G2

Jai P.

Cyber Security Engineer

Security and Investigations

Mid-Market (51-1000 emp.)

11/6/2024

"Unlocking Security Operations automation with Cortex XSOAR"

5/5

What do you like best about Palo Alto Networks Cortex XSOAR?

PAlo alto cortex xsoar comes for both On-Premises and Cloud which makes its implementation easy and best as per needs. It provide the easy and scalable deployment. It have its own threat intelligence Unit 42 through which it correlate the logs and find the threats before attack take place. It comes with marketplace with more than 1000 integrations, only you have to go to marketplace and download the integration which u want and can easily integrate just with one click add instances. When we talk about the customere support , plao alto team provide the support within 30 min for critical issues which is so fast to solve the challenges. XSOAR is used in organization frequently to reduce the chance of attack and take action faster before attack take place. It have predefined reports and playbooks which comes with the content pack in marketplace. Review collected by and hosted on G2.com.

What do you dislike about Palo Alto Networks Cortex XSOAR?

Palo Alto cortex xsoar is fully advanced SOAR solutions with multiple features than others. As the product dont have anything which is dislikes rather than the cost which is little expensive but beacuse of features the cost less as per my views. As i face little challenges in integrating on-premises solution with cortex xsoar cloud. Rather than this this product can make life easier for security analyst to investigate and respond to threat, they not have to switch tab by tab for investigating threats. Review collected by and hosted on G2.com.

What problems is Palo Alto Networks Cortex XSOAR solving and how is that benefiting you?

With the help of palo alto cortex xsoar we are able to take automated response on the sophsticated attacks and threats. Lets take and example of Phising attacks. An employee of my company get the phising mail that alert was generated by Cortex xdr with the help of sendedr email of link in the mail. Th xdr push the alert to cortex xsoar where we will identify whether the mail is really a phising mail of not. To do this we will investigate the alert for that we will go in incident and find the incident of phshing, after clicking on incident we will get thye basic information from the xdr investogation of incident and after going in wok plan we will select a playbook whether it is predefined or we had created before for phising attack that when we will get phising attack what action whould be taken. We will associate that playbook and run the playbook with the help of playbook the incident will b einvestigated and if found phsing than it will get blocked in the organizations. With the help of Cortex xsoar we are able to take response on the incident, threat or attacks which damage the organization before the attack happen. It helps in improving the security posture of my organization and also helps in compliance beacuse it have predefined reports. It also helps in preventing the organization from malicious activities or threats which can damage or occur data breach. Review collected by and hosted on G2.com.