Idira Privileged Access Manager vs WatchGuard XTM [EOL] comparison

Why PeerSpot?

The compared Idira by Palo Alto Networks and WatchGuard solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 8.6% mindshare in the category. Additionally, 95% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 90% of WatchGuard users who would recommend it.

Idira Privileged Access Man...

Read 231 Idira Privileged Access Manager reviews

27,682 Views
11,073 Comparison Views

95% willing to recommend

WatchGuard XTM [EOL]

Read 34 WatchGuard XTM [EOL] reviews

90% willing to recommend

Idira Privileged Access Man...

WatchGuard XTM [EOL]

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Idira Privileged Access Manager and WatchGuard XTM [EOL] based on real PeerSpot user reviews.

Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM).

To learn more, read our detailed Privileged Access Management (PAM) Report (Updated: October 2026).

Buyer's Guide

Privileged Access Management (PAM)

October 2026

Download the complete report

Helped 918,970 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

231

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

WatchGuard XTM [EOL]

Average Rating

8.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Generalm4545

General Manager- IT & Automation - Serum at a pharma/biotech company with 1,001-5,000 employees

Protects from attack software and hacking but it doesn't provide the reports in a readable format

In my opinion, image clarity is very important, because I don't get the proper image product on reports. This means that functionality is not there. My engineer does not know how he can replace an order. We attach a log after any kind of keys using a utility instead. For the internet policies that we are implementing, the policy should be based on proper protocols. We use the default policies and there are a number of third-party protocols that appear here. Management with WatchGuard XTM means that out of policy is the problem from our side. In this way, we can not do effective services for people with this one. The policy definition with WatchGuard XTM is not proper for all use case requirements. I've got weekly business reports that I am expecting attachments with from WatchGuard XTM that display data for all kinds of consideration which should be required. Main User Functionality Level Order must adhere to using the admin functionality on the registry, or else our users publish their own name. Maybe these recommendations are irrelevant, but I say that the issue to improve most with WatchGuard XTM is the Main User Function.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is stable and reliable."

"Securely protects our TAP/NUID and privileged access accounts within the company."

"The implementation of the PSM proxy has reduced the specific risk of "insider attacks" on our domain controllers and SLDAP servers by eliminating direct user login by an open secure connection on the user's behalf without ever revealing the privileged credentials."

"The privileged support manager is the most valuable feature of CyberArk Enterprise Password Vault."

"I would recommend implementing CyberArk Privileged Access Manager as it is the best so far."

"The ability to start the project, install and add the passwords in just a few days brings a big advantage for CyberArk."

"Previously, we used to share passwords for service and normal admin accounts among team members. However, since we started managing it through the product, we've transitioned to individual admin accounts or implemented dual control for shared accounts. With dual control, exclusive checking and checkout options are available, and passwords are not stored in clear text anywhere in the credentials."

"We have been able to really transform how all of our sysadmins manage all our infrastructure."

More Idira Privileged Access Manager pros

"After it is installed, you will have plenty of time to do something else, because it is stable and does not require you to reboot all the time."

"This product helped facilitate and protect our environment from the inside out, with features like DLP (data loss prevention) to content filtering all the way to port filtering and traffic shaping."

"Setup and configuration is straightforward with excellent management interface."

"We now have the capability to manage traffic better by putting non-business critical traffic into the small bucket, while business critical traffic gets higher priority."

"After installing the product, we achieved awareness of our data protection needs and email misuse."

"This product is solid and has a great reputation behind it."

"Lots of enterprise-grade features in SMB firewall Cost-price performance is at its best"

"The VPN to link my system to my clients, the gateway security features as my first defense layer to my client’s networks, and the firewall/NAT policy are excellent, and I also love the alias feature as it allows me to configure items by common names instead of IP address."

More WatchGuard XTM [EOL] pros

Cons

"Earlier in 9.0 version I faced some stability issues, yes there are some stability issues with CyberArk such as memory leakage, password unsync etc. These are some common problems but frustrating."

