Cisco NGIPS vs Palo Alto Networks URL Filtering with PAN-DB comparison

Cancel
You must select at least 2 products to compare!
Cisco Logo
2,973 views|1,746 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cisco NGIPS and Palo Alto Networks URL Filtering with PAN-DB based on real PeerSpot user reviews.

Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS).
To learn more, read our detailed Intrusion Detection and Prevention Software (IDPS) Report (Updated: March 2024).
768,740 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature of Cisco NGIPS is its protection.""The solution is stable. This is one of the good things in Firepower. Especially if we use ESE with it.""The technical support is impressive.""The most valuable feature of this solution is its modularity, so whenever you need to upgrade or add another service, you don't need to buy another box.""NGIPS lets you map web requests to a specific user to determine who is downloading files and what they are accessing. You can use it to identify users downloading malware or track time wasters using Facebook or something like that. It gives you visibility into what your users are doing on the Internet.""I've found the performance and stability to be the most valuable features of Cisco NGIPS. It is scalable as well.""The top features of Cisco NGIPS, which have been working very well, include stateful inspection and the access list-based security configuration. But from my perspective, the best part of Cisco NGIPS is the licensing process, which is very easy and straightforward. It's essentially copy-paste licensing.""Cisco NGIPS is a stable tool...The technical support provided by Cisco NGIPS is okay."

More Cisco NGIPS Pros →

"Prohibited URLs can be listed by category.""The Palo Alto solution has improved our organization by providing threat protection across a variety of internet connections. Our company also gets valuable insights regarding threat analysis.""Being able to manage blacklists and whitelists easily is very useful, especially for internal access and limiting outbound access.""The most valuable feature is that the product can do everything in a single device, including the firewall, rules, and the PBL. It also has good routing and switching.""The initial setup is easy.""Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit.""It's allowed us to have better visibility and protection from threats."

More Palo Alto Networks URL Filtering with PAN-DB Pros →

Cons
"I would like to see the sanctions lifted so we could use the full solution and have the speed increased.""They could provide one solution to fit all the use cases.""In the next release I would like to see better reporting. I also find it's hard to act on the data it gives you.""Should include additional security features.""My opinion is that this solution should improve the pricing.""I would like to see Cisco NGIPS to include home office support in one single product.""The attack patterns and payloads go undetected in Cisco. We would like to see a new solution with more effective detection of attack patterns. There should be more data analyzing patterns as well which provides useful information.""The aspect of private party integration solutions could be improved."

More Cisco NGIPS Cons →

"It is an expensive solution and not everyone has the budget for it.""An area for improvement would be the technical support, which can be slow.""The solution is a bit expensive.""Performance monitoring could use improvement.""One way Palo Alto can improve is by offering sandboxing. I don't know if they currently offer a sandboxing feature together with the firewall or not. They should provide secure sandboxing with the firewalls.""For hosting sites like Blogspot, they host sites that should be in different categories, but get lumped together in general. There needs to be more granularity or multiple categorizations.""We have had some challenges with making Palo Alto Networks URL Filtering with PAN-DB work with ELK stack."

More Palo Alto Networks URL Filtering with PAN-DB Cons →

Pricing and Cost Advice
  • "We buy the licensing on a yearly basis, when we renew our contract. It is around $14,000."
  • "The price for additional throughput is the highest in the industry."
  • "Licensing fees for this solution are $3,500 USD, and there are no additional costs."
  • "Cisco products are always expensive, but if you can afford the price then it's a great solution."
  • "Pricing depends on negotiation with the vendor, although I can say that it is moderate."
  • "The cost of the license depends on the level of support that you have with Cisco."
  • "This is an expensive product, with the biggest cost being the license that keeps the service going."
  • "There are licensing fees depending on the features that you are using."
  • More Cisco NGIPS Pricing and Cost Advice →

