No more typing reviews! Try our Samantha, our new voice AI agent.

Fortra's Tripwire Enterprise vs Palo Alto Networks Advanced Threat Prevention comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortra's Tripwire Enterprise
Ranking in Intrusion Detection and Prevention Software (IDPS)
18th
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
8
Ranking in other categories
No ranking in other categories
Palo Alto Networks Advanced...
Ranking in Intrusion Detection and Prevention Software (IDPS)
9th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
29
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Fortra's Tripwire Enterprise is 2.2%, up from 1.0% compared to the previous year. The mindshare of Palo Alto Networks Advanced Threat Prevention is 4.8%, down from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks Advanced Threat Prevention4.8%
Fortra's Tripwire Enterprise2.2%
Other93.0%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2093205 - PeerSpot reviewer
Senior Cybersecurity Analyst at a energy/utilities company with 1,001-5,000 employees
It has excellent scalability and allows you to execute custom COCR rules, letting you fine-tune agent monitoring
I'm using Tripwire Enterprise version 9.0. In my company, thirty to forty people use Tripwire Enterprise, mainly different types of engineers, governance, risk, compliance, and cybersecurity personnel. I advise people planning to use Tripwire Enterprise to take the training because the solution has a fairly complex interface. You can do a lot of work with it, but it isn't very easy. Tripwire Enterprise is a sophisticated tool. I rate the tool an eight on a scale of one to ten because it does an excellent job of handling the unique challenges of maintaining NERC CIP compliance and monitoring industrial controls.
Partha Dash - PeerSpot reviewer
Global Network Tech Lead at a tech vendor with 10,001+ employees
Advanced protection enables us to confidently secure against evolving threats
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to protect against those types of threats, as AI will be there to do a human job; this is an evolving area. From an Advanced Threat Protection perspective, the technology associated with Palo Alto Networks, such as their sandboxing environment, is quite good. However, Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations. While Palo Alto excels in certain setups, they need to improve the user experience in distributed working conditions.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its reporting features are great, it gives you an in-depth report, its customization is also great, and it is working fine."
"The product supports different platforms."
"The most valuable feature is integrity management. I had some discussions with service providers, and they also agreed."
"Even if you change a single word in Notepad, it will let you know whether it was added, removed, or modified."
"What's most valuable in Tripwire Enterprise is the ability to execute custom COCR rules that lets me fine-tune how I monitor Linux and Windows agents."
"Its reporting features are great. It gives you an in-depth report. Its customization is also great, and it is working fine."
"The most valuable feature is the integrity."
"The most valuable feature is the integrity, because if the file configuration has been modified this solution calculates a hash code of the file and, if someone has changed the file, the solution will recalculate the hash and the admin receives a notice that the file has been modified, by sending an email or an alert to the administrator that someone has modified, added, or deleted a line, not just in files but also in tables metadata and network device configurations."
"The most valuable feature of Palo Alto Threat Prevention for our company is the next generation firewall."
"The stability of Palo Alto Networks Threat Prevention is good."
"It effectively prevents malware, ransomware, and other attacks."
"After three years, we haven't had any issues or concerns with our environment."
"You can scale the product."
"For those who want a next-gen firewall that's easy to configure and easy to operate, I think you should go for Palo Alto."
"Edge protection is a valuable feature."
"The solution is very good, especially compared to other solutions."
 

Cons

"The Windows online integration license needs to be improved."
"The stability of Tripwire Enterprise has room for improvement, but it's about 75% what it should be already."
"It needs more local support from the OEM side."
"Cloud monitoring could be better. It would also be better if the company followed a pay-as-you-use model."
"The main way that it can be improved is through better reporting."
"A lot of network devices need a custom integration."
"It needs more local support from the OEM side. It would be great if this can be improved."
"The deployment with certain systems can be difficult and it needs to be simplified."
"I think they can use some improvement on FID."
"The documentation needs to be improved. I need better information about how to configure it and what the best practices are."
"Right now we are focusing on email. If Palo Alto can increase the features related to email filtering and the new malware, it would help us protect our systems."
"Palo Alto's maintenance needs to be improved."
"The solution needs to improve its local technical support services. There is no premium support offered in our market."
"The documentation needs to be improved. I need better information about how to configure it and what the best practices are."
"Generally, to deploy it will take some downtime, about a day."
"The cost involves the price of the hardware, which is expensive. However, most of the Palo Alto solutions are expensive."
 

Pricing and Cost Advice

"Tripwire is more expensive than Netwrix."
"Cloud monitoring could be better. It could also be cheaper. It would be better if the company followed a pay-as-you-use model."
"The licensing depends on the equipment, how many devices and the types of devices."
"There is an initial, expensive investment but the return is good."
"The product’s pricing is expensive for small companies."
"It's not too expensive."
"If you want to have all of the good features then you have to pay extra for licensing."
"The pricing could be lower."
"The cost involves the price of the hardware, which is expensive. However, most of the Palo Alto solutions are expensive."
"From one to ten, with one being the most expensive, I would rate the pricing of Palo Alto Networks Threat Prevention a one out of ten. It is my understanding that Palo Alto Networks Threat Prevention is the most expensive one."
"The pricing and the licensing are pretty competitive at this stage. As a reseller, I would like to see the price come down a little bit so I can compete better against other firewalls because we do that all the time."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
886,719 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Manufacturing Company
11%
Financial Services Firm
9%
Comms Service Provider
6%
Financial Services Firm
10%
Performing Arts
7%
Manufacturing Company
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise3
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise14
 

Questions from the Community

Ask a question
Earn 20 points
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would prefer Arbor.
What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate ( /products/fortinet-fortigate-reviews ) fi...
What needs improvement with Palo Alto Networks Threat Prevention?
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to prot...
 

Overview

 

Sample Customers

1. Aetna 2. Adobe 3. ADP 4. Airbus 5. Amazon 6. American Express 7. Aon 8. ATT 9. Bank of America 10. Barclays 11. Baxter International 12. Bechtel 13. Boeing 14. Cisco Systems 15. CocaCola 16. Comcast 17. Dell 18. ETRADE 19. ExxonMobil 20. Ford Motor Company 21. General Electric 22. General Motors 23. Google 24. JPMorgan Chase 25. Kraft Foods 26. Lockheed Martin 27. McDonald's 28. Merck 29. Microsoft 30. Morgan Stanley 31. Nike 32. Oracle
University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
Find out what your peers are saying about Fortra's Tripwire Enterprise vs. Palo Alto Networks Advanced Threat Prevention and other solutions. Updated: April 2026.
886,719 professionals have used our research since 2012.