Name: Palo Alto Networks Advanced Threat Prevention
Rating: 8.2 (53 reviews)
Author: Palo Alto Networks

Help Desk

Kiosk

Web and Video Conferencing

Customer Support

Augmented Reality Development

Help Authoring

Software Configuration Management

Development

Business Intelligence (BI)

Collaboration

Digital Rights Management (DRM)

Operational Analytics

Enterprise

Accounting

Budgeting and Forecasting

Tax Compliance

Trust Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Employee Monitoring

Employee Scheduling

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

C/C++ Integrated Development Environments

Cloud Storage

Code Review

Data Catalog

Data Fabric

Data Quality

Data Recovery Service

Dynamic Application Security Testing (DAST)

Fraud Detection

IT Alert Management

Identity Governance and Administration

Integration Platform as a Service (iPaaS)

Low-Code Development

Master Data Management (MDM)

Network Access Control (NAC)

Network Performance Monitoring

Network Traffic Analysis (NTA)

Office Migration and Repair

Software-Defined WAN

Virtual Data Room

Virtual Desktop Infrastructure (VDI)

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Blogging

Content Management

Email Marketing

Enterprise Marketing Management

Local Marketing

Marketing Automation

Screen and Video Capture

Social Media Management

Survey & Forms Building

Video Editing

Web Analytics

Marketing

Project Management

Wireframing

Professional Services

Customer Relationship Management (CRM)

Revenue Operations

Sales

Antivirus

Insider Risk Management

Security Orchestration, Automation and Response (SOAR)

Security

Forestry

Last Mile Delivery

Legal Research

Library Management

Nonprofit CRM

Nonprofit Fundraising

Plagiarism Checker

Real Estate Property Management

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Palo Alto Networks WildFire

Palo Alto Networks

Snort

Cisco

Ubiquiti Networks UniFi

Ubiquiti Networks

Trend Micro TippingPoint

Trend Micro

Microsoft Defender for Endpoint

Microsoft

Fortinet FortiGate

Fortinet

Trellix Intrusion Prevention System

Trellix (FireEye + McAfee)

Cisco Firepower 9300 Series

Cisco Secure IPS

FortiSIEM

Palo Alto Networks Advanced Threat Prevention is an intrusion prevention system (IPS) used to stop zero-day attacks inline in real-time. In addition to the prevention of known threats, the solution helps to stop never-before-seen exploit attempts and command and control with its inline deep learning engines that aims to provide prevention of zero-day injection attacks and evasive command and control.

Palo Alto Networks Advanced Threat Prevention

Intrusion Detection Systems (synonymous with Intrusion Prevention Systems, or IPS) are designed to protect networks, endpoints, and companies from more advanced cyberthreats and attacks. The systems aim to repel intruders or, failing that, reduce attacker dwell time and minimize the potential for damage and data loss.

Intrusion Detection

Likelihood to Recommend

Presales

Palo Alto Networks Threat Protection 2022-01-15 05:47:04

Cisco Adaptive Security Appliance (ASA) Software

Cisco Catalyst 9300 Series Switches, discont

Cisco Catalyst 9800-L, of the 9800 series

Cisco ASA 5500-X with FirePOWER Services

Infrastructure , Network Administrator

Palo Alto Networks Threat Protection 2021-04-23 13:49:41

Palo Alto Networks Prisma Cloud

Digital Guardian

Palo Alto Panorama

Palo Alto Networks Threat Protection 2021-04-21 14:03:41

Arcsight by OpenText

Palo Alto Networks Cortex XDR

FrontStream Panorama

Security Architect

Palo Alto Networks Threat Protection 2017-11-07 09:09:23

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Threat protection

Search function

False positives

Little tricky

Security solutions

Business needs

Easy to monitor

Anti virus

Constant updates

Different levels

Data filtering

Url filtering

Home

Intrusion Detection Systems

We are using Palo Alto Networks Next-Generation firewall along with Threat Protection Module. Palo Alto Networks Threat Protection helps users stay protected from external threats, intruders, vulnerability exploits, and also prevents users from accessing or downloading malicious contents and files, enforces traffic inspection with gateway anti-virus, vulnerability protection, and anti-spyware modules.

