Palo Alto Networks AutoFocus Reviews

Name: Palo Alto Networks AutoFocus
Brand: Palo Alto Networks
Rating: 3.9 (6 reviews)

3.9 out of 5

6 reviews
85% willing to recommend

What is Palo Alto Networks AutoFocus?

AutoFocus contextual threat intelligence service accelerates analysis, correlation and prevention workflows. Unique, targeted attacks are automatically prioritized with full context, allowing security teams to respond to critical attacks faster, without additional IT security resources.

Get the Threat Intelligence Platforms Buyer's Guide and find out what your peers are saying about Palo Alto Networks AutoFocus, CrowdStrike Falcon, Recorded Future and more!

Palo Alto Networks AutoFocus is the #27 ranked solution in top Threat Intelligence Platforms. PeerSpot users give Palo Alto Networks AutoFocus an average rating of 7.8 out of 10. Palo Alto Networks AutoFocus is most commonly compared to CrowdStrike Falcon: Palo Alto Networks AutoFocus vs CrowdStrike Falcon. Palo Alto Networks AutoFocus is popular among the large enterprise segment, accounting for 49% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 10% of all views.

Buyer's Guide

Threat Intelligence Platforms

June 2025

Get the category report

Helped 859,579 peers since 2012

Featured Palo Alto Networks AutoFocus reviews

RichPhillips

Enterprise Architect at a tech services company with 5,001-10,000 employees

The tool along with other suite of products provides us with threat and alert information. The solution has provided us with a centralized dashboard for reporting threats and anomalies. I am impressed with the tool's integration of Palo Alto products which serves as a platform for security. I…

Read full review

Tejas_Jain

Principal Security Architect at Deloitte

The most valuable feature of Palo Alto Networks AutoFocus ( /products/palo-alto-networks-autofocus-reviews ) is its seamless integration into the Palo Alto Networks ecosystem, allowing the threat intelligence feeds to be automatically consumed without manual effort. It uses the STIX format, which is automatically understood by the firewalls. AutoFocus also excels in behavioral analytics and reputation scoring, providing thorough threat analysis.

Read full review

HananeAIT RADI

Internship Cybersecurity Engineer at ATOS

I use the Firewall version. I create and correct rules, and configure networks. I also handle logs We have rules, monitoring capabilities, and the ability to add devices. These devices are our own equipment or appliances. The solution helps us show logs and provide firewall functionality. The…

Read full review

Palo Alto Networks AutoFocus mindshare

As of July 2025, the mindshare of Palo Alto Networks AutoFocus in the Threat Intelligence Platforms category stands at 1.2%, down from 1.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Threat Intelligence Platforms

Key learnings from peers

Last updated May 4, 2025

Valuable Features

Palo Alto Networks AutoFocus is valued for its dashboard, intuitive interface, and alerting capabilities. Users appreciate its integration with the Palo Alto Networks ecosystem, which simplifies threat intelligence feed consumption. It excels in behavioral analytics, reputation scoring, threat detection, and correlation. The tool provides advanced insights with hashtags for easy threat identification and benefits from impressive stability and performance. Its compatibility with the STIX format enhances its effectiveness in security operations.

"I would rate Palo Alto Networks AutoFocus a ten out of ten."
"I am impressed with the tool's integration of Palo Alto products which serves as a platform for security."
"The logs play a crucial role as they contribute to blocking unwanted Internet traffic."

Room for Improvement

Palo Alto Networks AutoFocus requires more detailed technical documentation on threats like malware and APTs. Users mention the need for an on-premises option and improvements in the pricing model and integration with Cortex XDR. Some find verdict updates cumbersome and request direct use of threat intelligence feeds. Enhanced documentation for configuration and installation and ensuring coverage for zero-day vulnerabilities would be beneficial. Performance speed is also a concern for some users.

"I would like the tool to see more integration with Cortex XDR. There is no real reason to keep them separate."
"It would be helpful to have better documentation for configuring and installing the solution."
"It is a completely cloud-based product at present."

ROI

Users noted significant savings on investigative hours, a remarkable enhancement in threat intelligence, and improved detection rates with Palo Alto Networks AutoFocus. Several users mentioned decreased incident response times and highlighted an enhancement in operational efficiency. Budget justifications became easier due to the precise threat attribution and rich context provided, leading to better resource allocation.

Pricing

Palo Alto Networks AutoFocus provides a threat intelligence service with flexible pricing options tailored for enterprises. Users report that pricing varies based on the scale and specific requirements of the deployment. Basic packages cover essential features, while advanced tiers offer enhanced capabilities and integrations, leading to higher costs. Potential buyers should prepare for costs that align with their network size and security needs.

"The solution is reasonably priced."
"It is expensive."

Popular Use Cases

Palo Alto Networks AutoFocus serves as a key component in network security for many businesses, assisting in threat detection with daily alerts related to threat intelligence, malware, and viruses. It operates seamlessly with playbooks and allows organizations to check verdicts. Integrated with Palo Alto Networks' ecosystem, including Unit 42 and firewalls, it facilitates threat identification and correlation through its portal. It enhances threat intelligence, detection, and prevention processes effectively.

Service and Support

Customer service and support for Palo Alto Networks AutoFocus are highly praised. Users find the technical support knowledgeable and responsive. They appreciate the ease of reaching customer success teams and technical assistance. Many note that Palo Alto Networks adheres to tight SLAs, providing prompt and necessary support. The experience with tech support is consistently positive, indicating a high level of satisfaction among users.

Deployment

Palo Alto Networks AutoFocus setup is described as easy and quick, taking one to two hours. Several users found installation straightforward, while it's noted there is no free trial. One group mentioned their security engineers manage the setup, emphasizing its simplicity. Experiences vary, with some rating it five out of ten due to lack of trial options, despite the setup being completed within a day.

Scalability

Palo Alto Networks AutoFocus demonstrates strong scalability, seamlessly integrating with Playbooks and handling enterprise-level demands. Organizations rate its scalability highly, emphasizing cloud-based capabilities and extensive user access. They experience effective operation across various user groups without major difficulties. Continuous threat intelligence feeds and proactive support highlight its reliability. Users express plans for future expansion, showcasing confidence in its capacity to meet increasing demands.

Stability

Users find Palo Alto Networks AutoFocus stable. They have not encountered downtime or stability issues, rating stability between eight and ten out of ten. Some experienced rare cases where firewalls missed threat intelligence feeds, attributed to a database-related problem resolved by rebooting the firewall.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Threat Intelligence Platforms Buyer's Guide for additional reliable information.