TrustRadius Insights
Palo Alto Networks Traps is a highly regarded cybersecurity software that offers robust protection against malware, zero-day exploits, and …
Palo Alto Networks Cortex XDRFormerly Traps
Overview
What is Palo Alto Networks Cortex XDR?
Traps replaces traditional antivirus with multi-method prevention, a proprietary combination of malware and exploit prevention methods that protect users and endpoints from known and unknown threats.
Recent Reviews
Pricing
N/A
Unavailable
What is Palo Alto Networks Cortex XDR?
Traps replaces traditional antivirus with multi-method prevention, a proprietary combination of malware and exploit prevention methods that protect users and endpoints from known and unknown threats.
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
98 people also want pricing
Alternatives Pricing
What is CrowdStrike Falcon?
CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no…
What is Kaspersky EDR Optimum?
Kaspersky Endpoint Detection and Response (EDR) Optimum helps identify, analyze and neutralize evasive threats by providing easy-to-use advanced detection, simplified investigation and automated response. It is a basic EDR tool for mid-market organizations who are just starting to build their…
Product Details
- About
- Tech Details
What is Palo Alto Networks Cortex XDR?
| Traps replaces traditional antivirus with multi-method prevention, a proprietary combination of malware and exploit prevention methods that protect users and endpoints from known and unknown threats. |
Palo Alto Networks Cortex XDR Technical Details
| Operating Systems | Unspecified |
|---|---|
| Mobile Application | No |
Comparisons
Compare with
Reviews and Ratings
(53)
Community Insights
TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!
- Business Problems Solved
Palo Alto Networks Traps is a highly regarded cybersecurity software that offers robust protection against malware, zero-day exploits, and advanced persistent threats. Its seamless integration with the Palo Alto Suite has made it a popular choice among users. The software can be easily installed and used on various devices, including laptops and virtual desktops. Users have praised Traps for its ability to detect grayware, serious malware, and exploit attempts that may be missed by other antivirus solutions like Windows Defender. One of the standout features of Traps is its ability to prevent the execution of malware without requiring a file to be downloaded, providing enhanced protection for users. This next-gen capability, coupled with its ease of use and strong protection, has prompted many customers to replace their existing antivirus solutions with Palo Alto Networks Traps.
Traps has proven itself invaluable in identifying and quarantining threats, as well as isolating future malware and preventing its spread across the network. By integrating Wildfire and host AV, Traps adds additional layers of security to hosts and aids in detecting unknown and zero-day malware. The inclusion of Traps functionality in Palo Alto Networks Cortex XDR further enhances security controls and provides deep visibility into suspicious activities and behaviors exhibited by users. Cortex XDR serves as an Endpoint Response tool that enables organizations to quickly identify and respond to events and incidents across multiple devices.
Users have reported that Palo Alto Networks Traps offers advanced anti-malware detection and prevention with a low false-positive rate, minimizing user annoyance while effectively mitigating the risk of malware attacks, zero-day attacks, and APTs. Its organization-wide deployment ensures comprehensive protection for servers, desktops, and roaming users. With Traps seamlessly integrated into the Palo Alto Suite, manual whitelisting and server updates are no longer necessary. Overall, Palo Alto Networks Traps is widely recognized for its ease of installation, seamless integration capabilities, next-gen features, and robust protection against advanced threats.
Attribute Ratings
Reviews
(1-6 of 6)Companies can't remove reviews or game the system. Here's why
Palo Alto Networks Cortex XDR is used for our in-house as well as roaming users, and we have procured around 200 licenses. With Palo Alto Networks Cortex XDR, we are enabling security controls and also getting insights and deep visibility on our users' suspicious activities and behaviors and securing them from advanced attacks like file-less malware, ransomware, etc.
- Malware prevention
- Exploit prevention
- EDR and XDR
- Ransomware protection
- Disk encryption (with Bit Locker and File Vault)
- Device control features
- Analytics
- Investigation
- Incident management
- Forensics
- NTA--network traffic analysis
- UBA/UEBA--user entity behavior analysis
- Inventory management
- Web controls
- DLP features
December 30, 2021
Palo Alto Cortex XDR is market leader
Score 9 out of 10
Vetted Review
Verified User
Palo Alto Cortex XDR has excellent features which strengthen Security for Endpoint, Cloud and Firewall that can be integrated into a single solution. It has the capability for Digital Forensics and Ransomware Protection as well.
