Palo Alto Networks Next-Generation Firewall Migration


NOTICE: Pitt IT is replacing Cisco ASA firewalls used by University departments with Palo Alto firewalls. Your department may be required to undergo a guided firewall migration. Learn more

Palo Alto Networks is the official firewall technology of the University of Pittsburgh — offering advanced data security and protection against viruses, spyware, and application vulnerabilities. 

Palo Alto Benefits  

Palo Alto Next-Generation Firewalls provide University departments safety from external threats by utilizing industry-leading features, including:  

  • Enhanced application security  
  • Network malware protection that identifies new malware in minutes and automatically generates protective measures that are delivered to subscribers within an hour of detection  
  • DNS threat protection  
  • IPS protection through a two-pronged approach to stopping attacks:  
    • App-ID automatically blocks unwanted applications  
    • NSS-approved IPS engine scans user-specified applications for vulnerability exploits  
  • Data Filtering and File Blocking  
  • Increased encryption safety with GlobalProtect VPN access

Campus networks can also utilize Palo Alto firewalls to offer increased security with Private IP addressing, Active/Active redundant firewall configurations, and identity-based security policies that provide more control over security measures.



Department Migrations to Palo Alto Firewalls  

Pitt IT is implementing Palo Alto Networks firewalls — replacing Cisco ASA technology — to maintain the University’s safety against evolving cyber threats. This process includes migrating all University departments over to Palo Alto firewalls.

  • If your department currently uses Palo Alto firewalls — no action is needed. 
  • If you are unsure of your department’s firewall, contact Pitt IT for guidance. 
  • If your department does not use Palo Alto firewalls, request a guided migration from Pitt IT.  

Request your migration or submit firewall-related questions via the Technology Help Desk with the following information: 

  • “PALO MIGRATION REQUEST” as the subject line  
  • @pitt username  
  • Department  
  • VLAN name (if possible)  

Every department migration is supported and guided by our experts, who will ensure a smooth and timely process tailored to your departmental needs. No network downtime is expected and Pitt IT is available to answer questions before, during, and after a migration.

Pitt IT urges all University departments to complete their migrations to Palo Alto firewalls as soon as possible. Cisco has announced end-of-sale and end-of-life dates for Cisco Adaptive Security Appliance (ASA) releases.


Request Help Print Article


Article ID: 351
Mon 8/14/23 4:15 PM
Mon 3/25/24 11:19 AM

Related Services / Offerings (1)

NETWORK AND CONNECTIVITY MANAGEMENT Enterprise Network Firewalls help protect sensitive information, research data, and support critical University operations.