Try our new research platform with insights from 80,000+ expert users
Cortex XDR by Palo Alto Networks Logo

Cortex XDR by Palo Alto Networks pros and cons

4.2 out of 5
Badge Leader
1,083 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Traps reduces endpoint attack surfaces with advanced detection capabilities and limits executable launch locations.
Palo Alto Traps effectively increases blocking and reduces false positives by analyzing file behavior.
Palo Alto integrates multiple security solutions seamlessly, providing a robust and effective defense.
Cortex XDR by Palo Alto Networks leverages AI and machine learning for comprehensive threat detection.
Cortex XDR offers strong network security and endpoint protection with high scalability.

CONS

Cortex XDR by Palo Alto Networks lacks real-time antivirus capabilities, making it difficult to manage pre-existing threats efficiently.
There is a severe gap in functionality between Windows, Linux, and Mac versions, with many features being Windows-only.
Cortex XDR by Palo Alto Networks does not integrate well with third-party solutions, leading to operational challenges.
There are issues with false positives, and users find it difficult to manipulate and manage these occurrences.
Support and sales teams for Cortex XDR by Palo Alto Networks have been criticized for a lack of knowledge and responsiveness.
 

Cortex XDR by Palo Alto Networks Pros review quotes

LT
Jan 17, 2019
The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind.
AK
Feb 7, 2019
After deploying Traps, we saw the performance of the network improve by 65 to 70 percent.
Netw9886 - PeerSpot reviewer
Feb 11, 2019
The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
Ahmed Sief - PeerSpot reviewer
Jun 19, 2022
The initial setup is easy.
WA
Jun 30, 2021
I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable.
Mohammad Qaw - PeerSpot reviewer
Dec 15, 2022
From a single pane of glass, you can easily manage all of your endpoints.
it_user1237689 - PeerSpot reviewer
Oct 22, 2020
The initial setup is pretty easy.
OS
Feb 7, 2019
If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies.
GA
Feb 11, 2022
When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud.
reviewer1389378 - PeerSpot reviewer
Aug 8, 2022
The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine.
 

Cortex XDR by Palo Alto Networks Cons review quotes

LT
Jan 17, 2019
Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis.
AK
Feb 7, 2019
There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results.
Netw9886 - PeerSpot reviewer
Feb 11, 2019
There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly.
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
Ahmed Sief - PeerSpot reviewer
Jun 19, 2022
Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded.
WA
Jun 30, 2021
It would be good if they could make an exception for applications. Sometimes, it can be a bit of a challenge to make exceptions for certain applications that have been used as rogue.
Mohammad Qaw - PeerSpot reviewer
Dec 15, 2022
The solution should force customers to integrate with network traffic to see the full benefits of XDR.
it_user1237689 - PeerSpot reviewer
Oct 22, 2020
In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations.
OS
Feb 7, 2019
Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere.
GA
Feb 11, 2022
In general, the price could be more competitive.
reviewer1389378 - PeerSpot reviewer
Aug 8, 2022
It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it.