


Illumio Segmentation and Cortex Cloud by Palo Alto Networks are competing in the cybersecurity arena, offering robust solutions for network security. While Illumio Segmentation is particularly strong in deployment ease and integration, Cortex Cloud has the upper hand in providing advanced threat prevention features.
Features: Illumio Segmentation offers seamless integration across IT environments with real-time visibility, micro-segmentation, and robust policy enforcement. It assists in reducing attack surfaces by controlling east-west traffic and ensuring scalable policy management. Cortex Cloud provides advanced threat detection, automated response capabilities, and real-time monitoring of workloads alongside AI-driven threat protection, effectively minimizing manual intervention.
Room for Improvement: Illumio Segmentation can benefit from enhanced tagging policy strategies and a simplified setup process to mitigate the chance of blocking essential communications. Dependencies on agents also necessitate careful monitoring. Cortex Cloud could improve by streamlining its deployment process, reducing alert fatigue from noise in its behavioral analytics, and expanding its integration capabilities beyond existing CI/CD pipelines.
Ease of Deployment and Customer Service: Illumio Segmentation is recognized for its straightforward deployment and efficient integration, backed by reliable customer support. Cortex Cloud, albeit more complex in setup due to its extensive features, compensates with comprehensive customer service and thorough documentation, ensuring expert guidance for intricate deployments.
Pricing and ROI: Illumio Segmentation is positioned as a cost-effective solution, delivering clear ROI by offering strong security segmentation. Cortex Cloud, justified by its superior features and comprehensive coverage, commands a higher price point. Although it requires a larger initial investment, businesses find significant value in its enhanced threat prevention and data protection, leading to substantial ROI.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
CallStream helps us integrate and automate tasks.
The solution provides a good ROI, especially for regular customers, offering discounts for three-year licenses.
I don't think the tool in itself is very capable of doing that, but we have XSOAR and other tool integrations done on the platform, so this can be accomplished.
I observe extensive return on investment with Illumio.
Illumio serves as a single endpoint technology where I can implement various features, including a zero-trust network, north-to-south and east-to-west configurations, and micro-segmentation, all coming from one platform, which ultimately saves us time and money.
Illumio definitely demonstrates its value in money-saving capabilities, enhancing our lateral environment inside the organization and providing effectiveness overall once integrated.
They are helpful, respond to my queries, and can answer any question.
Qualys's tech support is highly responsive, providing multiple ways to interact with them.
Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA.
If I make it a high priority, they have resolved one query within 20 minutes.
If local Indian support cannot resolve an issue, global tech support aligns promptly within the agreed SLA.
Fast response times and knowledgeable staff who understand the intricacies of the system.
Whenever I raise a case with their support team, regardless of the priority level—P1, P2, P3, or P4—they generally reply within an hour
Even if we raise an issue on non-working days like Saturdays or Sundays, we receive prompt responses.
The customer support is very prominent.
We started our organization about nine months back. We started with about 30 users, and we now have more than 100 users.
Our organization currently uses it to manage over 1200 web applications.
It is absolutely scalable, and I would rate its scalability as nine out of ten.
For stability, scalability, mean time to response, and potential incident investigation improvements, I would give it a nine or probably even a ten.
Onboarding endpoints and assets on Cortex Cloud by Palo Alto Networks is very easy.
The platform is able to auto-shut certain resources that are not in use through the agentless scan feature.
Scaling it to a large level is not an issue for us.
By employing Linux scripting or other methods, I can push the policy to all devices at once, making it easy to scale.
Illumio's scalability is very good; it is quite easy to scale.
Overall, the support provided has been excellent.
It is a stable solution, which is why we chose it.
Continuous monitoring is crucial to ensure system stability and avoid vulnerabilities or threats.
My impression of Cloud Runtime Security in stopping attacks in real-time is that I have never had an issue where it has let something through, causing an outage or concerns to the customer.
However, now in Cortex Cloud, I have not seen any lag or buffer.
My evaluation of how stable and reliable Cortex Cloud by Palo Alto Networks is very positive.
Illumio is a stable solution with no glitches or bugs reported, making it a reliable product for us.
Ideally, the scanner should automatically detect and scan all subdomains, even if not explicitly defined, ensuring comprehensive vulnerability assessment.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Regarding the generative AI security tool, I know for sure it's Agentic.
The solution is quite premium in cost compared to alternatives such as Wiz.
There is not a clear MSP model compared to other vendors such as CrowdStrike.
They need to install an agent in the container world, while Akamai Guardicore does not need to install an agent, so they have native support that Illumio lacks.
