Threater (64-bit x86)

What do you like best about the product?

ThreatER has a lot of different features that are worthy of comment and narrowing it down to a single one is a bit of a challenge. However, I think the feature I like the most is that I can "set it and forget it", but at the same time, I can go back in and make adjustments on the fly. This makes the product very flexible and intuitive. Also, the API integrations were very useful. I wrote some custom software that integrated my SEIM product emails into an actionable ThreatER block, thereby automating a very tedious process. The product performs at a high capacity, so I can't say that I was ever able to detect any network lag or latency that was directly attributable to the ThreatER appliances. Pricing... well, that's a bit different. It's not for the faint of heart, but it's still worth the investment compared to the cost of mitigating a preventable breach. ThreatER Support was flawlessly executed--I always received top-notch support whenever I needed it. Regarding AI, I was not really aware of anything of that nature so if it was running behind the scenes, it was truly transparent and did not clearly interact with me in a noticeable manner.

What do you dislike about the product?

Cost is a downside... especially when we were transitioning to a different product and missed the notification window. There was absolutely no mercy shown to us and even though we are now NOT using the appliances, we are still required to pay for the service for another year--no grace. No mercy. No options. That experience has absolutely poisoned my perception of the company--not the product, but the company itself.

What problems is the product solving and how is that benefiting you?

ThreatER absolutely saved us from an active brute force attack against our VPN portal, as well as ongoing probes, scans, and even additional attacks against our FTP server. I truly can't fault the product for it's effectiveness.

What do you like best about the product?

Easy to blacklist new sites or whitelist when requested.

What do you dislike about the product?

I have no dislikes about threatER. It works as it should and filters out the garbage.

What problems is the product solving and how is that benefiting you?

threatER is filtering out the garbage and blacklisted sites with little or no interaction from me.

What do you like best about the product?

It was easy to set up, and it started blocking bad traffic right away.

What do you dislike about the product?

When there’s a lot of traffic, it can be hard to tell exactly what’s being blocked, or why it’s being blocked.

What problems is the product solving and how is that benefiting you?

Across both our corporate network and our guest network, we block all traffic to and from malicious sources, and we also have geo-blocking enabled. This has reduced our bandwidth usage and helps keep us safe.

What do you like best about the product?

The product offers a range of subscription lists, and the UI is easy to use. Updates when patches are released are quick and reliable. Our Account representative is very knowledgeable, friendly, and attentive to our needs, and works closely with us to continually improve our security posture.

What do you dislike about the product?

Wish the log retention were more robust.

What problems is the product solving and how is that benefiting you?

An added layer of internet traffic security, with a web-based portal to review, whitelist, and cusstomize polices.

What do you like best about the product?

I like the support provided today and the ongoing technical support, as it makes things run smoothly. The ease of use and navigation of the Threater web portal is also something I really appreciate. These aspects help streamline the process and make it easier to understand. It's overall easy to use and understand. Additionally, the initial setup was very easy, which was a big plus for me.

What do you dislike about the product?

The product is great. No dislikes

What problems is the product solving and how is that benefiting you?

I use Threater to block threats from coming inbound and outbound, solving the problem of keeping bad actors out of our network system.

What do you like best about the product?

It does what it says. It's a great first line of defense for blocking known threats using IP lists that you are subscribed to or created by you. Sometimes sites get added to lists by mistake blocking your legitimate traffic, but setting up your own list to whitelist is incredibly easy and changes take effect almost immediately. The reports were a great way for us to figure out where most of the malicious traffic targeting us comes from. The interface is easy to use and navigate. Probably one of the easiest initial setups we've had.

What do you dislike about the product?

When legitimate traffic is blocked the user only sees a page failed to load. We then use the logs to search from blocks coming from their IP to sometimes get the correct IP for whitelisting. This is usually only a problem because lists will sometimes add legitimate sites to their lists for what ever reason, so the root cause isn't threater's fault, but it would be nice if it gave the user more information when it was the source of blocking traffic as it isn't always the cause.

What problems is the product solving and how is that benefiting you?

It is constantly blocking a lot of malicious traffic before it even hits our firewall.

What do you like best about the product?

I’ve been very happy with threatER. It has been extremely effective at stopping malicious traffic from various countries before it ever reaches our environment. Since implementing it, over 99% of incoming traffic has been blocked, which in our case is a positive indicator because it was all unwanted or malicious traffic. It has significantly reduced noise and potential attack surface.

What do you dislike about the product?

I don’t have many complaints about threatER itself. The only issue I’ve encountered relates more to the threat intelligence feeds included with the subscription. Occasionally, a feed will update and begin blocking traffic unexpectedly. While this isn’t really a problem with threatER as a platform, it can still create operational issues that require investigation and adjustment.

What problems is the product solving and how is that benefiting you?

ThreatER helps reduce the amount of malicious and unwanted traffic reaching our environment. By automatically blocking connections from known malicious sources and high-risk regions, it significantly reduces noise in our logs and lowers the number of potential threats we need to investigate. This allows our security team to focus on legitimate activity and higher-value security work instead of constantly filtering through large amounts of attack traffic.

What do you like best about the product?

Easy to use interface and love the ability to easily see if a url/domain or IP address is blocked. If it is block, it is easy to create a whitelist rule and the changes take effect quickly within seconds to minutes at most. Customer support has always been great, and our account rep Julia has been very helpful by doing her quarterly check-ins.

What do you dislike about the product?

The only issue or dislike that comes to mind is when we have seen blocks to legitimate webistes due to having a bad blocklist. This issue only occurred a couple of times, but it did cause a lot of issues for us and our users not being able to access their websites.

What problems is the product solving and how is that benefiting you?

They recently added the ability to block ASN blocks instead of blocking a whole country.

What do you like best about the product?

I like Threater because it's easy to use and the integration is seamless, provided that the client allows us to place the hardware Enforcer in line with their Internet links. I appreciate that it logs every traffic flow, allowing us to produce analytics which inform active threat or tactical threat blocking. The initial setup process is quite easy too; we just deploy the policies and the client plugs it in, with everything managed through the central cloud-based management platform.

What do you dislike about the product?

It's deployment is limited to on-Prem, AWS, Azure, and Google's Cloud platform. We are unable to deploy it on other cloud platforms.

What problems is the product solving and how is that benefiting you?

I use Threater to collect threat intel, integrate intelligence feeds easily, and block threats at a scale unmatched by an Exchange firewall. It detects exposed assets, services, and monitors outbound traffic to manage risks effectively.

What do you like best about the product?

Interface is easy to navigate between sites

What do you dislike about the product?

redundant features available on firewalls

What problems is the product solving and how is that benefiting you?

We use content filtering throughout all of our locations.