What is still missing or needs to be improved in PA Next Generation Firewalls ?

[mario.chancay]

Hi, will like to understand the oppinion from the PAN community about the features that are still missing or needs to be improved.

Will appreciate if you can specify by functionality like :

FIREWALL

Must Have : A,B,C

Nice to Have : D,E,F

Thks

Mario

[fabeele]

IPv6 support when using PPoE

[TomYoung]

Hi @mario.chancay ,

Thanks for asking!  I don't know if you still look at this thread.

Must Have:

* None that I can think of at the moment.  I will edit this as I think of items.

Nice to Have:

* The ability to select multiple items at once from a drop down menu.  For example, if I want multiple source addresses in a security policy rule, I currently have to click Add, select one, click Add, select one. etc.

* Change Link State to down for sub-interfaces.

* SSO for clientless VPN for the same SAML iDP.  (I think the NGFW would have to intercept and store the iDP cookies.)

If anyone is drive-by browsing and would like to see this feature, like this post!

Tom