Palo Alto Networks Cortex XSOAR Reviews & Product Details

Pretty good perfomance on a very large environment like ours with 65,000+ Cortex XDR agents. We have it integrated with IOCs from Recorded Future and Sekoia CTI feeds, which works pretty well for us. We have playbooks to adjust incidents score and severity based on IOC risk score obtained through the integration. Review collected by and hosted on G2.com.

Reporting can be improved and wish for more customization options Review collected by and hosted on G2.com.

Easy-to-use GUI, out-of-the-box scripts for most of the automation tasks, and supported integration packs for almost all the tools (at least from security perspective) help automate complicated and repetitive tasks quickly yet efficiently. Review collected by and hosted on G2.com.

This solution requires a dedicated team to create and modify the playbooks and other underlying configurations (mapper, classifier etc.). The pre-built playbooks are too generic to be used directly and require quite a few changes, instead of which one can work on creating a new one. Review collected by and hosted on G2.com.

Simple GUI, easy-to-create playbook tending to your needs. The customer support is fantastic as well. Very knowledgable. The XSOAR teams has a quick response time. Review collected by and hosted on G2.com.

If they advertised the features more, it is leaning more toward a DYI tool. Compared to other competitors more research is required when navigating the dashboard. Review collected by and hosted on G2.com.

- Capability to integrate with other applications.

- Capability to perform automation and build playbooks.

- Ability to handle tickets and incidents.

- Can work as a centralized SIEM tool manager. Review collected by and hosted on G2.com.

- Frequent demisto engine disconnections.

- Tool becomes unresponsive when there is a high load of inputs. Review collected by and hosted on G2.com.

You can integrate and orchestrate all of your security solutions in one platform and manage all of your cases, incidents. Review collected by and hosted on G2.com.

Cortex XSOAR can be more user-friendly in dashboards and configurations. Review collected by and hosted on G2.com.

The Out of the Box content like Integrations for many security stacks or from multiple vendors will definitely reduce the custom efforts and its an easy adoption to the Analyst due to its User-friendly UI, Designing the playbooks is very easy and reduces the manual work by Automation, XSOAR will reduce the air gap on Security investigation and save SLA's for any type of alerts Review collected by and hosted on G2.com.

The licensing part of the xsoar is a little costly matter and the response/delivery for any type of Future Requests for common and high-demand automation is a little slower(which needs to be improved)

There are no Best practice documents on System Optimization or Playbook optimization etc.

No proper troubleshooting docs for the System notifications which triggered on the system Diagnostics page Review collected by and hosted on G2.com.

We needed a single platform for our security operations to do end to end lifecycle management. We decide to choose Palo Alto's Cortex XSOAR and are very pleased with the results. I highly recommend it. Review collected by and hosted on G2.com.

Great product, a bit expensive. There is nothing to dislike about this product, it is well-designed, intuitive. Review collected by and hosted on G2.com.

Mostly I like that it is natively integrated with other vendor's products Review collected by and hosted on G2.com.

Mostly I dislike in the Palo Alto Networks products is the high cost Review collected by and hosted on G2.com.

Cortex XSOAR is easy to use. We can use it in the security domain.

We can easily fetch incidents and take appropriate actions on them.

It has its graphical dashboard, using that we can see insights on different - different parameters like period. Review collected by and hosted on G2.com.

Installation is quite difficult on local machines. it has strict platform dependency. But have options to use Cortex XSOAR on GCP. Review collected by and hosted on G2.com.

Palo Alto XSOAR is the most complete SOAR tools I have seen so far. It has all the features required to be a complete SOAR Solution. I have made this tool as the baseline while doing POC with other SOAR tools.

It is easiest tool to work and manage and create automation scripts and playbooks

It provide features like:

Warroom

Automation

Jobs

Palybook

Playground

Support for python as well as bash and Java. Review collected by and hosted on G2.com.

Although it is most capable SOAR tool out there but it has few cons.

1. No clarity on infratrasture sizing for MSSP.

2. Price is little expensive.

3. HA and DR capabilities needs improvement.

4. Architecture becomes complex with high number of tenants in an MSSP enviroent. Review collected by and hosted on G2.com.