Name: Palo Alto Networks Cortex XDR
Rating: 8.4 (58 reviews)
Author: Palo Alto Networks

Help Desk

Web and Video Conferencing

Customer Support

Chatbot

Development

Classroom Management

Education

Business Intelligence (BI)

Collaboration

Corporate Social Responsibility (CSR)

Email Spam Filter

Enterprise

Accounting

Accounting and Tax Services

Financial Risk Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Diversity, Equity, and Inclusion (DEI)

Employee Recognition

HR Management

Payroll

Recruitment Marketing

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

3D Printers

Application Virtualization

Browser

Cloud Cost Management

Cloud Storage

Content Delivery Networks (CDN)

Disk Cloning

Fraud Detection

IP Address Management (IPAM)

Integration Platform as a Service (iPaaS)

IoT Security

License Management

MLOps

Managed IT Service

Network Performance Monitoring

Network Security

Operating Systems

Secret Managers

Server Virtualization

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Brand Intelligence

Contact Center

Content Management

Email Marketing

Event Management

Marketing Automation

Product Sampling

Social Media Management

Social Media Marketing

Survey & Forms Building

Video

Web Analytics

Marketing

Meeting Room Booking

Project Management

Professional Services

Construction CRM

Customer Relationship Management (CRM)

Intelligent Virtual Assistant

Lead Generation Services

Sales

Database Security

Video Surveillance

Security

Computer-Aided Manufacturing (CAM)

Construction Takeoff and Estimating

Debt Collection

Hotel Management

InsurTech

Lease Management

Multiple Listing Service (MLS)

Population Health Management

Rental Property Management

Vendor Neutral Archive (VNA)

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

CrowdStrike Falcon

CrowdStrike

Darktrace

Splunk Enterprise

Splunk

Sophos Intercept X

Sophos

Microsoft Defender for Endpoint

Microsoft

Microsoft Defender XDR

Bitdefender GravityZone

Bitdefender

Kaspersky Endpoint Security

Kaspersky Lab

Forcepoint Data Loss Prevention

Forcepoint

ESET PROTECT

ESET

### Malware and Ransomware Protection
User consensus seems to be that Palo Alto Networks Cortex XDR excels in malware and ransomware protection capabilities. Reviewers highlight the platform's robust malware detection without relying on existing signatures, its ability to prevent threats that traditional antivirus software may miss, and its effectiveness in detecting and preventing file-less malware. Additionally, users appreciate the platform's proactive approach to testing unknown files and its capability to prevent various types of malware and exploit attempts. Palo Alto Networks Cortex XDR's ransomware protection features are also praised for enhancing overall security posture and ensuring business continuity by safeguarding against ransomware attacks. (Source Reviews: [1](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-traps-2021-12-28-12-04-56), [2](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-04-23-11-40-40), [3](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-06-29-10-56-27), [4](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-10-19-16-18-49), [5](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-04-21-09-38-44))

### Threat Detection and Response
User opinions vary on the threat detection and response capabilities of Palo Alto Networks Cortex XDR. Some users praise its ability to identify and respond to threats effectively, citing features like Live Terminal access and Behavioral Indicators of Compromise as valuable tools for incident response. However, others express concerns about false positives and usability issues with the console interface. Despite differing views, many users acknowledge the potential for growth and improvement in Cortex XDR's threat detection and response functionalities. (Source Reviews: [1](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-traps-2021-12-28-12-04-56), [2](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-10-05-19-48-32), [3](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-04-23-11-40-40), [4](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-10-19-16-18-49), [5](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-06-29-10-56-27), [6](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-03-26-17-32-48), [7](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-04-21-09-38-44), [8](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-02-18-11-38-31))

### Endpoint Protection
Users generally appreciate the comprehensive endpoint protection offered by Palo Alto Networks Cortex XDR. The platform's ability to safeguard devices, including desktops, laptops, and servers, against a wide range of threats such as malware, ransomware, and exploits is highly regarded. While some users have encountered minor issues with agent deployment and performance fluctuations, the overall consensus leans towards the effectiveness of Cortex XDR in enhancing endpoint security. (Source Reviews: [1](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-traps-2021-12-28-12-04-56), [2](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-10-19-16-18-49), [3](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-04-23-11-40-40), [4](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-10-05-19-48-32), [5](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-06-29-10-56-27), [6](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-03-26-17-32-48), [7](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-02-18-11-38-31), [8](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-04-21-09-38-44))

### Device and Server Security
Some users appreciate the cost-effectiveness and ease of integration with other Palo Alto Suite components that Palo Alto Networks Traps offers for endpoint and server security. They find that the cloud-based nature of Traps simplifies updates and reduces the need for manual maintenance tasks associated with traditional on-premise server solutions. However, there are also concerns raised about the increased workload on endpoint security teams due to the additional security layer provided by Traps. Despite these mixed sentiments, many users acknowledge the value of the added security measures in reducing malware outbreaks and enhancing overall system security for both devices and servers. (Source Reviews: [1](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-10-19-16-18-49), [2](https://www.trustradius.com/reviews/palo-alto-networks-traps-2021-04-23-11-40-40), [3](https://www.trustradius.com/reviews/palo-alto-networks-traps-2020-02-18-11-38-31))