"One of our current issues is a publishing issue. If we whitelist Google Chrome, all the events of Google Chrome should be gone. It is not happening."

"The tool needs to improve its usage and interface. They need to have a modern and useful interface. I want the product to improve its integration capabilities as well since some of the integration features do not work always."

"Transitioning from a traditional on-premises deployment to the privileged cloud has resulted in losing access to many logs and administrative tools typically available on the back end."

"Some aspects of the administration need improvement, though they have recently made improvements to the API. However, the management with the interface and configuration are not so user-friendly. It has not changed much during all the years that CyberArk has been on the market. The management part, like platform management as well as PSM connectors definition and management, could be improved, even if it has already been done with the API."

"Many of the infrastructure folks who use the product dislike it because it complicates their workflow."

"One of the main things that could be improved would be filtering accounts on the main page and increasing the functionality of the filters. There are some filters on the side which are very specific, but I feel there could be more."

"The architecture needs to be improved."

More Idira Privileged Access Manager cons

"It's a fine product, but some features like the max bandwidth don't work well. Also, the VPN errors are not helpful when troubleshooting."

"While the wireless capability is great for roaming and seamless hand-off, there have been intermittent issues with connection dropping on Apple devices."

"I think the anti-Spam feature, and the real time log to inspect the bandwidth users both need improving."

"In my experience they need to make changes in web filtering access for Skype as that's the time we had problems."

"Sometimes the local firebox management tool is flaky."

"Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer)."

"I feel that paying a yearly maintenance fee for firmware updates is not worth it in my opinion."

"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."

More WatchGuard XTM [EOL] cons

Pricing and Cost Advice

"CyberArk Privileged Access Manager is perceived to be somewhat overpriced compared to similar market products. It is a little bit overvalued. It could come down a little bit for my liking. However, the industry-leading reputation and the quality of service justify the high price point to some extent."

"I would rate CyberArk's pricing a nine out of ten, with one being cheap and ten being expensive. It's one of the most expensive solutions in the market, but it's worth it."

"The solution is cost-effective for the features."

"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."

"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."

"It's an affordable platform."

"CyberArk Enterprise Password Vault is a very expensive product."

"I do not have any opinions to add about the pricing of the product."

More Idira Privileged Access Manager pricing and cost advice

"The licensing and renewal is very expensive."

"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative."

"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."

"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

918,970 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

14%

Financial Services Firm

11%

Outsourcing Company

11%

Marketing Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	43
Large Enterprise	175

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	7
Large Enterprise	3

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.

See all answers

What needs improvement with CyberArk Privileged Access Manager?

While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...

See all answers

Ask a question

Earn 20 points

Comparisons

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 3% of the time

F5 BIG-IP Access Policy Manager (APM) vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Sophos UTM vs WatchGuard XTM [EOL]

Compared 18% of the time

Fortinet FortiGate vs WatchGuard XTM [EOL]

Compared 17% of the time

Cisco Secure Firewall vs WatchGuard XTM [EOL]

Compared 14% of the time

Check Point Quantum Force (NGFW) vs WatchGuard XTM [EOL]

Compared 8% of the time

Trellix Network Detection and Response vs WatchGuard XTM [EOL]

Compared 2% of the time

More WatchGuard XTM [EOL] Competitors

Product Reports

Buyer's Guide

Idira Privileged Access Manager

October 2026

Download Idira Privileged Access Manager product report

Buyer's Guide

WatchGuard XTM [EOL]

October 2026

Download WatchGuard XTM [EOL] product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

No data available

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection, but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.

WatchGuard

Sample Customers

Rockwell Automation

AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense

Buyer's Guide

Privileged Access Management (PAM)

October 2026

Download Free Report

Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM). Updated: October 2026.

DOWNLOAD NOW

918,970 professionals have used our research since 2012.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.