I use the Firewall version. I create and correct rules, and configure networks. I also handle logs.

We are using AutoFocus with my playbooks. We use it on a daily basis.

We receive alerts on the Playbook. We receive alerts for threat intelligence, malware alerts, and virus alerts.

We use Autofocus to check if the verdict is benign malware.

All playbooks are on AutoFocus. We don't log in, it gives us access.

The tool along with other suite of products provides us with threat and alert information. 

We are a solution provider and this is one of the products that we implement for our clients. It makes up part of their network security, helping them to detect threats. 

We have our sorting in-house. If any kind of alert has been identified, they will cross-check with the feed in AutoFocus. They will do the correlation, manual correlation, in the case of a known feed or known intelligence. So, they will identify whether any malicious activity is going on through the AutoFocus portal.