- Antivirus Protection
- Ransomware Protection
- Digital Forensics
- Endpoint Protection
- Cloud Protection
- Device Control
- Drive Encryption
The trap was easy to install and worked well with the Palo Alto Suite overall. Upgrades are seamless because everything is in the cloud. We use traps on all of our devices, including laptops and virtual desktops. They did this to guard against malware, zero-day exploits, and APT attacks. This gives us the ability to triage/investigate right from the home page. It can disclose Gray ware and other serious malware and exploit attempts that Windows Defender misses. Palo Alto Networks Traps can also prevent the execution of malware that does not require a file to be downloaded. We’ll see in the CortexXDR product that Palo Alto Networks has added Traps functionality.
- Some zero-day exploits, malicious child processes, and maliciously hashed files have been successfully blocked by it.
- Analyzing and identifying unknown malicious software on workstations, servers, and mobile devices are made easier with the help of tracking file behavior.
- Panorama's integration helps us detect malicious files and traps more quickly and efficiently than other products we've tried, protecting us from zero-day attacks.
- Traps, like all advanced endpoint protection, need to grow in machine learning/baseline protection.
- Sometimes, exceptions were made because of legacy or custom software issues, and we encountered a bug in an older version of the agent.
- Traps are best for IT environments using COTS reports/dashboards. In environments where custom software and applications are used, Traps necessitate a great deal of tweaking.
October 14, 2021
Endpoint Response Where It Matters
XDR is being used as an Endpoint Response tool. As an EDR we are able to identify events and logs across multiple devices. The nodes on the network display a variety of information that help analyst understand behaviors in the environment. XDR address the problem of security analysts being able to discover, detect, and respond events or incidents involving hosts on the network.
- Direct Access to devices via Live Terminal which provides operations with scripting, triage, and preservation of artifacts.
- Behavioral Indicators of Compromise which provides alerts on events regarding groups of hosts and their signatures.
- Querying complex data sets involving a variety of devices for network connections, hashes, DNS, etc.
- The UI loads a large amount of data from each windows pane requiring users to scroll or modify queries for smaller list of results. The data being presented can be overwhelming and alerting does not always indicate IOCs.
- Performance on XDR tends to fluctuate when running queries and features available don't make the process of hunting any faster.
- Support for the product needs improvement as the product is newer more items are revealed that require attention or resolution.
February 19, 2020
Palo Alto Network Traps make endpoint security simple
We had previously used a local server-based agent before Traps. We have a Palo Alto firewall with subscriptions to URL filtering, Wildfire, and threat prevention so the systems were separated. Traps was an incredibly easy install that integrates with the rest of the Palo Alto Suite. I no longer have to whitelist our old agent and update that server. Everything is cloud-based so updates are seamless.
- Cloud-based.
- Simple to install.
- Email alerts when issues are found not just a daily summary report.
March 14, 2018
Traps for Enterprise is now relity
Traps is being used with Palo Alto Wildfire and host AV to add layers of protection to hosts to assist in finding unknown and 0 day malware. Traps is also used on servers to help provide advanced malware protection. Traps is in pilot across the server infrastructure and production for user workstations. We have evaluated several advanced endpoint protection applications and because of Wildfire integration, it was the product chosen for deployment.
- Great tool to help analyze and identify unknown malicious software on workstations, servers, and mobile devices.
- Integration with Panorama help to quickly and efficiently identify potential malicious files.
- Integration with Wildfire helps to quickly deploy signatures not only to endpoints but to firewalls as well.
- Every advanced endpoint protection, including Traps, needs to grow in the machine learning/baseline of a machine portion of their protection.
- Palo Alto needs to work more with vendors and their updates to help reduce exclusion lists.
- Traps is best for IT environments where COTS is used. Where homegrown software and applications are used, Traps requires a lot of customization.