PA-5260 and PA-5260S at the core, with PA-5250, PA-5420, PA-3430 and PA-3430S in the estate and PA-220 units for small tenants and test. Managed through Panorama, remote access on GlobalProtect, content control on Advanced URL Filtering.
Migrated from the Juniper SRX estate in 2021, and the design ran to twenty-six revisions because six agencies with separate legal obligations shared one platform and every pair of zones was a deliberate decision. Palo Alto asked to publish it as a white paper; it was declined as public-safety facing.
On the consulting side it appears again as the multi-site refresh met by an intrusion the night after cutover, and as Prisma on one SD-WAN engagement.
Where it appears
Declared on each entry rather than listed here, so this page cannot drift from the work it describes. What each entry named is quoted as it stands, with how much of that project rested on it and what stands behind the claim beside it. The first of those drives the height of the surface above.
NRI North America (formerly Core BTS)
- Firewall Refresh and Intrusion Response2025Multi-site next-generation firewall refresh, with geo-fencing as the containment controlthe project had no deliverable without itdocumented at the time
- SD-WAN Portfolio — Banking and State Legislature2025–2026Prisma on one engagementone of the platforms it was built ondocumented at the time
- Enterprise Architecture Practice Build2024–2026Specializationnamed for context, not part of the deliverydocumented at the time
- Client Architecture Portfolio2024–2026Panorama · Prismaone of the platforms it was built ondocumented at the time
- Vendor and Partner Program2024–2026Enablement stacknamed for context, not part of the deliverydocumented at the time
City of Jacksonville
- Enterprise Multi-Tenant Firewall Architecture2020–2024PA-5260 / 5260S core · PA-5250 · PA-5420 · PA-3430 / 3430S · PA-220 · Panorama · GlobalProtectthe project had no deliverable without itdocumented at the time
- Clerk of the Court Filtering and DMZ Architecture2016–2023Migration completed January 2021one of the platforms it was built ondocumented at the time
- Cecil Disaster Recovery Data Center2015–2023Boundarydeployed, and replaceabledocumented at the time
- Security Posture, Incidents and Federal Liaison2012–2024Boundarydeployed, and replaceabledocumented at the time
- Fire & Rescue Mobile Gateway and SD-WAN Overlay2012–2023Dedicated virtual system for the fleet, service gateway in the DMZ behind itone of the platforms it was built ondocumented at the time
- Oracle ERP Program — RFP to Cloud Go-Live2011–2023GlobalProtect and boundary changesdeployed, and replaceabledocumented at the time
- Annex to Main Data Center Consolidation2010–2018Firewalls repositioned through the phasesdeployed, and replaceabledocumented at the time
- Ed Austin State Attorney's Office2010–2017Public Defender environment migration, 2020named for context, not part of the deliverydocumented at the time
- Enterprise Firewall Policy and OperationsMay 2009 – March 2017Successor platformone of the platforms it was built ondocumented at the time
- Juniper Enterprise Security Suite2009 – 2021GlobalProtect — the successor for remote accessdeployed, and replaceabledocumented at the time
- JTA and Downtown Transit Connectivity2006–2023Successor at the interconnectone of the platforms it was built ondocumented at the time
- Enterprise Web Filtering and Content Security2005–2023 · final platform decision scored 17 May 2023Advanced URL Filteringthe project had no deliverable without itdocumented at the time