Palo Alto Networks AutoFocus vs. Symantec DeepSight

Analytics, Threat Hunting and detailed investigations for the security incidents are the main use cases. Automation on the cloud based on the feeds through the minemeld is another use case. When you deploy PAN on perimeter, Autofocus gives you a temendaous value. If you have non PAN firewall/products running Auto focus doe not make sense.

Incentivized

It is good to monitor viruses and threat detection in our systems and it does provide detailed information on the detected threat. Email and phone alerts can be configured to keep us updated. It does get updated frequently. Pricing is high only top-level license has every feature. Customer support can be improved.

Incentivized

• Threat intelligence
• Emerging Threats
• Intelligence feeds

Incentivized

• User Friendly console
• Malware , Threat prevention
• Email and phone alerts are very useful
• Deepsight feeds provide more information to analyze threats.

Incentivized

• third party product integration
• simplicity of the managment console
• integration to cortex agents directly

Incentivized

• Prices seems to be very high , Only top tier plans have all features.
• Customer support needs to be improved, They do take a long time to reply back to queries.

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

We do come across multiple security tools but we get more information and security on Symantec deep sight.

Incentivized

• Cheap for us
• Easy integration
• Easy management

Incentivized

• It does provide good security to our systems
• We do get proper service for what we pay.
• Symantec mitigates security threat to our network

Incentivized