Firewall security managing via Zone vs multi layered firewall

[mohammrahman]

Hello Experts,

We are in the process to migrate from our current firewall (enterprise network)  platform to Palo Alto. Current firewall infrastructures are layered hardware like one pair for perimeter, one pair for business network (internal), one pair for DMZ etc. We are exploring the option to collapse everything in one pair of firewall, handling via Zones (one VSYS). I am wondering what will be the pros and cons of collapsing everything in one pair of hardware, appreciate your feedback. 

[mshekh]

Hi @mohammrahman ,

you can contact to accounts team for suggestions about best solution for your environment.

Best Regards,

Mohammad Talib