ThreatDown, powered by Malwarebytes vs. Palo Alto Networks Cortex XDR

I would absolutely recommend Malwarebytes Endpoint Protection to a colleague and I have recommended it to many of my peers in the IT world. Malwarebytes is well suited for any environment that requires protection from mal/ransomware which is most companies these days. In particular for companies that host their own big data that the operation of the company relies on. The only place Malwarebytes Endpoint Protection may not be AS appropriate would be one where there is near zero reliance on computers, networks and data.

Incentivized

In a scenario where EDR is a requirement or necessity XDR performs well with or without a SIEM. There are millions of events and logs to parse through and XDR is capable of handling the large load. On top of the large data that is being parsed, features such as Live Terminal, File Retrieval, OS support, and general Metrics, the tool has room to grow and provide a lot for a Security team or organization. Incident Response is a great example of how XDR can shine

Incentivized

• The biggest plus with this software is that you can manage all the clients from a management console. You can push the install/updates through it. If the client cannot connect to the management console, then it will update directly from their website. This means you are always up to date and protected.
• The software on the client machine has very low overhead so it doesn't affect the performance.
• You can create policies based on the types of users or by the department. You can customize these policies so it will let you micro-manage the clients.

Incentivized

• Great tool to help analyze and identify unknown malicious software on workstations, servers, and mobile devices.
• Integration with Panorama help to quickly and efficiently identify potential malicious files.
• Integration with Wildfire helps to quickly deploy signatures not only to endpoints but to firewalls as well.

Incentivized

• poor customer service
• dashboard says product is working EVEN THOUGH IT WAS NOT!
• slow response to concerns that should be easy to remedy
• creates baggage which caused certain computers and the network to run more slowly
• caused 3 computers on our network top have windows errors and network issues

• We encountered some glitch in a certain version of the agent. When we deployed newer version, the policy set on the previous version was white-listed/overwritten.
• Moving to encrypted based connection (communication between agent to server) is troublesome, coz we need to uninstall the agent first.
• Need to have a more flexible reports/dashboard where we can customize it
• We feed Traps log to our SIEM, however the information sent to the SIEM was not complete, but we need to investigate more probably some faults are on us

Incentivized

When I first used the tool in my home systems MANY years ago, I wished for a Business version. I was once at a focus group for a major antivirus company, and one attendee’s feedback to “what could we do better?” was “buy out MalwareBytes and add it to your tool”. I’ve used the Business version since it first became available, and have continued to be a dedicated user through the many iterations and improvements

Incentivized

It simply works. It doesn't require the hand-holding and monitoring that some other solutions do. It's simple to deploy and maintain, and adding custom content such as Exceptions require minimal effort. I’ve had to add a few exceptions for internal-use, in-house-developed tools, but it’s quite simple to do so within the online interface

Incentivized

Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR

Incentivized

Whenever I've had a query for the support team, they have got back to me very quickly, and given me very well detailed advice on fixing whatever the issue I had was. They also pointed me to help documents and such where I could find more information if I needed

Incentivized

The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.

Incentivized

I first implemented this more than 10 years ago, when it required an in-site setup with SQL Server (or SQL Express), and even that was pretty easy. With the move to centralized web management some treats ago, it’s become even easier to deploy

Incentivized

I think Malwarebytes Endpoint Protection is hands down better from any point of view other than price. Malwarebytes is a little bit more costly than Webroot. However, Malwarebytes detects more threats, protects against more malicious URL's, allows more in customization of policies, has better administration GUI, and has better means of implementation.

Incentivized

Traps provided us with a cloud-based platform that made our lives a lot simpler. Nothing like Traps exists in the market and I've never used anything like it. Others, on the other hand, were a lot slower to respond. Malwarebytes and other enterprise-level malware software are also available, but they do not fall under the same heading.

Incentivized

• Other than over billing our company by $6,821.76, our clients are very happy with our approach to network security and malware protection
• Our service and lack of data breaches (do in part to Malwarebytes) has allowed us to retain our client base for over two decades.

• Traps has paid for itself in time saved re-imaging PCs to clean them
• Traps gives us a lot of good insight on what's being run on our endpoints
• Traps is a great extra layer of security for our end users and minimizes malware outbreaks, which in turn minimizes downtime

Incentivized