We are evaluating the Palo Alto firewall (PA-500) to replace a pair of sonicwall firewalls we have in place. We want more granular application control and filtering which seems to be a strong suit of the palo alto firewalls. They are also not just packet filtering firewalls. With that said, the sonicwalls have been a breeze as far as setting up the VPN and VPN client and NAT.
I did run a cross this thread (possibly cisco biased) where one of the users was claiming they had a lot of problems with this firewall. Especially with the VPN and setting up NAT Post by Ortiz).
Do any of you have these in production and what are your thoughts?