Anti virus
Vulnerability protection
Anti spyware

It can ingest feeds from other tools and security solutions
Threat protection should share it intel data with other vendors
Users should be able to allow/bypass or create [their] own signatures from intel shared from SOC team

Vulnerability protection
Gateway anti virus
Anti spyware

After adding PA Threat Protection, we are now getting our network traffic completely inspected.
We are now applying security checks and scans like AV scan and Anti Spyware checks.
This is also giving visibility into threat and attack vectors that are using vulnerabilities and exploits to enter our environment.

SonicWall Capture Advanced Threat Protection (ATP), Fortinet FortiGate and Sophos UTM

SonicWall Analytics, SonicWall NSA Series, SonicWall TZ

We use the Palo Alto NTP suite of products at an organizational level, with the vast majority of our network edge traffic to the internet coming under the scrutiny of the various NTP profiles. It is great because we are able to see very clearly what is being impacted and can tailor the profiles to our policies as needed or completely remove them even without impacting the underlying firewall policy. At a management level, it makes for easy/fast firewall adjustments without sacrificing any of the protection that we need. Adding exceptions are a breeze and the firewalls get their updates on a regular basis without admin intervention.

Palo Alto NTP allows for a very, very granular approach to protection by the use of profiles. You can tailor as many profiles as you need say for URL Filtering or Malware scanning to accommodate different business needs. Once your profiles are all setup you can choose them to attach to your firewall policies on a policy-by-policy basis. It really couldn't be simpler.
Very easy to monitor the activity of the profiles in the Monitoring Pane, which makes for agile adjustments or exceptions to be made.

Some of the deeper features, like making exceptions for virus false-positives can be a little tricky, but I think that is just the nature of the beast. Maybe some guides/tutorials from Palo Alto would help navigate some of that more successfully. Fortunately, we haven't had many of those!

Ease to implementation and agile management
Behind the scenes, automatic updating of all NTP databases, some even on an hourly basis
Great cost-to-value ratio

We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)

Cisco ASA 5500-X with FirePOWER Services and Fortinet FortiGate

Cisco Catalyst 9300 Series Switches, Cisco Catalyst 9800-L Wireless Controller

We utilize almost all facets of the Threat Protection suite including File blocking, Data Filtering, URL filtering, Anti spyware and malware. We have adopted several iterations of these policies with exceptions as needed, but overall we encompassed one Security Profile Group that houses all the threat prevention features under 1 easy profile to attach as a default to new Security Policy rules.

Data filtering.
URL categorization.
File blocking.

Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
Reporting around Threat Prevention suite could be much better.
Possibly a specific threat prevention search function that spans across of threat features.

URL categorization/filtering.
File blocking.
Data filtering.

Threat Protection adds a positive multi layered defense.
Reduces time to review and triage unwanted network connections by implementing Geo Blocking.
Ease of deploying a single Security Group Profile across multiple existing or new rules reduces management time.

Palo Alto Networks Prisma Cloud and Digital Guardian

Threat Protection is being used on a multitude of levels- first all Internet traffic has active threat policies for protection from malicious sites and malware. Other locations utilize threat as a sanity check and second source for other IDS/IPS systems. We are continually tuning and working with Palo Alto to better their threat protection capabilities.

The threat engine has constant updates for important threats.
Wildfire helps supplement the Threat engine to help protect against 0 day threats.
The way the threat engine can be added at different levels to different zones and policies helps to ensure business essential traffic can have policies that are tuned to ensure traffic will flow.

Visibility into signatures and how they function/what triggers them would be very beneficial.
Lacking customizability compared to other tools.
Inability to write custom signatures easily and for traffic with small (less than 8 bit) signatures.

New deployment hasn't been fully calculated yet.
With the addition of Panorama and central logging, event investigation has become more streamlined.

Palo Alto Networks WildFire, Palo Alto Networks Traps and Cisco Sourcefire SNORT

Palo Alto Networks WildFire, Palo Alto Panorama, HP Arcsight

Palo Alto Networks Advanced Threat Prevention

Overview

What is Palo Alto Networks Advanced Threat Prevention?