Palo Alto Networks Cortex XDR vs. Sophos Intercept X for Server

Malware that doesn’t leave files behind has become widely available. Anyone who can afford to reverse this trend should purchase technology. Application whitelisting isn’t for everyone, and Palo Alto Networks Traps can help. Enterprises looking for a low-affected, next-generation solution with high protection should consider it. PAN Traps is a great product at a reasonable price, and I highly recommend it.

Incentivized

We recently had a malware incident in our organization where we lost some of our files from the system and we were not able to detect the threat. That's when we deployed Sophos. Sophos Intercept X ticks all the boxes. It has helped prevent unauthorized programs from running and provides a managed threat response. The best part is its ability to recover files automatically.

Incentivized

• Great tool to help analyze and identify unknown malicious software on workstations, servers, and mobile devices.
• Integration with Panorama help to quickly and efficiently identify potential malicious files.
• Integration with Wildfire helps to quickly deploy signatures not only to endpoints but to firewalls as well.

Incentivized

• We can administrate Sophos Intercept X for Server via Sophos Central
• White - and blacklisting
• Automatic cleanup of viruses very powerful
• Easy monitoring

Incentivized

• Traps doesn't seem to function as a traditional A/V very well, so it's better as another layer to your endpoint protection
• Traps can cause issues with some legacy or custom programs, so exceptions may have to be made
• Traps falsely identifies things as malicious at times, this is not often though

Incentivized

• Sever lockdown does not have a way to see what is blocked in real time.
• Firewall rule management.
• Adobe products kick of encryption protection on a file server.

Incentivized

Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR

Incentivized

The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.

Incentivized

Traps is the slickest interface, easy to use and intuitive rule making, and the rest just didn't quite stack up to the performance level of Traps. McAfee and Kaspersky just hog processor and RAM power. I didn't like the interface and functionality of SentinelOne as much as Traps. Palo Alto really put a lot of time into the development of this software, and had some of the founding fathers of IT Security heading the development process. Can't beat that.

Incentivized

Sophos Intercept X for Server's centralized management is installed in the cloud vs ESET which is installed locally. Having the system in the cloud allows admins the ability to troubleshoot and work with the system from anywhere without having to connect in. Sophos uses artificial intelligence to detect 0 Day Ransomware. ESET does not do this. The one advantage that I found ESET had over Sophos was that you had the ability to push our the installer to the servers.

Incentivized

• After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
• We are able to track and control granular suspicious and malicious activities.
• Web controls are missing, which if they would have been there would have been very helpful.

Incentivized

• Faster turnaround time to detect and respond.
• All tools in one place.

Incentivized