Name: Palo Alto Networks Advanced Threat Prevention
Rating: 8.6 (36 reviews)
Author: Palo Alto Networks

Help Desk

Web and Video Conferencing

Customer Support

Mobile App Development

Product Analytics

Development

Online Proctoring Software

Education

Business Intelligence (BI)

Collaboration

Enterprise Generative AI

Knowledge Management

Partner Relationship Management

Enterprise

Accounting

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Job Board

Payroll

Talent Intelligence

Talent Management

Time Tracking

Workforce Analytics

Workforce Management

Human Resources

Browser

Cloud Cost Management

Cloud Management

Cloud Storage

Consulting and Advisory Services

Data Center Virtualization

Data Warehouse

Distributed Denial of Service (DDoS) Protection

Embedded Business Intelligence (BI)

Enterprise Architecture Management

Enterprise Service Bus

Fraud Detection

Function as a Service (FaaS)

Integration Platform as a Service (iPaaS)

MLOps

Mobile Data Security

Mobile Identity

Monolithic Frame-based Disk Arrays

Network Performance Monitoring

Release Management

Secure Email Gateway

Tower Servers

Information Technology

A/B Testing

AI Writing Assistant Software

Ad Serving & Retargeting

All-in-One Marketing

App Store Optimization (ASO)

Appointment Scheduling

Competitive Intelligence

Content Management

Email Marketing

Event Registration

Heatmap and Session Recording

Marketing Analytics

Marketing Automation

Mobile Advertising

Online Proofing

Social Media Management

Social Media Marketing

Survey & Forms Building

Web Analytics

Marketing

Project Management

Professional Services

Call Recording

Customer Relationship Management (CRM)

Lead Generation Services

Product Configuration

Quote to Cash

Sales

Cloud Infrastructure Entitlement Management

Identity Threat Detection & Response Software

Virtualization Security

Security

Commercial Drone

Construction Workforce Management

Medical Billing

Vertical-Specific

large

medium

Sourcefire developed Snort, an open source intrusion prevention system capable of real-time traffic analysis and packet logging. Snort was acquired (and is now supported) by Cisco in 2013.

Snort

Intrusion Detection

Snort cisco sourcefire snort sourcefire SNORT

Cisco

Palo Alto Network’s WildFire is a malware prevention service. It specializes in addressing zero-day threats through dynamic and static analysis, machine learning, and advanced sandbox testing environments.

Palo Alto Networks WildFire

Security Analytics

Palo Alto Networks

FortiNet FortiGate is a firewall option with high integrability. It offers a variety of deployment options and next-gen firewall capabilities, including integration with IaaS cloud platforms and public cloud environments.

Fortinet FortiGate

Firewall

Identification Technologies

Visualization Tools

Content Inspection

Policy-based Controls

Active Directory and LDAP

Firewall Management Console

Reporting and Logging

High Availability

Stateful Inspection

Proxy Server

Fortinet

small

Ubiquiti Networks in San Jose provides their UniFi wi-fi hotspot technology.

Ubiquiti Networks UniFi

WiFi Hotspot

Ubiquiti Networks

Juniper SRX is a firewall offering. It provides a variety of modular features, scaled for enterprise-level use, based on a 3-in-1 OS that enables routing, switching, and security in each product.

Juniper SRX

Juniper Networks

Top Rated 2024

Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

Standalone

Academic

Microsoft Defender for Endpoint

Endpoint Security

Windows Defender Advanced Threat Protection

Anti-Exploit Technology

Endpoint Detection and Response (EDR)

Centralized Management

Hybrid Deployment Support

Infection Remediation

Vulnerability Management

Malware Detection

Hexadite Microsoft Defender ATP Microsoft Defender for Endpoint Windows Defender Advanced Threat Protection

Microsoft

The TippingPoint Threat Protection System (TPS) from Trend Micro is an intrusion detection and prevention system.

Trend Micro TippingPoint Threat Protection System (TPS)

TippingPoint IPS Trend Micro TippingPoint Threat Protection System (TPS)

Trend Micro

SG-1100

SG-2100

SG-3100

SG-5100

XG-7100-DT

XG-7100-1U

XG-1537

XG-1541

pfSense

Netgate (Rubicon Communications, LLC)

Cisco Secure IPS (formerly Firepower Next-Generation Intrusion Prevention System, or NGIPS) is an intrusion detection response system that produces security data and enhances the analysis by InsightOps. The technology replaces the former Sourcefire 3D IPS. Cisco acquired Sourcefire in 2013.

