Cisco IOS Security and Palo Alto Networks Advanced Threat Prevention compete in the network security category. Palo Alto seems to have the upper hand due to its advanced threat detection and user-friendly management.
Features: Cisco IOS Security integrates AAA, VPN, and Zone-Based Firewall into a single platform, suitable for scalability and various enterprise needs. Its comprehensive protections make it ideal for Cisco routers and switches. Palo Alto Networks focuses on advanced threat prevention with its next-generation firewall and WildFire technology, offering detailed application control and URL filtering. Its simplicity in management is a key feature, providing robust malware protection and a user-friendly interface.
Room for Improvement: Cisco IOS Security could enhance its IPS capacity and simplify zone-based firewall management, addressing configuration complexity and reporting tools. Improving WAN connectivity and compatibility with non-Cisco products is advised. Palo Alto Networks needs to improve local technical support and licensing flexibility. The initial setup can be complex, requiring better documentation and DNS functionalities. Further development in machine learning for threat detection is also suggested.
Ease of Deployment and Customer Service: Cisco IOS Security is ideal for on-premises and hybrid environments but has a complex deployment process. Its technical support is knowledgeable but has mixed response times. Palo Alto Networks supports both on-premises and cloud deployments, with a steep learning curve. While customer service is effective, there is room for improvement in technical support speed and localization. Users value the setup guidance provided despite these challenges.
Pricing and ROI: Cisco IOS Security involves high licensing costs, with yearly or multi-year subscriptions that are seen as expensive but provide a good return on investment due to its robust features. It is suitable for medium to large enterprises. Palo Alto Networks is perceived to be expensive, often lacking significant discounts, but offers a satisfactory return on investment for large businesses due to its security effectiveness, despite the high initial investment.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
I rate technical support from Palo Alto as eight out of ten.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
I find Cisco IOS Security to be a very stable product.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
This solution, called Network Access Controller, handles authentication, authorization, and accounting for devices accessing the network.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
| Product | Market Share (%) |
|---|---|
| Palo Alto Networks Advanced Threat Prevention | 5.6% |
| Cisco IOS Security | 1.6% |
| Other | 92.8% |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 14 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 4 |
| Large Enterprise | 15 |
Palo Alto Networks Advanced Threat Prevention is a cloud-based security service that combines cutting-edge technologies, including machine learning, artificial intelligence, and expert human monitoring, to effectively thwart advanced threats like malware, zero-day attacks, and command-and-control threats. It offers inline protection, scrutinizing all network traffic irrespective of port, protocol, or encryption. An integral component of Palo Alto Networks' security platform, it enjoys widespread adoption across diverse organizations. With its robust security capabilities, it's an ideal choice for entities of all sizes, particularly those in high-risk sectors such as finance, healthcare, and government agencies, seeking to safeguard their networks from a broad spectrum of advanced threats.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
