Try our new research platform with insights from 80,000+ expert users
reviewer1428147 - PeerSpot reviewer
Sales Engineer at a security firm with 51-200 employees
Real User
Reliable with good support, but the installation should be simplified
Pros and Cons
  • "Stability is one of the features we like the most."
  • "The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."

What is our primary use case?

We use this solution to secure endpoints and to have more visibility on what is happening on the endpoints.

We have two customers who are using this solution currently.

What needs improvement?

The installation should be easier and the Palo Alto pre-sales and sales should teams have more information on the product because they don't know what they are selling.

They don't know the features of the products they sell.

For example, Cortex XDR includes Cortex XDR Prevent, Cortex XDR Pro, and Cortex XDR Pro per TB. They don't know the real differences between Cortex XDR Pro and Cortex XDR Pro per TB.

Sometimes, they will tell you about features for one edition that belong to another edition. They don't seem to know what features belong to what edition.

For how long have I used the solution?

I have been working with this solution for one month.

We are familiar with Cortex XDR Prevent and Cortex XDR Pro.

What do I think about the stability of the solution?

It's a stable product.

Buyer's Guide
Cortex XDR by Palo Alto Networks
January 2025
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,158 professionals have used our research since 2012.

What do I think about the scalability of the solution?

It's a scalable solution.

How are customer service and support?

Technical support is okay.

How was the initial setup?

The initial setup is complex. It is not easy to install.

We have been deploying this solution for a month, but we are not finished yet.

We only need one engineer for the deployment and maintenance.

What other advice do I have?

I would recommend this solution to anyone who is interested in using it.

I would rate Cortex XDR a seven out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
reviewer2171169 - PeerSpot reviewer
Senior Business Development Manager at a tech services company with 201-500 employees
Real User
Top 20
Efficiently detects any issues
Pros and Cons
  • "This software helps us understand any issues that may arise when someone is not at work."
  • "Dashboards do not allow everyone to see what's happening."

What is our primary use case?

It is used as a device that can detect any issues and changes when people are not at work. In one case, we use it when someone is not at work or has already used their allotted time off. This helps us understand any issues that may arise when someone is not at work, which could lead to changes in the way we work.

What needs improvement?

There are many areas that could use improvement. One thing that is important to keep in mind is that times change, and we need to be adaptable to what happens. Ultimately, we want to see positive results and improvements.

In the next release, I would add dashboards that allow everyone to see what's happening, not just the security team. Users can view the data and see what's happening. Also, I think the Data Lake from Cortex XDR should be public, not private.

For how long have I used the solution?

I have been using the solution for two years.

How was the initial setup?

The initial setup was easy.

What's my experience with pricing, setup cost, and licensing?

The pricing is cheap.

What other advice do I have?

I rate it a nine out of ten.

Which deployment model are you using for this solution?

Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
Buyer's Guide
Cortex XDR by Palo Alto Networks
January 2025
Learn what your peers think about Cortex XDR by Palo Alto Networks. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,158 professionals have used our research since 2012.
reviewer1411233 - PeerSpot reviewer
Security consultant at a computer software company with 1,001-5,000 employees
Real User
Top 20
Sophisticated user interface, stable, and scalable
Pros and Cons
  • "The user interface of the solution is sophisticated and straightforward."
  • "In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution."

What is our primary use case?

We use this solution to protect our computer system against threats, such as exploits and malware.

What is most valuable?

The user interface of the solution is sophisticated and straightforward.

What needs improvement?

In an upcoming release, the solution could improve by proving hard disk encryption. If it could support this it would be a complete solution.

For how long have I used the solution?

I have been using this solution for approximately two months.

What do I think about the stability of the solution?

The solution is stable, we have not had any issues.

What do I think about the scalability of the solution?

We have over 5,000 employees and they are being managed through this solution. It is scalable.

How are customer service and technical support?

We have our own IT support teams.

Which solution did I use previously and why did I switch?

We were previously using McAfee and we switched to this solution because they failed to provide us proper protection.

How was the initial setup?

