Amazon GuardDuty vs Palo Alto Networks Threat Protection

Likelihood to Recommend

In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Palo Alto NTP is an appropriate suite of protection for any enterprise environment or anyone that truly needs some serious perimeter protection in a one-stop, all-in-one unit. There are no modules or add-ons or clunky interfaces to deal with it; everything works out of one management plane, licensing, implementation, monitoring. updating, etc. As a network admin, that is immensely valuable to me. Additionally, I get real-time reporting on all the stuff NTP is catching, and it is nothing to shirk at. The real value in NTP comes in only after you begin doing SSL-decryption, however, to truly inspect the traffic. Short of that, you are just seeing a bunch of encrypted data and the NTP suite of tools isn't going to avail you. NTP plus decryption, though, is invaluable!

Read full review

Derek Benson

Infrastructure , Network Administrator

Dynamic AviationAviation & Aerospace, 501-1000 employees

View all 4 answers on this topic

Pros

Monitors outgoing connections from AWS resources to known malicious hosts.
Monitors incoming connection to AWS resources from known malicious hosts.
Integrates with other centralized logging solutions.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Anti virus
Vulnerability protection
Anti spyware

Read full review

Darshil Sanghvi

Presales

Network TechlabInformation Technology & Services, 501-1000 employees

View all 4 answers on this topic

Cons

Does not have the ability to add any custom monitors.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
Reporting around Threat Prevention suite could be much better.
Possibly a specific threat prevention search function that spans across of threat features.

Read full review

Verified User

Analyst in Information Technology

Financial Services Company, 1001-5000 employees

View all 4 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

Alternatives Considered

No answers on this topic

It is comparable but not as robust as other stand alone IPS/IDS.

Read full review

Alex Waitkus, CISSP-ISSAP, OSCP

Security Architect

Securicon, LLCComputer & Network Security, 11-50 employees

View all 4 answers on this topic

Return on Investment

GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)

Read full review

Derek Benson

Infrastructure , Network Administrator

Dynamic AviationAviation & Aerospace, 501-1000 employees

View all 4 answers on this topic

Amazon GuardDuty vs Palo Alto Networks Threat Protection