Cisco Secure IPS

Palo Alto Networks Advanced Threat Prevention is an intrusion prevention system (IPS) used to stop zero-day attacks inline in real-time. In addition to the prevention of known threats, the solution helps to stop never-before-seen exploit attempts and command and control with its inline deep learning engines that aims to provide prevention of zero-day injection attacks and evasive command and control.

Palo Alto Networks Advanced Threat Prevention

Intrusion Detection Systems (synonymous with Intrusion Prevention Systems, or IPS) are designed to protect networks, endpoints, and companies from more advanced cyberthreats and attacks. The systems aim to repel intruders or, failing that, reduce attacker dwell time and minimize the potential for damage and data loss.

Likelihood to Recommend

Reviews

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Threat protection

Search function

False positives

Little tricky

Security solutions

Business needs

Easy to monitor

Anti virus

Constant updates

Different levels

Data filtering

Url filtering

Home

Intrusion Detection Systems

Palo Alto Networks Prisma Cloud

Digital Guardian

Palo Alto Panorama

We utilize almost all facets of the Threat Protection suite including File blocking, Data Filtering, URL filtering, Anti spyware and malware. We have adopted several iterations of these policies with exceptions as needed, but overall we encompassed one Security Profile Group that houses all the threat prevention features under 1 easy profile to attach as a default to new Security Policy rules.

Product Usage

Pros and Cons

Data filtering.
URL categorization.
File blocking.

Things done well

Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
Reporting around Threat Prevention suite could be much better.
Possibly a specific threat prevention search function that spans across of threat features.

Things done poorly

Entire Threat Protection suite works very well together and is relatively easy to set up.  Can get somewhat complicated once you have hundreds of Security policy rule and adding exception in the proper top down location.  Using the Security Profile group feature is a nice way to group some or all of the threat prevention features under one profile to add to new rules vs. adding them individually.

URL categorization/filtering.
File blocking.
Data filtering.

Most Important Features 3.4.21

Threat Protection adds a positive multi layered defense.
Reduces time to review and triage unwanted network connections by implementing Geo Blocking.
Ease of deploying a single Security Group Profile across multiple existing or new rules reduces management time.

Return on Investment

Having used Palo Alto Firewalls for years, implementing threat protection was the next step in perimeter security.  Works much better than the few competitors I have personally used.  Frequent content updates occur which may impact some policy rules, but that is normal across most vendors.

Palo Alto Networks Prisma Cloud and Digital Guardian

Alternatives

Other Software Used

Palo Alto Networks Threat Protection 2021-04-21 14:03:41

We are using Palo Alto Networks Next-Generation firewall along with Threat Protection Module. Palo Alto Networks Threat Protection helps users stay protected from external threats, intruders, vulnerability exploits, and also prevents users from accessing or downloading malicious contents and files, enforces traffic inspection with gateway anti-virus, vulnerability protection, and anti-spyware modules.

Anti virus
Vulnerability protection
Anti spyware

It can ingest feeds from other tools and security solutions
Threat protection should share it intel data with other vendors
Users should be able to allow/bypass or create [their] own signatures from intel shared from SOC team

Palo Alto Networks Threat Protections is the most recommended, basic subscription and module one should get during the time of Palo Alto next-generation firewall. Threat Prevention not only protects your inbound traffic that is originating from over the internet but also helps prevent and stop users accessing malicious content, files, data, etc.

Vulnerability protection
Gateway anti virus
Anti spyware

After adding PA Threat Protection, we are now getting our network traffic completely inspected.
We are now applying security checks and scans like AV scan and Anti Spyware checks.
This is also giving visibility into threat and attack vectors that are using vulnerabilities and exploits to enter our environment.

SonicWall Capture Advanced Threat Protection (ATP), Fortinet FortiGate and Sophos UTM

SonicWall Analytics, SonicWall NSA Series, SonicWall TZ

Presales

Palo Alto Networks Threat Protection 2022-01-15 05:47:04

Operating Systems	Unspecified
Mobile Application	No

Palo Alto Networks Advanced Threat Prevention

Overview

What is Palo Alto Networks Advanced Threat Prevention?

Palo Alto Threat Protection suite provides good layers of protection

Is Palo Alto Threat Prevention or TP subscription a must with Palo Alto Firewall?

A Bombshell Security Suite

Threat Review during Implementation

Product Details

What is Palo Alto Networks Advanced Threat Prevention?

Palo Alto Networks Advanced Threat Prevention Technical Details

Comparisons

Compare with