us $65k to $70k to upgrade 4 firewalls we have - that are only 2.5 years old). Needless to say I am quite frustrated and ready to cut my losses and buy firewalls that are 1/6th the cost of these things that have like and/or similar features. PAN is a leader in these new features, but they aren't the only ones doing it.
So I am waiting to hear back from the VAR/PAN regional rep, and yet to hear from them about what are my options. It's also interesting that my support renewal is coming up next month, so this might be the open door to jump ship. As @dieterb said, a remedy, or a upgrade for the customer with no cost to the customer would be the right approach from PAN, but they are more interested in making the customer pay for the inferior product they created and sold.
Also to note: In the PAN-OS 6.0 document, I did not see anything about the PA-2000 or 4000 series not being supported. This seems that either they didn't test their OS out well enough, or knew there was issues, but allowed people to install anyway. Seems a little fishy to me.
Just got off the phone with a Sales Engineer and Sales Rep and he is going to look into the issue, but believes that the upgrade to 6.1 resolves these issues with poor commit times and failures at commits. He is going to research that. It would be helpful if they just communicated that, rather then trying to sell you something. I'll let you know what I find out.
Release notes for several versions had something in them regarding commit times, but for us upgrading never really improved much (true, just after upgrading and the inherent management server restart, commits would be ok. But that doesn't last long.)
So right now I'm in rather reluctant to upgrading (now on 5.0.11).
Company ended up going with another vendor all together. Have one more set to swap out - but washing we're washing our hands of Palo Alto. Sadly I can't recommend them to anyone. Based on their customer support (lack of) in trying to help resolve the issue. It seems like it's the bottom dollar, not the customer they care about.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!