### Encryption and Data Protection
Users appreciate Palo Alto Networks Cortex XDR for its robust encryption and data protection features, which contribute significantly to enhancing endpoint and device security. The platform's encryption capabilities, coupled with its data protection functionalities, are consistently praised for their effectiveness in safeguarding sensitive information and preventing unauthorized access. Reviewers emphasize the importance of strong encryption protocols and reliable data protection mechanisms in Palo Alto Networks Cortex XDR, underscoring the platform's commitment to ensuring the confidentiality and integrity of user data. (Source Reviews: [1](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-traps-2021-12-28-12-04-56), [2](https://www.trustradius.com/reviews/palo-alto-networks-cortex-xdr-2021-06-29-10-56-27))

Palo Alto Networks Traps is a highly regarded cybersecurity software that offers robust protection against malware, zero-day exploits, and advanced persistent threats. Its seamless integration with the Palo Alto Suite has made it a popular choice among users. The software can be easily installed and used on various devices, including laptops and virtual desktops. Users have praised Traps for its ability to detect grayware, serious malware, and exploit attempts that may be missed by other antivirus solutions like Windows Defender. One of the standout features of Traps is its ability to prevent the execution of malware without requiring a file to be downloaded, providing enhanced protection for users. This next-gen capability, coupled with its ease of use and strong protection, has prompted many customers to replace their existing antivirus solutions with Palo Alto Networks Traps.

Traps has proven itself invaluable in identifying and quarantining threats, as well as isolating future malware and preventing its spread across the network. By integrating Wildfire and host AV, Traps adds additional layers of security to hosts and aids in detecting unknown and zero-day malware. The inclusion of Traps functionality in Palo Alto Networks Cortex XDR further enhances security controls and provides deep visibility into suspicious activities and behaviors exhibited by users. Cortex XDR serves as an Endpoint Response tool that enables organizations to quickly identify and respond to events and incidents across multiple devices.

Users have reported that Palo Alto Networks Traps offers advanced anti-malware detection and prevention with a low false-positive rate, minimizing user annoyance while effectively mitigating the risk of malware attacks, zero-day attacks, and APTs. Its organization-wide deployment ensures comprehensive protection for servers, desktops, and roaming users. With Traps seamlessly integrated into the Palo Alto Suite, manual whitelisting and server updates are no longer necessary. Overall, Palo Alto Networks Traps is widely recognized for its ease of installation, seamless integration capabilities, next-gen features, and robust protection against advanced threats.

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.

Falcon Pro

Falcon Enterprise

Falcon Go (Small Business)

Kaspersky Endpoint Detection and Response (EDR) Optimum helps identify, analyze and neutralize evasive threats by providing easy-to-use advanced detection, simplified investigation and automated response. It is a basic EDR tool for mid-market organizations who are just starting to build their incident response processes.

Kaspersky EDR Optimum

Palo Alto Networks Cortex XDR

Extended Detection and Response (XDR)

Information Technology & Services

Likelihood to Recommend

Usability

Support Rating

Palo Alto Networks

SolarWinds Service Desk (SSD)

SentinelOne Singularity

Wasp Inventory

N-able N-central

KnowBe4 Security Awareness Training

Managed

KnowBe4 PhishER/PhishER Plus

Bitdefender Managed Detection and Response (MDR)

Palo Alto Networks Cortex XDR 2024-05-01 09:31:42

Information Security Manager

Palo Alto Networks Traps 2021-03-26 17:32:48

Microsoft SharePoint

Symantec Advanced Threat Protection

Falcon

Marketing Product Management

Palo Alto Networks Traps 2021-10-19 16:18:49

Presales

Palo Alto Networks Cortex XDR 2021-06-29 10:56:27

McAfee Total Protection (discontinued)

Trend Vision One Endpoint Security

Zscaler Internet Access

McAfee Endpoint Security (now part of Trellix Endpoint Security)

Sr. Technical Lead

Palo Alto Networks Cortex XDR (Traps) 2021-12-28 12:04:56

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Endpoint protection

Custom software

Machine learning

Security manager

Sales team

Automation platforms

Tech team

Software issues

Previous version

Rest apis

Zero day

Ransomware protection

Mobile devices

Cloud based

Direct access

Virus protection

Simple to install

Via live

Malware detection

Complex data

Home

Extended Detection and Response (XDR) Platforms

Palo Alto Networks Cortex XDR is one of several layers we use to secure our endpoint devices. Harnessing the power of AI and machine learning, Palo Alto Networks Cortex XDR quickly recognizes and stops threats that may have otherwise gone unnoticed. It also offers the ability to remotely take systems offline while still giving you some level of access to perform forensics or repairs.

