Juniper SecIntel Threat Intelligence vs. Palo Alto Networks AutoFocus

It is well suited in cases if you want good threat intelligence software that can collect data from multiple sources. A tool with threat logging and detection/enforcement capabilities that enable you to identify, monitor passively, and block known threats at the firewall. Although it is very costly compared to its competitors it is worth it in terms of the functionality it provides to organizations.

Incentivized

Analytics, Threat Hunting and detailed investigations for the security incidents are the main use cases. Automation on the cloud based on the feeds through the minemeld is another use case. When you deploy PAN on perimeter, Autofocus gives you a temendaous value. If you have non PAN firewall/products running Auto focus doe not make sense.

Incentivized

• Feeds on malicious IP, URLs and domains.
• Infected host and custom threat feed.
• Allows data from third party sources.

Incentivized

• Threat intelligence
• Emerging Threats
• Intelligence feeds

Incentivized

• Free trial / free version should be there.
• Licensing cost should be less.
• Customer support service can be improved.

Incentivized

• third party product integration
• simplicity of the managment console
• integration to cortex agents directly

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

• Increase in compliance with regulatory requirements.
• Increase in customers and clients trust.
• Overall organization security posture has been improved.

Incentivized

• Cheap for us
• Easy integration
• Easy management

Incentivized