Hacker News Reader

These kind of problems are solved for a long time: use open source software and then you can patch problems yourself if upstream is dead. Any responsible admin will not tolerate closed source black boxes dominating important pieces of infrastructure.

View on HN

Sometimes you arrive after those black boxes have been bought and paid for.

All the more reason to migrate to a supported solution, if they're already paid for.

(OpenVPN is unbeatable in simplicity and price. I've migrated several pre-AnyConnect Cisco VPN users to it, which was finally EOL'd 2014 after several years neglect.)

I've tried to get OpenVPN to work with a Palo Alto firewall and to date have not been able to, Palo Alto support is - to put it mildly - non-functional.

Would not recommend Palo Alto.

Reply on news.ycombinator.com