We have an IT support team in our organization and they are managing everything remotely, such as laptops.

What about the implementation team?

Our internal team did the implementation of the solution.

What other advice do I have?

I would recommend this solution to others.

I rate Cortex XDR by Palo Alto Networks an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1437951 - PeerSpot reviewer
Security Engineer at a tech services company with 11-50 employees
Real User
A robust detection and response solution driven by behavioral analytics
Pros and Cons
  • "The behavior-based detection feature is valuable."
  • "It'll help if customization was easier."

What is our primary use case?

We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities. We also use it to go in and white list things that are okay. This way, they won't get blocked.

What is most valuable?

The behavior-based detection feature is valuable. 

What needs improvement?

It'll help if customization was easier. It would be better than how it's now if it came out of the box using their stock set up to get it up-and-running. Then you go in, and you add more restrictive things to make it better.

For how long have I used the solution?

I have been using Cortex XDR by Palo Alto Networks for a little over a year.

How are customer service and technical support?

Technical support has been fine.

How was the initial setup?

The initial setup isn't straightforward or complex. It's somewhere in the middle. Like 90% of the features are there out of the box. When you start doing more complex things, it becomes more complicated. For example, if we wanted to limit someone's ability to plug in and access a USB stick, we have to create a profile to do that, and that's an advanced functionality.

What about the implementation team?

We did most of the deployment in-house.

What other advice do I have?

On a scale from one to ten, I would give Cortex XDR by Palo Alto Networks a nine.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Consultant at a tech services company with 501-1,000 employees
Reseller
User friendly, stable, and automatically correlates events and logs
Pros and Cons
  • "It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."
  • "It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."

What is our primary use case?

We mainly use it for endpoint protection, exploit prevention, and malware prevention. 

What is most valuable?

It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. 

It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else.

What needs improvement?

It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc.
this is good as an endpoint protection to prevent malware, exploits, zero days, ransomware, botnet etc. For features like Host DLP or encryption or patch management, or any such features which are available in basic anti-virus, you cannot expect it in Palo Alto Network's Cortex XDR solution. rest, all features work as expected, without any lagg or slowness observed in the system.

For how long have I used the solution?

I have been using this solution for a year or something like that. We have been using it from the day they launched or released version 4.0. Currently, they are on version 7.

What do I think about the stability of the solution?

It is stable. I have never faced any kind of issues or never heard from any of my colleagues that they have faced any kind of issue.

What do I think about the scalability of the solution?

There is no problem with scalability. Currently, we have around 150 users. In our company, it is compulsory to install this agent on all systems. If we want to scale it, we just need to install an agent. There is no upgrading the server or the hardware because it is a SaaS service provided by Palo Alto Networks.

How are customer service and technical support?

We directly raise issues with Palo Alto Networks, and they support us. I've never directly created a support query because our IT team looks into support queries, but I think it's pretty easy. You'll never face any kind of issues or challenges in raising support queries.

How was the initial setup?

It was straightforward. In earlier versions, such as version 4.0, it was a bit difficult to install the server and then upgrade the agents and servers. These processes were difficult. There are no complications now.

It took us more than a week to deploy because we were implementing it on the systems of various users who were working from home.

What about the implementation team?

We are a partner of Palo Alto Networks, so we have deployed it directly.

Which other solutions did I evaluate?

We evaluated multiple products. We have evaluated Trend Micro, McAfee, Broadcom Symantec, Sophos, and many other products. Each product is good in its own field. We chose Cortex because we already had a Palo Alto Networks firewall. It got integrated easily, and the co-relation part and the co-relation engine worked very well.

What other advice do I have?

If you are looking for security, mainly for advanced threat prevention from ransomware and malware attacks, I would recommend Cortex. Even if you want to integrate your firewall, I would recommend Cortex, but if you are looking for a single product with multiple options or features, such as DLP, encryption, rollback, and other features, I would not recommend Cortex.

I would rate Cortex XDR a nine out of ten.

Which deployment model are you using for this solution?

Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Assistant PhD at Stefan Cel Mare University of Suceava
Real User
Good technical support , reasonable pricing, and has good detection capabilities
Pros and Cons
  • "Threat identification and detection are the most valuable features of this solution."
  • "I would like to see some additional features related to email protection included."

What is most valuable?

Threat identification and detection are the most valuable features of this solution.

What needs improvement?

I would like the Panorama module included. It's another solution that is provided by Palo Alto and we are interested in that.

I would like to see some additional features related to email protection included.

For how long have I used the solution?

I have been working with Cortex XDR for a year and a half.

How are customer service and technical support?

Technical support is okay.

What's my experience with pricing, setup cost, and licensing?

I don't have any issues with the pricing. We are satisfied with the price.

What other advice do I have?

I would rate Cortex XDR by Palo Alto Networks a ten out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
CyberSecurity Consultant at Information Technology Solutions- ITS
Real User
Top 20
A stable and scalable solution with an easy setup and out-of-the-box playbooks and integration
Pros and Cons
  • "The integrations are out-of-the-box, as are the playbooks."
  • "The solution should offer more dashboards and they should be better customized."

What is our primary use case?

I have deployed some customized playbooks and modified ones which are out-of-the-box with more integration with SIEM solutions such as ArcSight, QRadar, ADRs and Trend Micro.

What needs improvement?

The solution should offer more dashboards and they should be better customized. The case number of items should be addressed. 

I have found the interface of Azure to be more simple and customizable than that of the solution. 

For how long have I used the solution?

I have worked on Cortex XDR by Palo Alto Networks with my customers for a number of weeks. 

What do I think about the stability of the solution?

The stability is good. 

What do I think about the scalability of the solution?

The scalability is fine. 

We have plans to increase the usage. 

How was the initial setup?

The initial setup was simple. 

The deployment took no more than two hours. 

What's my experience with pricing, setup cost, and licensing?

So far, I have made use of the free license which is offered. Once it ended, I was able to buy a license based on the number of users or divisions. The license varies with the number of users or applications involved. 

If one wishes to work with another team or large number of users at a future point, he must purchase a license for them. 

Which other solutions did I evaluate?

The interface of Azure is more simple and customizable than Cortex XDR by Palo Alto Networks.

What other advice do I have?

I have found the solution to be very easy in respect of the integration and configurable. The integrations are out-of-the-box, as are the playbooks. 

The solution is deployed solely on-premises on a single server. 

As of now, there are six users making use of the solution. 

My advice is that the on-premises environments for the product's use should be increased. 

I rate Cortex XDR by Palo Alto Networks as an eight out of ten. 

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1663611 - PeerSpot reviewer
IT manager at a computer software company with 11-50 employees
Reseller
Provides ability to see what's going on with your assets and react to cyber attacks
Pros and Cons
  • "Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised."
  • "It should support more mobile operating systems. That is one of the cons of their infrastructure right now."

What is our primary use case?

I use it for visibility, mitigation, and analysis of advanced threat attacks.

What is most valuable?

Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised.

What needs improvement?

It should support more mobile operating systems. That is one of the cons of their infrastructure right now.

For how long have I used the solution?

I have been using this solution for more than four years.

What do I think about the stability of the solution?

It has been extremely stable.

What do I think about the scalability of the solution?

It is easily scalable. For example, if you have version 2, Palo Alto upgrades it automatically. The agents for your assets are also scalable for new operating systems. So, it is very scalable.

How are customer service and technical support?

Their technical support is very agile and very good. I would rate them a nine out of 10.

How was the initial setup?

It is way too easy to deploy it and set it up.

What other advice do I have?

I would highly recommend it unless you have iOS assets on your network.

I would rate Cortex XDR an eight out of 10.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
Buyer's Guide
Download our free Cortex XDR by Palo Alto Networks Report and get advice and tips from experienced pros sharing their opinions.
Updated: January 2025
Buyer's Guide
Download our free Cortex XDR by Palo Alto Networks Report and get advice and tips from experienced pros sharing their opinions.