Cisco TrustSec vs. Palo Alto Networks Advanced Threat Prevention

• Control access to critical enterprise resources by business role, device type, and location, so policy changes can be made without redesigning the network.
• Easily manage access control and segmentation while maintaining compliance.
• Create and manage policies in an easy-to-use matrix.
• Reduce the need for costly network re-architecture by automating firewall rules and access control list (ACL) administration.

Incentivized

Palo Alto NTP is an appropriate suite of protection for any enterprise environment or anyone that truly needs some serious perimeter protection in a one-stop, all-in-one unit. There are no modules or add-ons or clunky interfaces to deal with it; everything works out of one management plane, licensing, implementation, monitoring. updating, etc. As a network admin, that is immensely valuable to me. Additionally, I get real-time reporting on all the stuff NTP is catching, and it is nothing to shirk at. The real value in NTP comes in only after you begin doing SSL-decryption, however, to truly inspect the traffic. Short of that, you are just seeing a bunch of encrypted data and the NTP suite of tools isn't going to avail you. NTP plus decryption, though, is invaluable!

Incentivized

• Reduce operational expenses by simplifying network segmentation and defining security groups based on business roles, not IP addresses.
• Limit the impact of a data breach by quickly isolating and containing threats using technology already in your network.

Incentivized

• Anti virus
• Vulnerability protection
• Anti spyware

Incentivized

• Help and solutions if needed, support

Incentivized

• Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
• Reporting around Threat Prevention suite could be much better.
• Possibly a specific threat prevention search function that spans across of threat features.

Incentivized

It is comparable but not as robust as other stand alone IPS/IDS.

Incentivized

• Reduction in IT operational costs

Incentivized

• We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
• IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)

Incentivized