product sizing

[atelcom]

hello

i will propose paloaltonetworks firewall to a customer who has 150 user , wich device can i propose ?

how can i do the sizing of the product ?

thank's in advance

Sarah

[Ramy_AlDamati_Redington]

Hi,

usually the box sizing depend on the :

• Internet Throughput ,
• # of users to connect to the box , and number of users who will use the VPN services throw our box.
• installation location ( Internet , DC , need 1 G interface , or 10 G interface ),

also you need to know from the customer , which services he is looking to use , Threat Prevention ( IPS,AV,DLP ) or URL or Both , since you need to give him a license for these items during proposing the solution ,

also you need to know if the box he need 1 box or 2 box in HA design , since the license will be different ,

and the number of years of the support ( 1 or 3 ) year ?

++++++++

in your case PA-200 will be good for 150 user , but it will give you only 25 VPN User,

but still you need to answer the other question to be able to quote him.

hope this answer help you

[atelcom]

Thank's for your answer ,

the customer have 8 m internet througput ,

150 users to connect to the box, and 70 vpn users

he is looking for both ips and url license

i want to confirm if the pa 500 will be good for this scenario?

and i want to know if the vpn ssl is for free ,or there is a license for that

that for your help

[atelcom]

please , i propose another firewall in distant site

so i want to know if i can do a vpn ipsec with another firewall "cyberoam"

[Ramy_AlDamati_Redington]

PA 500 will do the work ,

since you will get 100 SSL VPN users (SSL VPN+GlobalProtect Users),

for the license you will need to know if the customer need 1 box or 2 box ?

SSL VPN is free of charge from PAN

[Ramy_AlDamati_Redington]

to connect PAN box to another branches , it is doable ,

since they have the flexibility to connect to any other FW technology .

BR,

Ramy

[atelcom]

Thank's for your response,

the client want to set the firewall on ha , so we need 2 firewalls

i need to know , how it works for globalprotect

when we set the client ssl , do we must have a globalprotect license ??

[Ramy_AlDamati_Redington]

it is free of charge by default , and enabled on the box by default

[atelcom]

Thank's for your return,

so , we need just a threat prevention license and url filtering

best regards

Sarah

[Ramy_AlDamati_Redington]

hi,

let me just give you some more details about GP license ,

if the customer need basic VPN , he will took it free,

if the customer looking to make the VPN/GP to connect to multiple Gateway , and Check for the client HIP Matches , so he need to have license for : GlobalProtect portal license , & license for GlobalProtect Gateway as well , ( 2 License ).

hope this clear

BR,

Ramy