Palo Alto Networks Advanced Threat Prevention Reviews

Our company uses the solution for IDS and IPS functionality in the signature phase that includes vulnerability and antivirus plus file blocking in the DLP to some extent. 

The signature feed is sent to the firewall based on a schedule we configure. Intervals can go up to every five minutes where the firewall goes to the cloud to get the latest signature feeds. At the same time, there are mission learning capabilities on the firewall that categorize certain non-threats on ports and protocols as malicious traffic before creating the signature. 

We have 30 to 50 resources that use the solution throughout our company. 

The sandboxing tool offers great prevention for cloud feeds.

The solution is granular and able to recognize more applications with respect to firewall inspection.

The new, advanced URL filtering capability has cloud integration that runs analysis and fetches the latest signature categorization.

The solution is very easy to operate. 

We use Palo Alto Networks Threat Prevention to check the traffic pattern.

We must analyze the payload's content. We use security policies to inspect the traffic further passing through the firewalls.

We did implement a security policy, but not with Palo Alto; instead, we used Cisco.

And we created the rules with a single credit fund from us. To overcome that data pack, include this in the inclusion policy.

The solution can be deployed on the cloud or on-premise.

Palo Alto Networks Threat Prevention is the market leader as far as security gateways and endpoint protection. Additionally, the threat database that is used is one of the best.

We implemented the IPS solution and the DNS sinkhole blocking. 

For us, the IPS is very valuable.

It is stable and reliable.

The solution has helpful support.

You can scale the product.

Advanced Threat Prevention is used for detecting and preventing mostly unknown attacks. It utilizes machine learning to detect malware in 90% of cases without assistance from the cloud. 

It acts as inline security, stopping malware quickly by utilizing machine learning and other tools from Palo Alto Networks like virus definitions and behavior analysis of applications or files.

Usually, advanced threat prevention is used for detecting and preventing mostly unknown attacks since it uses machine learning, it can, in 90% of cases, detect malware without asking for help from the cloud. It's considered inline security as the malware can be stopped very quickly.

The solution could benefit from improved AI analytics to predict potential attacks before they occur, similar to NDR systems. Behavioral analytics and a more intuitive engine could also enhance it further.

While it is a powerful tool, it may have a steep learning curve for new users due to its advanced features and configurations. 

I have worked with Palo Alto Networks Advanced Threat Prevention for about five years.

We use the product to protect servers.

Palo Alto Networks Threat Prevention is among the leaders in the Gartner. It is stable and doesn’t have many bugs.

We use the solution for network segregation.

The solution has many automation features.