Palo Alto Networks Advanced URL Filtering vs. Sophos Firewall

Because of it's complexity, Palo may not be well suited for a small organization that may not have dedicated networking staff. But for a mid to large-sized enterprise, Palo shines.

Incentivized

It is well-suited for small, medium, and large organizations looking for comprehensive cybersecurity protection. It will not only safeguard their network from cyberattacks but also provide them with many advanced features like deep packet inspection, centralized management, web filtering, application control, etc. in one place. It will help them optimize bandwidth and ensure continued connectivity.

Incentivized

• Threat Detection and Prevention (Malwares, Un-Authorized Access)
• Out of the box patterns for threat detection
• Built in and Updated identification patterns
• Unified Dashboard/Alerting on anomaly

Incentivized

• Web filtering. This allows us to monitor web usage and block certain categories from being access at the perimeter.
• Application Control. With application control we can block certain applications that get categorized from working accessing the Internet.
• Synchronized Security. When utilizing the Sophos Endpoint product you can use Synchronized Security to minimize Lateral Movement in a network. If a machine is shows a Red status you can auto-isolate it and it is unable to communicate with anything else on the network.

Incentivized

• Steep learning curve
• The top-down URL filtering match can sometimes be tricky and requires some expertise in setting up the desired policy

Incentivized

• If using Endpoint security and the Firewall it would be nice to have an easier back and forth between the portals rather than have two separate tabs open. Especially if using more than one in multiple locations.
• If dealing with different revisions options are moved around and sometimes in places that doesn't normally seem like they should be there.

Incentivized

It is very easy to use and setup. It integrates well within all of Palo's products such as NGFWs and Prisma Access. There is a dedicated log inside of Palo products for URL filtering to aid in troubleshooting. It integrates with AD/Azure so that different users can have different URL filtering rules. Filtering can be adjusted in real-time

Incentivized

Because this is a user-friendly interface, and anyone can use it there are multiple articles and guidelines available, it has advanced-level security features. they provide VPN solutions all the features are very practical, SSID MAC-based authentications web control, Firewall rules segregation of the rules and policies, On-premises Active directory single sign-on feature is also available.

Palo support is excellent, and I have never had to wait when contacting them for support. One of the best support teams in the business, in my opinion.

Incentivized

As we are all addicted to graphics-oriented interfaces for all our life products. Easy to manage and access as a good way of using anything

Palo Alto Networks Advanced URL Filtering is the best solution to work with Palo Alto Firewalls and Panorama as an orchestrator. We choose Palo Alto Networks Advanced URL Filtering as it could reach the success criteria during the PoC.

Incentivized

I was a big fan of Cisco ASA products, but when I saw all of the security feature differences between both firewalls, I moved to Sophos devices. Its sandbox, IPS, and many more features are really advanced. Cisco does not provide features like this.

Incentivized

• Palo has been an excellent investment for us.
• Having robust URL filtering built into the same device as the firewall saves the cost of a separate appliance and improves performance.

Incentivized

• True UTM device.
• Very Active customer help for any help.
• Easy license and cost effective.
• Should [do] more work on logging and reporting.