Palo Alto Networks Next-Generation Firewalls | Information Technology | University of Pittsburgh

You are here

Palo Alto Networks Next-Generation Firewalls

NOTICE: Pitt IT is replacing Cisco ASA firewalls used by University departments with Palo Alto firewalls. Your department may be required to undergo a guided firewall migration. Learn more

Palo Alto Networks is the official firewall technology of the University of Pittsburgh — offering advanced data security and protection against viruses, spyware, and application vulnerabilities. 

Palo Alto Benefits  

Palo Alto Next-Generation Firewalls provide University departments safety from external threats by utilizing industry-leading features, including:  

  • Enhanced application security  
  • Network malware protection that identifies new malware in minutes and automatically generates protective measures that are delivered to subscribers within an hour of detection  
  • DNS threat protection  
  • IPS protection through a two-pronged approach to stopping attacks:  
    • App-ID automatically blocks unwanted applications  
    • NSS-approved IPS engine scans user-specified applications for vulnerability exploits  
  • Data Filtering and File Blocking  
  • Increased encryption safety with GlobalProtect VPN access 

Campus networks can also utilize Palo Alto firewalls to offer increased security with Private IP addressing, Active/Active redundant firewall configurations, and identity-based security policies that provide more control over security measures.

Department Migrations to Palo Alto Firewalls  

Pitt IT is implementing Palo Alto Networks firewalls — replacing Cisco ASA technology — to maintain the University’s safety against evolving cyber threats. This process includes migrating all University departments over to Palo Alto firewalls.

  • If your department currently uses Palo Alto firewalls — no action is needed. 
  • If you are unsure of your department’s firewall, contact Pitt IT for guidance. 
  • If your department does not use Palo Alto firewalls, request a guided migration from Pitt IT.  

Request your migration or submit firewall-related questions via the 24/7 IT Help Desk with the following information: 

  • “PALO MIGRATION REQUEST” as the subject line  
  • @pitt username  
  • Department  
  • VLAN name (if possible)  

Every department migration is supported and guided by our experts, who will ensure a smooth and timely process tailored to your departmental needs. No network downtime is expected and Pitt IT is available to answer questions before, during, and after a migration.

Pitt IT urges all University departments to complete their migrations to Palo Alto firewalls as soon as possible. Cisco has announced end-of-sale and end-of-life dates for Cisco Adaptive Security Appliance (ASA) releases.