Item: Palo Alto Networks Cortex XDR
Rating: 9
Author: Darshil Sanghvi

Use Cases and Deployment Scope

Palo Alto Networks Cortex XDR is used for our in-house as well as roaming users, and we have procured around 200 licenses. With Palo Alto Networks Cortex XDR, we are enabling security controls and also getting insights and deep visibility on our users' suspicious activities and behaviors and securing them from advanced attacks like file-less malware, ransomware, etc.

Pros and Cons

Malware prevention
Exploit prevention
EDR and XDR
Ransomware protection
Disk encryption (with Bit Locker and File Vault)
Device control features
Analytics
Investigation
Incident management
Forensics
NTA--network traffic analysis
UBA/UEBA--user entity behavior analysis

Inventory management
Web controls
DLP features

Return on Investment

After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
We are able to track and control granular suspicious and malicious activities.
Web controls are missing, which if they would have been there would have been very helpful.

Alternatives Considered

CrowdStrike Falcon Endpoint Protection, Trend Micro Apex One (formerly OfficeScan), SonicWall Capture Advanced Threat Protection (ATP) and Sophos Intercept X

Compared to all other products, we shortlisted Sophos, Cortex, and CrowdStrike. We are utilizing all of them differently in our multiple divisions and segments to monitor user performance and activities and all the features of these solutions. To date, giving an honest review of Palo Alto Networks Cortex XDR, it is a very stable product in terms of local agent software as well as its cloud console.

Key Insights

Do you think Palo Alto Networks Cortex XDR delivers good value for the price?

Yes

Are you happy with Palo Alto Networks Cortex XDR's feature set?

Yes

Did Palo Alto Networks Cortex XDR live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Palo Alto Networks Cortex XDR go as expected?

Yes

Would you buy Palo Alto Networks Cortex XDR again?

Yes

Other Software Used

CrowdStrike Falcon Endpoint Protection, Sophos Intercept X, Trend Micro Apex One (formerly OfficeScan)

Likelihood to Recommend

Palo Alto Networks Cortex XDR is best suited for all the scenarios, except for OT or for devices that don't have internet connectivity. Especially for in-house or on-premises users, servers, roaming users, users working from home, or even users using their own devices, Palo Alto Networks Cortex XDR can be the best fit as an endpoint protection suite and even as a replacement of current AV.

Palo Alto Networks Cortex XDR--best fit as an endpoint protection suite

Overall Satisfaction with Palo Alto Networks Cortex XDR