03-19-2013 01:38 AM
Has anybody switched from Brightcloud to Pandb for URL filtering and have any positive or negative comments? db accuracy etc?
I've utilised the Brightcloud URL categorisation in multiple environments and found it overall "average".. a few false positives/negatives here and there etc.
Regards,
03-19-2013 06:44 AM
We switched back in January. Our experience has been positive thus far. We have had perhaps half a dozen reclassification requests to date. A slight increase then with BC. However, reclassification requests with PAN support have been more accommodating. It was hit or miss if BC took our suggested category change. The reclassification request turn-around is still around 24-48 hours. We have always had a temporary "white list" rule to accommodate high priority websites while waiting for reclassification. Our environment (healthcare) is not as sensitive for waiting the 2 days - it works within our SLA to the client. We have seen a decrease in reclassification requests lately. I feel the solution is maturing at a quick pace.
I did URL load speed tests with BC and PANDB and page loads have a slight edge with PANDB - but not enough to be a wow factor and it wasn't always an increase depending on site.
My one hurdle was that some of the categories differed slightly then BC. For instance "questionable" (which we were blocking). We had to adjust some of our URL profiles based on the changes in definition Palo and BC have for categories. But it was nothing we couldn't tweak.
The selling point for PANDB to us was not having a large DB to download every day (closer "real time" URL updates now) and that with Palo's threat feeds and Wildfire - we get the benefit of faster URL updates to categories such as "malware" (enhanced protection). The integration that PANDB adds to the devices should only get stronger is my assumption. URL classification is always a tricky solution. I feel PANDB has been a good switch for us.
Cheers,
Mike
03-19-2013 06:44 AM
We switched back in January. Our experience has been positive thus far. We have had perhaps half a dozen reclassification requests to date. A slight increase then with BC. However, reclassification requests with PAN support have been more accommodating. It was hit or miss if BC took our suggested category change. The reclassification request turn-around is still around 24-48 hours. We have always had a temporary "white list" rule to accommodate high priority websites while waiting for reclassification. Our environment (healthcare) is not as sensitive for waiting the 2 days - it works within our SLA to the client. We have seen a decrease in reclassification requests lately. I feel the solution is maturing at a quick pace.
I did URL load speed tests with BC and PANDB and page loads have a slight edge with PANDB - but not enough to be a wow factor and it wasn't always an increase depending on site.
My one hurdle was that some of the categories differed slightly then BC. For instance "questionable" (which we were blocking). We had to adjust some of our URL profiles based on the changes in definition Palo and BC have for categories. But it was nothing we couldn't tweak.
The selling point for PANDB to us was not having a large DB to download every day (closer "real time" URL updates now) and that with Palo's threat feeds and Wildfire - we get the benefit of faster URL updates to categories such as "malware" (enhanced protection). The integration that PANDB adds to the devices should only get stronger is my assumption. URL classification is always a tricky solution. I feel PANDB has been a good switch for us.
Cheers,
Mike
03-19-2013 07:19 PM
Please have a look at the last comment in the following page:-
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
