Cisco NGIPS vs Palo Alto Networks URL Filtering with PAN-DB comparison

Cancel
You must select at least 2 products to compare!
Cisco Logo
2,973 views|1,746 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cisco NGIPS and Palo Alto Networks URL Filtering with PAN-DB based on real PeerSpot user reviews.

Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS).
To learn more, read our detailed Intrusion Detection and Prevention Software (IDPS) Report (Updated: March 2024).
768,578 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The thing about this solution that I like the most is that it's intuitive.""The URL filtering feature and the new locations feature are both valuable additions to the solution.""The tracking intelligence feature is very good. This solution provides us with the opportunity to detect threats in real-time.""I think their fingerprints are good in terms of how they whitelist and blacklist.""Good IPS and VirtualBox features.""The solution is very stable.""The Malware Detection, threat defense, sandboxing, VPN and mail security have all been valuable features of Cisco NGIPS.""We have found the IPS detection to be a very valuable feature of this solution. It is easy to use to stop policy violations."

More Cisco NGIPS Pros →

"Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit.""The Palo Alto solution has improved our organization by providing threat protection across a variety of internet connections. Our company also gets valuable insights regarding threat analysis.""Prohibited URLs can be listed by category.""The initial setup is easy.""It's allowed us to have better visibility and protection from threats.""The most valuable feature is that the product can do everything in a single device, including the firewall, rules, and the PBL. It also has good routing and switching.""Being able to manage blacklists and whitelists easily is very useful, especially for internal access and limiting outbound access."

More Palo Alto Networks URL Filtering with PAN-DB Pros →

Cons
"Cisco NGIPS' performance could be better.""Better integration with other products, such as a SIEM tool, would provide better peer visibility about your security posture.""My opinion is that this solution should improve the pricing.""We would like to see some improvement in the configuration process for this solution, as it is currently quite complex.""Some Next-Generation Firewall solutions come with Intrusion Prevention. It would be nice if Cisco NGIPS included that.""I think the part of IPS and everything else needs to be better equated to the real needs or current needs of the business compared to the other manufacturer, because it is not straightforward, a way to configure it compared to the other competitors.""There are some features not found in Firepower, like data loss prevention, and SSO, to have a connection between Cisco and Active Directory which was introduced on other products.""The solution requires better management. When it comes to central management capabilities, improvements can be made."

More Cisco NGIPS Cons →

"It is an expensive solution and not everyone has the budget for it.""The solution is a bit expensive.""An area for improvement would be the technical support, which can be slow.""Performance monitoring could use improvement.""One way Palo Alto can improve is by offering sandboxing. I don't know if they currently offer a sandboxing feature together with the firewall or not. They should provide secure sandboxing with the firewalls.""We have had some challenges with making Palo Alto Networks URL Filtering with PAN-DB work with ELK stack.""For hosting sites like Blogspot, they host sites that should be in different categories, but get lumped together in general. There needs to be more granularity or multiple categorizations."

More Palo Alto Networks URL Filtering with PAN-DB Cons →

Pricing and Cost Advice
  • "We buy the licensing on a yearly basis, when we renew our contract. It is around $14,000."
  • "The price for additional throughput is the highest in the industry."
  • "Licensing fees for this solution are $3,500 USD, and there are no additional costs."
  • "Cisco products are always expensive, but if you can afford the price then it's a great solution."
  • "Pricing depends on negotiation with the vendor, although I can say that it is moderate."
  • "The cost of the license depends on the level of support that you have with Cisco."
  • "This is an expensive product, with the biggest cost being the license that keeps the service going."
  • "There are licensing fees depending on the features that you are using."
  • More Cisco NGIPS Pricing and Cost Advice →