  • "It is more expensive than ASA but is far cheaper than Checkpoint. So, pricing wise, it is right in the middle."
  • "Expensive, but that's because it provides everything."
  • More Palo Alto Networks URL Filtering with PAN-DB Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    768,740 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product's initial setup phase was easy.
    Top Answer:My company does not use the URL filtering capabilities offered by Cisco NGIPS. My company prefers to use the URL filtering feature offered by a brand other than Cisco since other tools provide an… more »
    Top Answer:Palo Alto Networks URL Filtering with PAN-DB is a great way to keep your network secure and safe from malicious websites. It's my favorite feature because it allows me to easily customize and tailor… more »
    Top Answer:URL Filtering with Palo Alto Networks PAN-DB can help you protect your networks and users from malicious URLs, but it's not perfect. For starters, the database needs to be constantly updated to… more »
    Top Answer:When it comes to URL filtering, Palo Alto Networks URL Filtering with PAN-DB is the way to go. It helps you maintain complete control of your network security by identifying and blocking risky… more »
    Ranking
    Views
    2,973
    Comparisons
    1,746
    Reviews
    25
    Average Words per Review
    329
    Rating
    8.2
    Views
    3,853
    Comparisons
    1,950
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    Also Known As
    Sourcefire NGIPS, Firepower NGIPS
    Palo Alto Networks URL Filtering PAN-DB
    Learn More
    Overview

    Cisco NGIPS (Next-Generation IPS) is a highly effective intrusion detection and prevention solution. It is designed to secure a user’s system from end to end and ensure that users are equipped to handle even the most sophisticated threats by offering them a high level of network visibility, threat intelligence, and security automation. Organizations across a wide variety of industries trust IPS to help them prevent unwanted intrusions from harming their networks.

    Cisco NGIPS Benefits

    Some of the ways that organizations can benefit by choosing to deploy Cisco NGIPS include:

    • Increased visibility. Cisco NGIPS enables users to gain a real-time view of all of the events that are taking place in their network. It gathers data from all corners of the network and uses it to provide organizations with context that can aid them in both proactively keeping themselves safe from harm and reactively addressing potential issues.
    • Increased threat protection. NGIPS’ backbone is the core open Snort technology. This is the most widely used intrusion prevention software on the planet. It leverages this software to search for and detect vulnerabilities and anomalies that might otherwise go unnoticed. IPS is 99.7% effective at stopping threats.
    • Flexibility. NGIPS can be customized so as to fit an organization’s specific security needs. Users can set the system so that it recognizes and seeks out threats that the organization defines as being of the highest level of concern.

    Cisco NGIPS Features

    • Security automation. NGIPS offers users a variety of powerful automation tools that can be leveraged to maximize a network’s protection. Analytics tools automatically examine intrusions and correlate them with known vulnerabilities in a user’s network.
    • Integration suite. NGIPS enables users to integrate their security with many different cloud and application security services. Organizations can seamlessly combine the features that NGIPS offers with other platforms to bolster their effectiveness. This gives users the option to plug any feature hole that they might perceive.
    • URL filter. NGIPS comes with a built-in filter that allows businesses to specify sources that the system should flag and block. This prevents known threats from causing significant harm to an organization’s network.

    Reviews from Real Users

    Cisco NGIPS is a highly effective solution that stands out when compared to many of its competitors. Two major advantages are its easy-to-use GUI interface and the highly effective technical support that it offers users.

    Aankit G., a consultant at Pi DATACENTERS, said, “The FTD has a GUI interface, which is very easy to work around with all the configurations. It is a client-based software based on Java. Now we have the GUI web interface, and it's very interactive and easy to navigate.”

    Gebremichael T., a networking and security engineer at IE Network Solutions PLC, says, “The other aspect that I like is the technical support, who are highly capable. They were very good to us during the times that we used them and they tend to reply immediately to queries, even though you might not get the right engineer to help you right away. Tickets are usually assigned to junior staff at first but they do have escalation procedures, so if the support member can't solve the issue then they will immediately escalate it to higher management.”

    Palo Alto Networks URL Filtering with PAN-DB is an advanced URL filtering solution that provides a way to control web access, as well as how users interact with online content. With this solution, your organization can prevent credential phishing theft by assuming strict control over which sites users can enter their corporate credentials into. Palo Alto Networks Advanced URL Filtering with PAN-DB provides web protection by using URL database capabilities to help you automatically detect and prevent new malicious and targeted web-based threats instantly.

