Palo Alto Networks AutoFocus vs. SolarWinds Threat Monitor

Analytics, Threat Hunting and detailed investigations for the security incidents are the main use cases. Automation on the cloud based on the feeds through the minemeld is another use case. When you deploy PAN on perimeter, Autofocus gives you a temendaous value. If you have non PAN firewall/products running Auto focus doe not make sense.

Incentivized

Due to the high price that SolarWinds has, I do not recommend it for small companies. And if I recommend SolarWinds in large companies with complex infrastructures where constant monitoring and review of the network is required, this system is very complete and helps everyone in the technology team, both network administrators, database administrators, Security Administrators, and Server Administrators are all very happy with this system.

Incentivized

• Threat intelligence
• Emerging Threats
• Intelligence feeds

Incentivized

• monitoring
• notification systems
• virus attack monitoring
• ability to shut down systems when it senses an imminent threat

Incentivized

• third party product integration
• simplicity of the managment console
• integration to cortex agents directly

Incentivized

• Steep learning curve.
• Usually takes a bit to get the scans to run easily in a new environment.
• Could have more reporting options.

Incentivized

SolarWinds offers live chat support for all its products built-in. So if you are working on something you can just reach out to someone at that time, and usually get an answer pretty quick. If you are trying to get something done it's a lot better than submitting a ticket and waiting for the email response.

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

Threat Monitor is very new on the scene. Its obviously not at the same level as some of the established vendors yet. We also deploy Alienvault for example and its nowhere near the same level as this, however the cost model between these two products reflects that. Alienvault however does have a physical footprint on the environment, whereas Threat Monitor doesnt. If you have the paitence to wait, Threat Monitor will surely only improve over time.

Incentivized

• Cheap for us
• Easy integration
• Easy management

Incentivized

• The positive impact that this system has on our company is that it has saved us a lot of expenses when it comes to investigating what the bank's network and systems are.
• This saving translates into administrators' time when it comes to finding the problem quickly, expeditiously, and effectively.
• It has helped us a lot and we have even required fewer hours from external providers when it comes to solving a problem.

Incentivized