  • "It is more expensive than ASA but is far cheaper than Checkpoint. So, pricing wise, it is right in the middle."
  • "Expensive, but that's because it provides everything."
  • More Palo Alto Networks URL Filtering with PAN-DB Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    768,578 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product's initial setup phase was easy.
    Top Answer:My company does not use the URL filtering capabilities offered by Cisco NGIPS. My company prefers to use the URL filtering feature offered by a brand other than Cisco since other tools provide an… more »
    Top Answer:Palo Alto Networks URL Filtering with PAN-DB is a great way to keep your network secure and safe from malicious websites. It's my favorite feature because it allows me to easily customize and tailor… more »
    Top Answer:URL Filtering with Palo Alto Networks PAN-DB can help you protect your networks and users from malicious URLs, but it's not perfect. For starters, the database needs to be constantly updated to… more »
    Top Answer:When it comes to URL filtering, Palo Alto Networks URL Filtering with PAN-DB is the way to go. It helps you maintain complete control of your network security by identifying and blocking risky… more »
    Ranking
    Views
    2,973
    Comparisons
    1,746
    Reviews
    25
    Average Words per Review
    329
    Rating
    8.2
    Views
    3,853
    Comparisons
    1,950
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    Also Known As
    Sourcefire NGIPS, Firepower NGIPS
    Palo Alto Networks URL Filtering PAN-DB
    Learn More
    Overview

    Cisco NGIPS (Next-Generation IPS) is a highly effective intrusion detection and prevention solution. It is designed to secure a user’s system from end to end and ensure that users are equipped to handle even the most sophisticated threats by offering them a high level of network visibility, threat intelligence, and security automation. Organizations across a wide variety of industries trust IPS to help them prevent unwanted intrusions from harming their networks.

    Cisco NGIPS Benefits

    Some of the ways that organizations can benefit by choosing to deploy Cisco NGIPS include:

    • Increased visibility. Cisco NGIPS enables users to gain a real-time view of all of the events that are taking place in their network. It gathers data from all corners of the network and uses it to provide organizations with context that can aid them in both proactively keeping themselves safe from harm and reactively addressing potential issues.
    • Increased threat protection. NGIPS’ backbone is the core open Snort technology. This is the most widely used intrusion prevention software on the planet. It leverages this software to search for and detect vulnerabilities and anomalies that might otherwise go unnoticed. IPS is 99.7% effective at stopping threats.
    • Flexibility. NGIPS can be customized so as to fit an organization’s specific security needs. Users can set the system so that it recognizes and seeks out threats that the organization defines as being of the highest level of concern.

    Cisco NGIPS Features

    • Security automation. NGIPS offers users a variety of powerful automation tools that can be leveraged to maximize a network’s protection. Analytics tools automatically examine intrusions and correlate them with known vulnerabilities in a user’s network.
    • Integration suite. NGIPS enables users to integrate their security with many different cloud and application security services. Organizations can seamlessly combine the features that NGIPS offers with other platforms to bolster their effectiveness. This gives users the option to plug any feature hole that they might perceive.
    • URL filter. NGIPS comes with a built-in filter that allows businesses to specify sources that the system should flag and block. This prevents known threats from causing significant harm to an organization’s network.

    Reviews from Real Users

    Cisco NGIPS is a highly effective solution that stands out when compared to many of its competitors. Two major advantages are its easy-to-use GUI interface and the highly effective technical support that it offers users.

    Aankit G., a consultant at Pi DATACENTERS, said, “The FTD has a GUI interface, which is very easy to work around with all the configurations. It is a client-based software based on Java. Now we have the GUI web interface, and it's very interactive and easy to navigate.”

    Gebremichael T., a networking and security engineer at IE Network Solutions PLC, says, “The other aspect that I like is the technical support, who are highly capable. They were very good to us during the times that we used them and they tend to reply immediately to queries, even though you might not get the right engineer to help you right away. Tickets are usually assigned to junior staff at first but they do have escalation procedures, so if the support member can't solve the issue then they will immediately escalate it to higher management.”

    Palo Alto Networks URL Filtering with PAN-DB is an advanced URL filtering solution that provides a way to control web access, as well as how users interact with online content. With this solution, your organization can prevent credential phishing theft by assuming strict control over which sites users can enter their corporate credentials into. Palo Alto Networks Advanced URL Filtering with PAN-DB provides web protection by using URL database capabilities to help you automatically detect and prevent new malicious and targeted web-based threats instantly.

