We performed a comparison between Cisco NGIPS and Palo Alto Networks URL Filtering with PAN-DB based on real PeerSpot user reviews.
Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS)."The most valuable feature would be the IPS is very important in Cisco Firepower because I can configure deep configuration in IPS and tuning."
"The security intelligence in the product is the best feature and give us all the information that we need in our network."
"The most valuable feature is that it is able to detect any form of infiltration."
"It has good intelligence. It does a great job at stopping threats."
"This is a stable solution."
"I've found the performance and stability to be the most valuable features of Cisco NGIPS. It is scalable as well."
"The cost is the most valuable feature."
"The IPS functionality is useful if you have offices all over the place. It's nice to have centralized management instead of going to a separate ASA or FirePOWER device."
"The initial setup is easy."
"It's allowed us to have better visibility and protection from threats."
"Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit."
"Prohibited URLs can be listed by category."
"The Palo Alto solution has improved our organization by providing threat protection across a variety of internet connections. Our company also gets valuable insights regarding threat analysis."
"Being able to manage blacklists and whitelists easily is very useful, especially for internal access and limiting outbound access."
"The most valuable feature is that the product can do everything in a single device, including the firewall, rules, and the PBL. It also has good routing and switching."
"Our customers are still facing many bugs on the system. It has matured noticeably, but we are still facing multiple stability issues on Firepower. There are more than 80 or 90 bugs for each release node. It's a considerable number of bugs."
"While the Management GUI and FMC could be improved, the devices themselves function well."
"Cisco NGIPS should work on its shortcomings related to the issues that stem from bugs and performance."
"The initial setup is a bit complex because it requires a lot of configuration, firewall and zoning."
"I would like to see Cisco NGIPS to include home office support in one single product."
"If there was a software-based solution for scaling up then it would be much better."
"The price is a little high. It's hard to find solutions that are easy on the budget and strike a balance between affordability and features."
"We don't like its licensing model. It has separate licensing for all the features. For instance, to get URL filtering, you need to buy another license. Every feature set seems to require another license. Unless you purchase them all upfront, you find some surprises and realize that you can't do that because you need another license. Its logging isn't quite as good as it used to be in our previous solution. We used to have Cisco ASA, and we could view the logs a lot easier than NGIPS (also known as Firepower). We saw real-time logging, but we don't see that as much in Firepower."
"The solution is a bit expensive."
"Performance monitoring could use improvement."
"An area for improvement would be the technical support, which can be slow."
"One way Palo Alto can improve is by offering sandboxing. I don't know if they currently offer a sandboxing feature together with the firewall or not. They should provide secure sandboxing with the firewalls."
"It is an expensive solution and not everyone has the budget for it."
"For hosting sites like Blogspot, they host sites that should be in different categories, but get lumped together in general. There needs to be more granularity or multiple categorizations."
"We have had some challenges with making Palo Alto Networks URL Filtering with PAN-DB work with ELK stack."
More Palo Alto Networks URL Filtering with PAN-DB Pricing and Cost Advice →
Cisco NGIPS is ranked 5th in Intrusion Detection and Prevention Software (IDPS) with 62 reviews while Palo Alto Networks URL Filtering with PAN-DB is ranked 18th in Intrusion Detection and Prevention Software (IDPS). Cisco NGIPS is rated 8.2, while Palo Alto Networks URL Filtering with PAN-DB is rated 8.4. The top reviewer of Cisco NGIPS writes "Very effective for malware and signature-based anomalies but stability needs improvement". On the other hand, the top reviewer of Palo Alto Networks URL Filtering with PAN-DB writes "Provides regular updates with an auto download option; prohibited URLs can be listed by category ". Cisco NGIPS is most compared with Check Point IPS, Fortinet FortiGate IPS, Trend Micro TippingPoint Threat Protection System, Cisco Sourcefire SNORT and Palo Alto Networks Advanced Threat Prevention, whereas Palo Alto Networks URL Filtering with PAN-DB is most compared with Check Point IPS, Fortinet FortiGate IPS, Zscaler Cloud IPS, Palo Alto Networks Advanced Threat Prevention and Trend Micro Deep Discovery.
See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.