Cisco now offers advanced security analytics via the eponymous Cisco Endpoint Security Analytics, a solution that delivers Cisco AnyConnect endpoint data to prebuilt Splunk analytics and dashboards. The vendor states that the service provides deep endpoint insight that even EPP and EDR solutions don't address.
N/A
Palo Alto Networks WildFire
Score 9.3 out of 10
N/A
Palo Alto Network’s WildFire is a malware prevention service. It specializes in addressing zero-day threats through dynamic and static analysis, machine learning, and advanced sandbox testing environments.
Cisco Endpoint Security Analytics is best suited for larger environments that need a window into basic logs of what users are experiencing. It provides adequate protection. We have had some issues with false positive detection of apps that are common, especially when downloading program setup files and such. Overall, it is a decent product.
Palo Alto Networks WildFire is highly effective in enterprise environments where detecting zero-day threats and unknown malware is critical. Small businesses may find the cost of advanced subscriptions prohibitive, especially if they only need basic protection. Much of our infrastructure is OT and Palo Alto Networks WildFire is cloud dependent so cannot be used where we have air-gapped systems.
This is could base and easily manageable for our collocation. While working within the could can review in live time potential treats that it has reported from other devices.
Worked very well with existing Palo Alto devices.
Another huge plus is the simplicity of managing and ease of scalability.
Its cost is competitive with similar/like products available.
It works very well and takes care of protecting us from threats new and well-known. It's been a game changer in terms of threat detection & prevention.
Cisco Endpoint Security Analytics is semi easy to use. However, the reports are sometimes a bit lacking in detail. We do get alerts when someone encounters something malicious. However, it would be nice to see a bit more detail as to where the malicious file came from so that we can better protect our network.
It is a great product that has definitely improved our security posture, however it does require quite a bit of training and time spent customizing for the environment. We had several difficulties in deployment but Palo Alto support was able to help us work through the problems that we were not able to figure out on our own.
PAN support is very good. You can get the reasonable and timely support on any conditions. When the product is already integrated with the PAN firewalls, you can choose the severity levels based on the effect. The customer service/TAC is very helpful, they even have additional recommendations of advises for product usability. Local partners are also assisting the cases and give their expertise.
Cisco Endpoint Security Analytics is easier to use than any of these products and seems to offer a better level of security. Symantec has failed to deliver any kind of support or updates since the Broadcom acquistion. The other products seem to be more geared to home or small office use. We chose Cisco Endpoint Security Analytics because we trust the brand and it seems to offer more features than the competition.
WildFire from Palo Alto Networks provides security with very little overhead. With AutoFocus, they’ve got threat intelligence built right in. That way, it can prepare us to react swiftly when a significant danger is identified and dealt with as soon as possible. They introduced firewalls that are aware of applications and can make use of Wildfire. It sped our ability to respond to emerging threats up because of this game-changing development.
We've had one or two malware files that were blocked by Wildfire. We use it occasionally to check unusual or unexpected files. Hard to monetize ROI, because we don't know what the impact would have been if the file made it through.
We pay significantly for the Wildfire licenses, but given the potential impact to our business, we feel it is worthwhile. Figure costs are somewhere around $1,500 per year per firewall for a mid-range model. Can be higher or lower for different sized firewalls. Onsite appliance was somewhere between $50-100K, which was too much for us, so we use the cloud model.
