Palo Alto Threat Protection suite provides good layers of protection
We utilize almost all facets of the Threat Protection suite including File blocking, Data Filtering, URL filtering, Anti spyware and …
Overview
What is Palo Alto Networks Advanced Threat Prevention?
Palo Alto Networks Advanced Threat Prevention is an intrusion prevention system (IPS) used to stop zero-day attacks inline in real-time. In addition to the prevention of known threats, the solution helps to stop never-before-seen exploit attempts and command and control…
Recent Reviews
Product Details
- About
- Tech Details
What is Palo Alto Networks Advanced Threat Prevention?
Palo Alto Networks Advanced Threat Prevention is an intrusion prevention system (IPS) used to stop zero-day attacks inline in real-time. In addition to the prevention of known threats, the solution helps to stop never-before-seen exploit attempts and command and control with its inline deep learning engines that aims to provide prevention of zero-day injection attacks and evasive command and control.
Palo Alto Networks Advanced Threat Prevention Technical Details
| Operating Systems | Unspecified |
|---|---|
| Mobile Application | No |
Comparisons
Compare with
Reviews and Ratings
(36)Reviews
(1-2 of 2)Companies can't remove reviews or game the system. Here's why
April 28, 2021
A Bombshell Security Suite
We use the Palo Alto NTP suite of products at an organizational level, with the vast majority of our network edge traffic to the internet coming under the scrutiny of the various NTP profiles. It is great because we are able to see very clearly what is being impacted and can tailor the profiles to our policies as needed or completely remove them even without impacting the underlying firewall policy. At a management level, it makes for easy/fast firewall adjustments without sacrificing any of the protection that we need. Adding exceptions are a breeze and the firewalls get their updates on a regular basis without admin intervention.
- Palo Alto NTP allows for a very, very granular approach to protection by the use of profiles. You can tailor as many profiles as you need say for URL Filtering or Malware scanning to accommodate different business needs. Once your profiles are all setup you can choose them to attach to your firewall policies on a policy-by-policy basis. It really couldn't be simpler.
- Very easy to monitor the activity of the profiles in the Monitoring Pane, which makes for agile adjustments or exceptions to be made.
- Some of the deeper features, like making exceptions for virus false-positives can be a little tricky, but I think that is just the nature of the beast. Maybe some guides/tutorials from Palo Alto would help navigate some of that more successfully. Fortunately, we haven't had many of those!
- Ease to implementation and agile management
- Behind the scenes, automatic updating of all NTP databases, some even on an hourly basis
- Great cost-to-value ratio
- We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
- IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)
We ended up with Palo Alto and NTP for a multitude of reasons, including price point, the clean interface, great reporting, and ease of management. NTP specifically covered all our bases and then some over the competition.
November 09, 2017
Threat Review during Implementation
Threat Protection is being used on a multitude of levels- first all Internet traffic has active threat policies for protection from malicious sites and malware. Other locations utilize threat as a sanity check and second source for other IDS/IPS systems. We are continually tuning and working with Palo Alto to better their threat protection capabilities.
- The threat engine has constant updates for important threats.
- Wildfire helps supplement the Threat engine to help protect against 0 day threats.
- The way the threat engine can be added at different levels to different zones and policies helps to ensure business essential traffic can have policies that are tuned to ensure traffic will flow.
- Visibility into signatures and how they function/what triggers them would be very beneficial.
- Lacking customizability compared to other tools.
- Inability to write custom signatures easily and for traffic with small (less than 8 bit) signatures.
- New deployment hasn't been fully calculated yet.
- With the addition of Panorama and central logging, event investigation has become more streamlined.
It is comparable but not as robust as other stand alone IPS/IDS.