Palo Alto Networks Cortex XDR

Palo Alto Networks Cortex XDR is one of several layers we use to secure our endpoint devices. Harnessing the power of AI and machine learning, Palo Alto Networks Cortex XDR quickly recognizes and stops threats that may have otherwise gone unnoticed. It also offers the ability to remotely take systems offline while still giving you some level of access to perform forensics or repairs.

• Saves IT time by blocking the installation of many apps that would have otherwise gone unnoticed
• Multi-year contracts allow for more consistent budgeting

Bitdefender Managed Detection and Response (MDR) and SentinelOne Singularity

SolarWinds Service Desk (SSD), N-able N-central, KnowBe4 PhishER/PhishER Plus, KnowBe4 Security Awareness Training, Wasp Inventory

Traps/now Cortex XDR was being used to provide endpoint protection for our servers and desktops. Traps/Cortex XDR was being used organization wide.

• Integration with our firewalls. What a mistake otherwise

• Traps had an agent upgrade get "stuck" that required me to manually reboot servers into safe mode to remediate it. Traps/Cortex ROI is by far negative. I'm pretty well-paid. Requiring multiple hours of my time to remediate your [bad] product entirely destroys any benefit.

Microsoft Defender for Endpoint (formerly Microsoft Defender ATP)

Microsoft Defender for Endpoint

• Tracking file behavior and the ability to prevent the use of zero-day exploits are two of its many strengths.
• Monitoring that is both cloud-based and has a low environmental impact.
• Convenient console operation, as well as quick and painless setup.

• It's less expensive than an onsite server, but it puts more work on the endpoint security teams.
• It adds an extra layer of security for our users and reduces malware outbreaks, which reduces downtime.
• Faster, and Traps give us a lot of information about what processes are running on our endpoints.

CrowdStrike Falcon Endpoint Protection, Kaspersky Endpoint Security and Symantec Advanced Threat Protection

Kaspersky Endpoint Security, Cisco ASA, MS SharePoint, N-able N-central (formerly Solarwinds N-Central)

Palo Alto Networks Cortex XDR is used for our in-house as well as roaming users, and we have procured around 200 licenses. With Palo Alto Networks Cortex XDR, we are enabling security controls and also getting insights and deep visibility on our users' suspicious activities and behaviors and securing them from advanced attacks like file-less malware, ransomware, etc.

• After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
• We are able to track and control granular suspicious and malicious activities.
• Web controls are missing, which if they would have been there would have been very helpful.

CrowdStrike Falcon Endpoint Protection, Trend Micro Apex One (formerly OfficeScan), SonicWall Capture Advanced Threat Protection (ATP) and Sophos Intercept X

CrowdStrike Falcon Endpoint Protection, Sophos Intercept X, Trend Micro Apex One (formerly OfficeScan)

Palo Alto Cortex XDR has excellent features which strengthen Security for Endpoint, Cloud and Firewall that can be integrated into a single solution. It has the capability for Digital Forensics and Ransomware Protection as well.

• Endpoint Protection
• Cloud Protection
• Digital Forensics
• Ransomware Protection

• User Friendly
• Digital Forensics
• Threat Intelligence
• Cloud Protection
• Endpoint Protection
• Easy to Deployment

Trend Micro Apex One (formerly OfficeScan)

Zscaler Internet Access, McAfee Endpoint Security