Hacker News Reader

Would be nice if th people at checkpoint prioritized fixing their broken software instead of putting money on writing (PR) blogs posts.

We use their firewalls and vpn stuff. We literally have to reinstall their vpn software each time we want to connect as it breaks itself after each reboot.

View on HN

These kind of problems are solved for a long time: use open source software and then you can patch problems yourself if upstream is dead. Any responsible admin will not tolerate closed source black boxes dominating important pieces of infrastructure.

Sometimes you arrive after those black boxes have been bought and paid for.

All the more reason to migrate to a supported solution, if they're already paid for.

(OpenVPN is unbeatable in simplicity and price. I've migrated several pre-AnyConnect Cisco VPN users to it, which was finally EOL'd 2014 after several years neglect.)

I've tried to get OpenVPN to work with a Palo Alto firewall and to date have not been able to, Palo Alto support is - to put it mildly - non-functional.

Would not recommend Palo Alto.

Reply on news.ycombinator.com