Endpoint Protection
Detect and Response
Antivirus

Interface can be confusing
An "Admin Bypass" feature to proceed with a false detection would be nice
Better out-of-the-box reporting

Saves IT time by blocking the installation of many apps that would have otherwise gone unnoticed
Multi-year contracts allow for more consistent budgeting

Bitdefender Managed Detection and Response (MDR) and SentinelOne Singularity

SolarWinds Service Desk (SSD), N-able N-central, KnowBe4 PhishER/PhishER Plus, KnowBe4 Security Awareness Training, Wasp Inventory

Traps/now Cortex XDR was being used to provide endpoint protection for our servers and desktops. Traps/Cortex XDR was being used organization wide.

Traps/cortex XDR alerts on wide scale commercial apps that are clearly not malicious
the Cortex XDR console interface is 5 steps worse than simply bad
Frontline support reps are not fluent in spoken English although their written fluency is okay (at best)

Integration with our firewalls. What a mistake otherwise

Traps had an agent upgrade get "stuck" that required me to manually reboot servers into safe mode to remediate it. Traps/Cortex ROI is by far negative. I'm pretty well-paid. Requiring multiple hours of my time to remediate your [bad] product entirely destroys any benefit.

Microsoft Defender for Endpoint (formerly Microsoft Defender ATP)

When nothing goes wrong with agents and there are no alerts, it's a breeze

Agent updates hang which also kills the uninstall password. The only solution is to boot to safe mode to run an uninstall utility
The number of steps it takes to drill into an alert is annoying

The trap was easy to install and worked well with the Palo Alto Suite overall. Upgrades are seamless because everything is in the cloud. We use traps on all of our devices, including laptops and virtual desktops. They did this to guard against malware, zero-day exploits, and APT attacks. This gives us the ability to triage/investigate right from the home page. It can disclose Gray ware and other serious malware and exploit attempts that Windows Defender misses. Palo Alto Networks Traps can also prevent the execution of malware that does not require a file to be downloaded. We’ll see in the CortexXDR product that Palo Alto Networks has added Traps functionality.

Some zero-day exploits, malicious child processes, and maliciously hashed files have been successfully blocked by it.
Analyzing and identifying unknown malicious software on workstations, servers, and mobile devices are made easier with the help of tracking file behavior.
Panorama's integration helps us detect malicious files and traps more quickly and efficiently than other products we've tried, protecting us from zero-day attacks.

Traps, like all advanced endpoint protection, need to grow in machine learning/baseline protection.
Sometimes, exceptions were made because of legacy or custom software issues, and we encountered a bug in an older version of the agent.
Traps are best for IT environments using COTS reports/dashboards. In environments where custom software and applications are used, Traps necessitate a great deal of tweaking.

Tracking file behavior and the ability to prevent the use of zero-day exploits are two of its many strengths.
Monitoring that is both cloud-based and has a low environmental impact.
Convenient console operation, as well as quick and painless setup.

It's less expensive than an onsite server, but it puts more work on the endpoint security teams.
It adds an extra layer of security for our users and reduces malware outbreaks, which reduces downtime.
Faster, and Traps give us a lot of information about what processes are running on our endpoints.

CrowdStrike Falcon Endpoint Protection, Kaspersky Endpoint Security and Symantec Advanced Threat Protection

Kaspersky Endpoint Security, Cisco ASA, MS SharePoint, N-able N-central (formerly Solarwinds N-Central)

Palo Alto Networks Cortex XDR is used for our in-house as well as roaming users, and we have procured around 200 licenses. With Palo Alto Networks Cortex XDR, we are enabling security controls and also getting insights and deep visibility on our users' suspicious activities and behaviors and securing them from advanced attacks like file-less malware, ransomware, etc.

Malware prevention
Exploit prevention
EDR and XDR
Ransomware protection
Disk encryption (with Bit Locker and File Vault)
Device control features
Analytics
Investigation
Incident management
Forensics
NTA--network traffic analysis
UBA/UEBA--user entity behavior analysis

Inventory management
Web controls
DLP features

After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
We are able to track and control granular suspicious and malicious activities.
Web controls are missing, which if they would have been there would have been very helpful.

CrowdStrike Falcon Endpoint Protection, Trend Micro Apex One (formerly OfficeScan), SonicWall Capture Advanced Threat Protection (ATP) and Sophos Intercept X

CrowdStrike Falcon Endpoint Protection, Sophos Intercept X, Trend Micro Apex One (formerly OfficeScan)

Palo Alto Cortex XDR has excellent features which strengthen Security for Endpoint, Cloud and Firewall that can be integrated into a single solution. It has the capability for Digital Forensics and Ransomware Protection as well.

Antivirus Protection
Ransomware Protection
Digital Forensics
Endpoint Protection
Cloud Protection

Endpoint Protection
Cloud Protection
Digital Forensics
Ransomware Protection

Palo Alto Networks Cortex XDR
Formerly Traps

Overview

What is Palo Alto Networks Cortex XDR?