Palo Alto Networks Next-Generation Firewalls | Information Technology | University of Pittsburgh

You are here

Palo Alto Networks Next-Generation Firewalls

NOTICE: Pitt IT is replacing Cisco ASA firewalls used by University departments with Palo Alto firewalls. Your department may be required to undergo a guided firewall migration. Learn more

Palo Alto Networks is the official firewall technology of the University of Pittsburgh — offering advanced data security and protection against viruses, spyware, and application vulnerabilities. 

Palo Alto Benefits  

Palo Alto Next-Generation Firewalls provide University departments safety from external threats by utilizing industry-leading features, including:  

  • Enhanced application security  
  • Network malware protection that identifies new malware in minutes and automatically generates protective measures that are delivered to subscribers within an hour of detection  
  • DNS threat protection  
  • IPS protection through a two-pronged approach to stopping attacks:  
    • App-ID automatically blocks unwanted applications  
    • NSS-approved IPS engine scans user-specified applications for vulnerability exploits  
  • Data Filtering and File Blocking  
  • Increased encryption safety with GlobalProtect VPN access (replacing VPN protection provided by Pulse Secure

Campus networks can also utilize Palo Alto firewalls to offer increased security with Private IP addressing, Active/Active redundant firewall configurations, and identity-based security policies that provide more control over security measures.

Department Migrations to Palo Alto Firewalls  

Pitt IT is implementing Palo Alto Networks firewalls — replacing Cisco ASA technology — to maintain the University’s safety against evolving cyber threats. This process includes migrating all University departments over to Palo Alto firewalls.

  • If your department currently uses Palo Alto firewalls — no action is needed. 
  • If you are unsure of your department’s firewall, contact Pitt IT for guidance. 
  • If your department does not use Palo Alto firewalls, request a guided migration from Pitt IT.  

Request your migration or submit firewall-related questions via the 24/7 IT Help Desk with the following information: 

  • “PALO MIGRATION REQUEST” as the subject line  
  • @pitt username  
  • Department  
  • VLAN name (if possible)  

Every department migration is supported and guided by our experts, who will ensure a smooth and timely process tailored to your departmental needs. No network downtime is expected and Pitt IT is available to answer questions before, during, and after a migration.

Pitt IT urges all University departments to complete their migrations to Palo Alto firewalls as soon as possible. Support for Cisco ASA will end on Feb. 1, 2023.