Palo Alto Networks is a global cybersecurity organization shaping the future of cloud-centric technology. The main business objective is to provide effective cybersecurity solutions, maintaining and valuing the digital way of life. It addresses the significant issue of maintaining digital security in an increasingly online-centric world. The company utilizes innovative approaches leveraging advancements in artificial intelligence, analytics, automation, and orchestration. Offering an integrated platform and bolstering a burgeoning ecosystem of collaborators, it assures protection across various platforms including clouds, networks, and mobile devices. The organization envisions a progressively safe and secure digital world each day.
Do You Manage Peer Insights at Palo Alto Networks?
Access Vendor Portal to update and manage your profile.
- xsoar's flexibility : The playbook engine allows both quick development of simple automations and complex,multi-stage workflows that interact with dozens of third parts systems ,the automation editor,the rest api integrations,and the ability to use python scripts directly inside the platform give a lot of freedom to build custom logic tailored to our environment - the marketplace and content packs : many integrations work out of the box and drastically reduce onboarding time when adding new security tools. Also documentation and community support are generally good, especially for common use cases -The user interface is intuitive for analysts and the platform provides clear visibility over incident lifecycles,enabling faster triage and standardized responses
Logs ingested from the XDR agent do not count towards your license The XSOAR platform is truly very impressive as it gives you the ability to automate and/or orchestrate anything. There's nothing we haven't been able to do so far. During our comparison with other solutions, we found that in terms of detection capabilities, the XDR is truly superior.
The product allows you to build out automation flows and create these playbooks to trigger your automated flows in an easy fashion. The tool allows you to use it for ticketing, so it helps to track alerts that are created in your SIEM. Finally, if you need to create a dashboard to see your metrics, Xsoar makes it very easy to create views that help to convey the data that is in Xsoar.
- Support : Response time can be slow and sometimes the guidance is not fully aligned with the specific issue -Bugs : Some integrations or automations occasionally present bugs or unexpected behaviors, requiring extra troubleshooting or manual fixes - Debbugging Tools : error messages and debugging visibility can be limited
The fact that sometimes it's very slow or even unresponsive.
I can't say I have any dislikes about this tool besides that sometimes there are many options to perform one action that could cause confusion.