Palo Alto Networks AutoFocus

Threat intelligence is the best approach for this tool, recommended if you have Palo alto firewalls on your perimeter as well or if you are familiar with Palo alto products, If you are looking for something more actionable and with more integrations options you might want to search for something else.

Incentivized

• The ability to have quick access to the Palo Alto Networks threat intelligence repository is a big value add
• Each threat is enriched with a lot of contextual information
• Guidance on TI use cases

Incentivized

• Views are cumbersome, you should know what to search and use the input
• It's solely to PaloAlto environment I can't integrate other vendors natively
• Application integrations is limited, you should have your own SOAR to automaion
• Concerns related to privacy, I can't hash some values or variables on the cloud
• Sharing option of the datas with cloud has limited configuration
• It's aimed for strata, I don't see data coming/analyzed or integration for the prisma cloud side.

Incentivized

If you have Palo Alto, autofocus is the selected choice. If you have Checkpoint than the threat cloud. Price of autofocus is much cheaper. Unit42 is the real differentiator. Minemeld is unique to PAN and working perfectly. Search outputs and are detailed and gives lots of data. Integration with SOAR is much easier with autofocus. Indicator list is huge. Tagging works magnificent.

Incentivized

• new attacks mitigation
• less need to hire personal to analyse data
• increase security level

Incentivized