Firewall Wizards: Re: Palo Alto Networks

[ArkanoiD <ark () eltex net>]

The idea itself is quite good for some cases (do not rely on port numbers, use
traffic signatures *instead*). Though it sounds much as "giving up application control" ;-)

The marketing bullshit is awful, though. There is a dozen whitepapers with amazingly little
useful technology details but too many buzzwords about "next generation".

Despite that, it seems to be quite decent product with (still DPI-driven) L7 inspection,
(quite basic) DLP functionality builtin
(still much better than nothing), data fingerprinting and reasonable performance
(though i am strongly against justifying firewalls by performance).


On Thu, Oct 08, 2009 at 06:00:54PM +0100, Paul Hutchings wrote:
> Getting one of their boxes on eval for a couple of weeks.  Quite a  
> broad and generic question I know, but does anyone have any experience 
> (s) they wish to share?
>
> Cheers,
> Paul
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
> email protected and scanned by AdvascanTM - keeping email useful - 
> www.advascan.com 
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards