Palo Alto Networks Advanced Threat Prevention vs. Proofpoint Advanced Threat Protection

Palo Alto NTP is an appropriate suite of protection for any enterprise environment or anyone that truly needs some serious perimeter protection in a one-stop, all-in-one unit. There are no modules or add-ons or clunky interfaces to deal with it; everything works out of one management plane, licensing, implementation, monitoring. updating, etc. As a network admin, that is immensely valuable to me. Additionally, I get real-time reporting on all the stuff NTP is catching, and it is nothing to shirk at. The real value in NTP comes in only after you begin doing SSL-decryption, however, to truly inspect the traffic. Short of that, you are just seeing a bunch of encrypted data and the NTP suite of tools isn't going to avail you. NTP plus decryption, though, is invaluable!

Incentivized

It is great out of the box and uses AI and machine learning to identify threats with minimal input. It does need to be configured and tuned to meet the needs of the organisation. Industry specific software that sends or receives emails may be affected by this product.

Incentivized

• Anti virus
• Vulnerability protection
• Anti spyware

Incentivized

• Spam filtering.
• Automatic retrieval of malicious emails that have gotten through the filter but were later detected using sample data across all the organizations Proofpoint has as customers.

Incentivized

• Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
• Reporting around Threat Prevention suite could be much better.
• Possibly a specific threat prevention search function that spans across of threat features.

Incentivized

• With our current setup we need to add new users manually.
• Reports aren't that intuitive.
• Mailboxes have to be removed manually.

Incentivized

Proofpoint offers a lot of products, but they are not particularly well integrated. They all look different, and there is no central location to access them all from, which is disappointing. However, I do know they have a big push for upgrading the UI and usability, so this should improve in the coming months I hope.

Incentivized

Even though the product is good, the support can be lacking at times. The support needs to know their product inside and out, but there are times in which we figure out things before their support does. I feel as if we should not be able to fix issues that their support cant fix, hence the main reason for support.

Incentivized

It is comparable but not as robust as other stand alone IPS/IDS.

Incentivized

Proofpoint's Advanced Threat Protection, in the past, has identified threats whereby Microsoft's Advanced Threat Protection did not.

Incentivized

• We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
• IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)

Incentivized

• PP blocks 5-10 emails per day which are spam or malicious
• I only get a small number of emails per week which are spam
• The only malicious emails I receive are from our internal security team which bypasses the PP threat protection

Incentivized