Palo Alto Networks Cortex XDR vs. Webroot Antivirus + Internet Security Complete (SecureAnywhere)

Malware that doesn’t leave files behind has become widely available. Anyone who can afford to reverse this trend should purchase technology. Application whitelisting isn’t for everyone, and Palo Alto Networks Traps can help. Enterprises looking for a low-affected, next-generation solution with high protection should consider it. PAN Traps is a great product at a reasonable price, and I highly recommend it.

Incentivized

Webroot can be great if you have many employees using computers. Sensitive business information can be accessed by malicious threats online if your employees are not trained to avoid these problems. In this case, I think it's important to have software to protect you. If working with a smaller team (and not doing any sort of video production or other intensive software/applications) I can't see a need for anything like Webroot. Learning how to use the internet safely and protecting your file storage are things to be done on the cheap and with smarts.

Incentivized

• Direct Access to devices via Live Terminal which provides operations with scripting, triage, and preservation of artifacts.
• Behavioral Indicators of Compromise which provides alerts on events regarding groups of hosts and their signatures.
• Querying complex data sets involving a variety of devices for network connections, hashes, DNS, etc.

Incentivized

• Webroot provides a very easy to use web interface with GSM. From a single dashboard we can control all of our endpoints that are currently using Webroot services. This is extremely helpful for central management for my engineers.
• Webroot's new (2.0) plugin for Automate (formerly LabTech) provides us with integration into our RMM platform that allows for a large majority of the daily operational tasks to be completed without ever having to move to a different application and/or the web dashboard. The integration is key for engineers to make changes on the fly and quickly. They have done a good job with the 2.0 plugin after coming from the 1st iteration.
• Webroot interface on the machines is a simple and easy UI to follow and understand. Seeing what the product is doing and how it is configured is very straightforward and doesn't require much hunting with the local interface on machines.

Incentivized

• Traps doesn't seem to function as a traditional A/V very well, so it's better as another layer to your endpoint protection
• Traps can cause issues with some legacy or custom programs, so exceptions may have to be made
• Traps falsely identifies things as malicious at times, this is not often though

Incentivized

• It would be nice if there was a notification when Webroot blocked something. Power users may need to legitimately edit things like their hosts file, but they dont know Webroot is preventing them from doing so. They could easily temporarily disable it to do what they need to do if they were aware. Same thing goes for files that get quarantined without notice, it leaves the user wondering why their legitimate file keeps disappearing.
• While the web based console is nice and easy to use, it could use a little better reporting.
• If an administrator disabled a feature (like the firewall, for example) then the Webroot GUI should not alert the end user about whenever they open it. The software should be aware it is being administratively controlled.

Incentivized

It's easy to renew with Webroot, their support is very attentive and highly available. However if you do choose to change products, they even provide means of removing the software from your endpoints via the admin portal which is very convenient.

Incentivized

Day to day, Cortex is easy to use when you have no alerts and when an agent upgrade doesn't go south. Alerts are far too "clicky", there's too many steps to drilling down to what actually happened to trigger an alert. Investigating alerts in Cortex takes about 5x longer than it should.

The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.

Incentivized

We have not had to use Webroot support much over the years. The one or two times we did we were referred to online documentation and in a somewhat condescending manner in one case and in another case, the support person did not demonstrate much knowledge of their product and referred us to the user community for support.

Incentivized

Traps is the slickest interface, easy to use and intuitive rule making, and the rest just didn't quite stack up to the performance level of Traps. McAfee and Kaspersky just hog processor and RAM power. I didn't like the interface and functionality of SentinelOne as much as Traps. Palo Alto really put a lot of time into the development of this software, and had some of the founding fathers of IT Security heading the development process. Can't beat that.

Incentivized

As previously mentioned, Webroot is struggling to compete. Specifically, it is struggling to show value when similar products are catching more and offer more complete packages for remediation as well. We have discontinued the use of Webroot in favor of offering more advanced protection tools by default to our contracted clients.

Incentivized

Ease of implementation across various devices is easy and efficient regardless of scale. Whether it is 5 devices or 500 the product continually proves its the best in its class.

Incentivized

• After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
• We are able to track and control granular suspicious and malicious activities.
• Web controls are missing, which if they would have been there would have been very helpful.

Incentivized

• It has had a mostly positive impact as we have not had any breaches.
• The only negative impact has been when Webroot Antivirus + Internet Security Complete (SecureAnywhere) changed something on their end that caused one of our business applications to not be usable by end-users. That cost our business a fair amount as it took 4 days before it could be used again.

Incentivized