Bitdefender GravityZone vs. Palo Alto Networks Cortex XDR

It just works. I have seen multiple viruses and malware get past other antivirus software like TrendMicro, Webroot, and Kaspersky. Bitdefender GravityZone always catches what others miss. It has a very light footprint when it comes to system resources. The centralized management console is nice, but I prefer the console before they redesigned the UI.

Incentivized

In a scenario where EDR is a requirement or necessity XDR performs well with or without a SIEM. There are millions of events and logs to parse through and XDR is capable of handling the large load. On top of the large data that is being parsed, features such as Live Terminal, File Retrieval, OS support, and general Metrics, the tool has room to grow and provide a lot for a Security team or organization. Incident Response is a great example of how XDR can shine

Incentivized

• The Gravity Zone console is quite easy to use, particularly if the person assigned to implement and deploy have a good understanding of how to make it work to get at the information needed.
• The Dashboard is customizable to get at the information needed in one location.
• Pushing tasks across the network is quite easy.
• Having said the what is available in gravity zone, it is easy to see what devices have activity that frequently result in quarantines. This allows us to address "misuse" of our devices. Which brings me to my final point...
• The policies can be set up to lock devices down with very strict rules (such as device locking) or with relaxed policies.

Incentivized

• Great tool to help analyze and identify unknown malicious software on workstations, servers, and mobile devices.
• Integration with Panorama help to quickly and efficiently identify potential malicious files.
• Integration with Wildfire helps to quickly deploy signatures not only to endpoints but to firewalls as well.

Incentivized

• I wish we could access logs from the cloud-based product. Not just in a viewable sense but from a download so that we can scrape them for interesting strings.
• Bitdefender needs to make it easier to export data from the web interface. As it stands now, it's a time-consuming copy and paste activity.
• I would like for there to a notification service when someone encounters malware. For example, an email to our IT team when someone's Bitdefender quarantines a file.

Incentivized

• We encountered some glitch in a certain version of the agent. When we deployed newer version, the policy set on the previous version was white-listed/overwritten.
• Moving to encrypted based connection (communication between agent to server) is troublesome, coz we need to uninstall the agent first.
• Need to have a more flexible reports/dashboard where we can customize it
• We feed Traps log to our SIEM, however the information sent to the SIEM was not complete, but we need to investigate more probably some faults are on us

Incentivized

It works. I rely heavily on my vendors to provide a product that works, is easy to implement, and that they support. As well as be a decent value for the money

Incentivized

The console is easy to use, but has grown to have a lot of functionality. The only challenge is that all functions (even disabled and not installed ones) are shown. It would be great if only the functions that are active would be visible.

Incentivized

Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR

Incentivized

Yes its very available. The software continues to protect you even if you are offline. It constantly runs in the background and will check for updates again once back online.

Incentivized

The console is quite fast and responsive, and once you start to get used to it, it is easy to use and you can see the main dashboard status at a glance. You can then dig deeper into the individual Companies / Endpoint clients and check the status of each. The software itself is not heavy on system resources in each PC.

Incentivized

Support is an area Bitdefender has always struggled with. While their products work great, the GravityZone dashboard is very technical in nature. If you aren't IT inclined, it could be difficult to setup. While most times support is helpful, we tend to work with them over email because of their very thick accent, they are hard to understand over the phone.

Incentivized

The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.

Incentivized

The trainer went through everything in the console an showed me what each setting did. If I had any questions on how to do something, he showed me where to go and how to do it. The trainer was very helpful and knowledgeable, and also professional and patient. Highly recommended.

Incentivized

The trainer went through everything in the console an showed me what each setting did. If I had any questions on how to do something, he showed me where to go and how to do it. The trainer was very helpful and knowledgeable, and also professional and patient. Highly recommended.

Incentivized

Bitdefender offered the largest number of tools with the smallest footprint of any providers we have tested and used. The cloud platform is very well thought out and will give us all the information we need very quickly. Resources required have been greatly reduced, both on Endpoints and in the day-to-day management of the product. We also gained Patch management and vulnerability scanning as part of the switch, which has enabled us to keep on top of updates, making the environment more secure.

Incentivized

Traps provided us with a cloud-based platform that made our lives a lot simpler. Nothing like Traps exists in the market and I've never used anything like it. Others, on the other hand, were a lot slower to respond. Malwarebytes and other enterprise-level malware software are also available, but they do not fall under the same heading.

Incentivized

I give it this rating because one you have the console running, you can add or remove whole companies, add computer endpoints (and remove them), and easily create and deploy endpoint packages to the machines that need the software. Once installed, the software starts to report back to the Bitdefender servers and the number of active licences is then seen and billed.

Incentivized

• Estimating the ROI with Bitdefender [GravityZone] is rather difficult. While there is an obvious cost to using Bitdefender [GravityZone] (via a monthly or yearly subscription fee for each device being protected), it is hard to estimate the cost of if a computer or computers become infected via a piece of malware. In the best-case scenario, a single computer becomes infected with a relatively benign piece of malware that can be removed after infection; in a worst-case scenario, an entire infrastructure is infected by ransomware completely crippling an organization.
• Since implementing Bitdefender [GravityZone] across multiple organizations, not a single one has [added] a malware outbreak.
• The initial cost of setup and the cost of maintenance is more than worth it for if nothing more than peace of mind.

Incentivized

• Traps has paid for itself in time saved re-imaging PCs to clean them
• Traps gives us a lot of good insight on what's being run on our endpoints
• Traps is a great extra layer of security for our end users and minimizes malware outbreaks, which in turn minimizes downtime

Incentivized