Palo Alto / BSM / Lightspeed / TMG advice

[JamesKing]

Hi all,

We used to have the following setup:
Firewall = Cisco ASA
Web filtering - Lightspeed rocket
Email filtering - Lightspeed
NAC - Bradford Campus Manager
VPN - TMG

We have brought a Palo Alto device to replace the end of life Cisco ASA and it is running as a direct replacement only. I am keen to consolidate as much as possible onto the Palo Alto and wondered if anyone has migrated the services from the above onto it?

It looks like it can replace all of the devices above but wondered how pratical this is in the real world, any advice / war stories greatfully recieved. We have 900 mainly residential users with 450 school devices and 1000 odd personal devices with full access to services.

Thanks
James.

[mrbios]

You should certainly be able to use it for VPN, NAC and firewall, as far as I'm aware though the palo alto kit doens't do email filtering and its web filtering isnt going to be as educationally focused as the lightspeed i wouldn't have thought? Best off keeping the lightspeed imo and using the PA for the rest?

Out of curiousity which model of PA firewall are you going for? I'm in the process of deciding on a new firewall but I'm a bit naive when it comes to firewall specs, don't know if i should be going for the PA-500 or the PA-2020 (700 devices and 1600 users on a 100mb connection) if i could just hijack your thread for a second and ask if someone could point me to which model i should be going for that'd be muchos appreciated