Palo Alto Networks AutoFocus vs. VirusTotal

Analytics, Threat Hunting and detailed investigations for the security incidents are the main use cases. Automation on the cloud based on the feeds through the minemeld is another use case. When you deploy PAN on perimeter, Autofocus gives you a temendaous value. If you have non PAN firewall/products running Auto focus doe not make sense.

Incentivized

VirusTotal is perfectly suited as a tool to help security professionals analyze files and URLs that require further analysis to determine security risks in the environment. It truly is a must-have in this world we live in!

Incentivized

• Threat intelligence
• Emerging Threats
• Intelligence feeds

Incentivized

• Fast file scanning
• No agent required
• Available from anywhere

Incentivized

• third party product integration
• simplicity of the managment console
• integration to cortex agents directly

Incentivized

• I'm not sure VirusTotal can improve this themselves but just keeping up with the evolving "known" threat landscape is tough so even though VirusTotal is very good, nothing is 100% effective in this space.

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

Honestly, we have always used VirusTotal, its a leader in the industry and meets our needs perfectly so we have never had the need to look elsewhere

Incentivized

• Cheap for us
• Easy integration
• Easy management

Incentivized

• Extremely useful to confirm if a file is suspicious or not

Incentivized