    Palo Alto Networks URL Filtering with PAN-DB Features

    Palo Alto Networks URL Filtering with PAN-DB has many valuable key features. Some of the most useful ones include:

    • Inline protection: Palo Alto Networks URL Filtering with PAN-DB provides inline protection from new malicious web pages by using machine learning to detect and block new threats in milliseconds.
    • Anti-evasion: Palo Alto Networks URL Filtering with PAN-DB analyzes live web content, disrupting attackers and identifying the true nature of malicious sites hiding behind evasive techniques.
    • Phishing protection: By using Palo Alto Networks URL Filtering with PAN-DB, you can spot phishing pages instantly and accurately before they destroy your network.
    • URL database: Palo Alto Networks URL Filtering with PAN-DB has a URL database that maintains hundreds of millions of known malicious and benign URLs categorized through a combination of static, dynamic, machine learning, and human analysis.
    • Criteria matching: With this feature, you can designate multiple policy action types based on URL categories or criteria.

    Palo Alto Networks URL Filtering with PAN-DB Benefits

    There are many benefits to implementing Palo Alto Networks URL Filtering with PAN-DB. Some of the biggest advantages the solution offers include:

    • Eliminates security silos: Palo Alto Networks URL Filtering with PAN-DB gets rid of security silos so you can attain proper security posture and keep users safe.
    • Cloud native: Because Palo Alto Networks URL Filtering with PAN-DB is cloud native, it enables you to easily expand and scale capabilities when necessary.
    • Minimizes operational expenditure: By reducing the need for standalone solutions, Palo Alto Networks URL Filtering with PAN-DB helps your organization decrease operational expenditures.
    • Safeguards against phishing: Palo Alto Networks URL Filtering with PAN-DB enables you to stop credential phishing attempts by offering layers of prevention to protect your organization from known and brand-new phishing sites.
    • Consistent security policies and capabilities: With Palo Alto Networks URL Filtering with PAN-DB, you can deploy advanced URL filtering with hardware appliances, on virtual environments, or in the cloud with the same set of policies and security consistently applied.
    • Increased detection: Detect evasive and targeted attacks by detecting real web traffic and not web crawler data.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the Palo Alto Networks URL Filtering with PAN-DB solution.

    Consultant Michael V. says, “What I really like about PAN and what makes it a worthwhile solution is that rather than having an administrator constantly updating a list of prohibited URLs, you can do it by categories. Every one of these URLs gets meta-tagged as hate speech or antisemitic or pornography, or whatever it is, and when you set up the filter everything that's prohibited by HR policy is there. I don't have to maintain anything, it catches everything.”

    PeerSpot user Darshil S., Consultant at a tech services company, mentions, “The multiple categorizations of URLs are quite helpful. For example, if a URL is a social media website, such as facebook.com, it can be classified at a certain risk level - from high to low.”

    Karthikeyan S., Sr. Cloud Data Architect at Sun Cloud LLC, explains, "Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit."

    Sample Customers
    American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
    TRI-AD, Telkom Indonesia
    Top Industries
    REVIEWERS
    Financial Services Firm19%
    Computer Software Company14%
    Government11%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company19%
    University11%
    Government9%
    Financial Services Firm9%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Financial Services Firm11%
    Government8%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise25%
    Large Enterprise37%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise16%
    Large Enterprise64%
    REVIEWERS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise15%
    Large Enterprise62%
    Buyer's Guide
    Intrusion Detection and Prevention Software (IDPS)
    March 2024
    Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: March 2024.
    768,740 professionals have used our research since 2012.

    Cisco NGIPS is ranked 5th in Intrusion Detection and Prevention Software (IDPS) with 62 reviews while Palo Alto Networks URL Filtering with PAN-DB is ranked 18th in Intrusion Detection and Prevention Software (IDPS). Cisco NGIPS is rated 8.2, while Palo Alto Networks URL Filtering with PAN-DB is rated 8.4. The top reviewer of Cisco NGIPS writes "Very effective for malware and signature-based anomalies but stability needs improvement". On the other hand, the top reviewer of Palo Alto Networks URL Filtering with PAN-DB writes "Provides regular updates with an auto download option; prohibited URLs can be listed by category ". Cisco NGIPS is most compared with Check Point IPS, Fortinet FortiGate IPS, Trend Micro TippingPoint Threat Protection System, Cisco Sourcefire SNORT and Palo Alto Networks Advanced Threat Prevention, whereas Palo Alto Networks URL Filtering with PAN-DB is most compared with Check Point IPS, Fortinet FortiGate IPS, Zscaler Cloud IPS, Palo Alto Networks Advanced Threat Prevention and Trend Micro Deep Discovery.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.