There could also be more examples of how the automations can be done using Illumio.
Another improvement might be around scalability, ensuring that as organizations grow, Illumio can handle even larger, more complex environments seamlessly.
Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive.
Pricing is managed by our finance team; however, Qualys TotalCloud offers cost-effective licensing flexibility.
Qualys TotalCloud is expensive, but it offers a premier solution with no headaches.
The solution is costly, with high-end capabilities suitable for enterprises.
Today, it is smart and easy to calculate the licenses.
I know that Illumio is the cheapest solution in the security area.
But when you compare it to firewalls, then it may not be that expensive.
I think it's not very expensive if we compare it with Guardicore.
This view of risk helps reduce the work we would have to do to combine multiple sources to prioritize risk.
It will help cybersecurity professionals monitor the cloud and find vulnerabilities.
We are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs.
AI/ML aids in anticipating remediation for misconfigurations and vulnerabilities, and automatic remediation can be easily configured.
Cortex Cloud by Palo Alto Networks has reduced the time spent on incident investigations, and if I had to estimate, I would say it has cut our investigation time in half.
This simplifies the management of shared responsibility among different people and entities, allowing you to use one single tool instead of having dozens of different tools to orchestrate and integrate.
Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.
The most important feature is the traffic review analysis, where we use the draft view and the reported view that helps us understand how the application interacts with other applications in the environment, and based on that, we are able to define the policies.
Illumio is a powerful tool for micro-segmentation and zero trust security that provides strong visibility, flexible policy management, and effective threat containment, enhancing an organization's internal security posture.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 1.7% |
| Cortex Cloud by Palo Alto Networks | 1.9% |
| Illumio Segmentation | 3.4% |
| Other | 93.0% |

| Company Size | Count |
|---|---|
| Small Business | 12 |
| Midsize Enterprise | 5 |
| Large Enterprise | 31 |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 1 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 2 |
| Large Enterprise | 13 |
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
Cortex Cloud by Palo Alto Networks enhances cloud security with features like AI/ML threat detection and automated remediation, ensuring real-time protection and efficient management across cloud environments.
Cortex Cloud by Palo Alto Networks offers comprehensive cloud security posture management and runtime protection. It reduces manual tasks and accelerates incident investigation through advanced threat detection and AI-driven anomaly detection. With integration to the MITRE ATT&CK framework, it boosts threat response while reducing incident resolution time. Although users find the UI complex and pricing high, its capabilities in securing AWS, Azure, and other environments, as well as its potential integration with CyberArk, emphasize its enterprise-ready design for cloud transformation across diverse industry sectors.
What are the key features of Cortex Cloud by Palo Alto Networks?Cortex Cloud by Palo Alto Networks is deployed across industries like telecom, BFSI, and manufacturing for robust cloud security. It's leveraged for detecting misconfigurations and vulnerabilities, aiding cloud transformation and compliance with standards such as GDPR and NIST. The integration across cloud infrastructures, including AWS and Azure, supports policy creation and threat management strategies for diverse enterprises.
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Our breach containment platform identifies and contains threats across hybrid multi-cloud environments, stopping attacks from becoming cyber disasters.
Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
The Illumio Platform comprises two complementary products powered by an AI security graph:
Together, they help security teams shrink the attack surface, reduce risk, and contain breaches in real time.
Illumio Segmentation
Illumio enhances security through micro-segmentation and real-time traffic control, offering detailed network visibility and precise application communication management. It supports scalability across environments, improving security posture and reducing lateral movement.
Illumio's features include real-time traffic control, micro-segmentation at the workload level, and scalable policy management, allowing organizations to establish strict security measures against threats like ransomware. Its visibility map offers granular security insights essential for creating effective policies and auditing traffic. Centralized rule distribution and comprehensive traffic mapping augment security across environments. The platform's design ensures ease of deployment and compatibility, reducing unauthorized access by focusing on threat isolation and breach containment. While Illumio excels in flexibility and visibility, it also includes advancements in technical support, third-party integrations, and user-friendly policy management in order to better support diverse operating systems and larger environments. Improved reporting, analytics, and automation for policy creation are necessary alongside reduced dependency on agents and enhanced data security measures.
What are Illumio's most important features?
What benefits or ROI should users look for?
Illumio is frequently deployed in industries where network segmentation is critical, such as finance and healthcare, offering detailed network visibility and control over application communication. Organizations integrate it seamlessly with existing infrastructures, facilitating the deployment of lightweight VENs and effective policy management to secure hybrid cloud and on-premises environments, ensuring compliance and defending against evolving threats.
We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.