The easy configuration and setup. Support is responsive and knowledgeable. Does not slow down internet connection and protects both inbound and outbound traffic separately.

The ability to ingest, aggregate, and take action based on different threat reputation and open-source feeds using STIX/TAXII and web .txt URLs. This is something only a combination of SIEM/SOAR/UTM/TIP solutions could do. Often this combination focuses on enrichment and IOC hunting, but it was difficult to ever take this information and compile it into a meaningful reputation block list that an NGFW could then ingest and take action with.

We've had a ThreatBlockr device ever since I arrived at my organization almost 7 years ago. It was brought in by my now senior manager and I would never deploy another site without one. This appliance allows such an easy way to do geoblocking, it is incredible, point, click, save. Need to see if the country is blocked? No problem just type it in. Allows me with pinpoint accuracy to adjust what I want in and out of my network before it even gets to my firewall with simple sliders. I get full control over how much risk I want to take with which ASNs. Need to allow some ASN traffic but want to make sure a slight deviation in the threat score blocks it? No problem, you adjust the slider from 0 to 100 or -100. Solid insights on threat levels of malicious IPs/Websites. Whitelist/Blacklisting lists are super simple to use. Plus ThreatBlockr has a ton of out-of-the-box content lists you can link to. I've also dabbled in having a dynamic list linked to a Google doc that I can update an IP or Website I want blocked into the Google doc and it transverses to the policy seamlessly. With the GMC portal I can get single pane of glass review of both my devices across both our ISPs in front of our HA'd firewalls. Support is top-notch as well, which is great, but I've rarely had to use it. Updating is a breeze!