    Palo Alto Networks URL Filtering with PAN-DB Features

    Palo Alto Networks URL Filtering with PAN-DB has many valuable key features. Some of the most useful ones include:

    • Inline protection: Palo Alto Networks URL Filtering with PAN-DB provides inline protection from new malicious web pages by using machine learning to detect and block new threats in milliseconds.
    • Anti-evasion: Palo Alto Networks URL Filtering with PAN-DB analyzes live web content, disrupting attackers and identifying the true nature of malicious sites hiding behind evasive techniques.
    • Phishing protection: By using Palo Alto Networks URL Filtering with PAN-DB, you can spot phishing pages instantly and accurately before they destroy your network.
    • URL database: Palo Alto Networks URL Filtering with PAN-DB has a URL database that maintains hundreds of millions of known malicious and benign URLs categorized through a combination of static, dynamic, machine learning, and human analysis.
    • Criteria matching: With this feature, you can designate multiple policy action types based on URL categories or criteria.

    Palo Alto Networks URL Filtering with PAN-DB Benefits

    There are many benefits to implementing Palo Alto Networks URL Filtering with PAN-DB. Some of the biggest advantages the solution offers include:

    • Eliminates security silos: Palo Alto Networks URL Filtering with PAN-DB gets rid of security silos so you can attain proper security posture and keep users safe.
    • Cloud native: Because Palo Alto Networks URL Filtering with PAN-DB is cloud native, it enables you to easily expand and scale capabilities when necessary.
    • Minimizes operational expenditure: By reducing the need for standalone solutions, Palo Alto Networks URL Filtering with PAN-DB helps your organization decrease operational expenditures.
    • Safeguards against phishing: Palo Alto Networks URL Filtering with PAN-DB enables you to stop credential phishing attempts by offering layers of prevention to protect your organization from known and brand-new phishing sites.
    • Consistent security policies and capabilities: With Palo Alto Networks URL Filtering with PAN-DB, you can deploy advanced URL filtering with hardware appliances, on virtual environments, or in the cloud with the same set of policies and security consistently applied.
    • Increased detection: Detect evasive and targeted attacks by detecting real web traffic and not web crawler data.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the Palo Alto Networks URL Filtering with PAN-DB solution.

    Consultant Michael V. says, “What I really like about PAN and what makes it a worthwhile solution is that rather than having an administrator constantly updating a list of prohibited URLs, you can do it by categories. Every one of these URLs gets meta-tagged as hate speech or antisemitic or pornography, or whatever it is, and when you set up the filter everything that's prohibited by HR policy is there. I don't have to maintain anything, it catches everything.”

    PeerSpot user Darshil S., Consultant at a tech services company, mentions, “The multiple categorizations of URLs are quite helpful. For example, if a URL is a social media website, such as facebook.com, it can be classified at a certain risk level - from high to low.”

    Karthikeyan S., Sr. Cloud Data Architect at Sun Cloud LLC, explains, "Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit."

    Sample Customers
    American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
    TRI-AD, Telkom Indonesia
    Top Industries
    REVIEWERS
    Financial Services Firm19%
    Computer Software Company14%
    Government11%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company19%
    University11%
    Government9%
    Financial Services Firm9%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Financial Services Firm11%
    Government8%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise25%
    Large Enterprise37%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise16%
    Large Enterprise64%
    REVIEWERS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise15%
    Large Enterprise63%
    Buyer's Guide
    Intrusion Detection and Prevention Software (IDPS)
    March 2024
    Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: March 2024.
    768,578 professionals have used our research since 2012.

    Cisco NGIPS is ranked 5th in Intrusion Detection and Prevention Software (IDPS) with 62 reviews while Palo Alto Networks URL Filtering with PAN-DB is ranked 18th in Intrusion Detection and Prevention Software (IDPS). Cisco NGIPS is rated 8.2, while Palo Alto Networks URL Filtering with PAN-DB is rated 8.4. The top reviewer of Cisco NGIPS writes "Very effective for malware and signature-based anomalies but stability needs improvement". On the other hand, the top reviewer of Palo Alto Networks URL Filtering with PAN-DB writes "Provides regular updates with an auto download option; prohibited URLs can be listed by category ". Cisco NGIPS is most compared with Check Point IPS, Fortinet FortiGate IPS, Trend Micro TippingPoint Threat Protection System, Cisco Sourcefire SNORT and Palo Alto Networks Advanced Threat Prevention, whereas Palo Alto Networks URL Filtering with PAN-DB is most compared with Check Point IPS, Fortinet FortiGate IPS, Zscaler Cloud IPS, Palo Alto Networks Advanced Threat Prevention and Trend Micro Deep Discovery.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.