DATA ANALYTICS – PALO ALTO AUTO FOCUS

Palo Alto Networks AutoFocus contextual threat intelligence service makes threat analytics, with full context, available to every security organization, not just those with specialized security staff. This hosted security service arms security operations professionals with the high-fidelity intelligence, correlation, context and automated prevention workflows needed to identify and respond to events in real time. AutoFocus extends the Palo Alto Networks Security Operating Platform with local, industry and global threat intelligence with attack context to accelerate analysis, forensics and prevention workflows. Together, the platform and AutoFocus allow security teams to move away from legacy approaches that rely on aggregating detection-focused alerts and post-event mitigation. Now, the majority of attacks will be automatically prevented, with proactive threat analytics and hunting enabled through AutoFocus.

AutoFocus enables security teams to distinguish the most important threats from everyday commodity attacks, contextualizing events on your network or public data with tags. When a tag matches an event on your network, AutoFocus sends a priority alert via email, within the AutoFocus dashboard, or via HTTP post, with the full tag context included. Alerts are highly customizable, enhancing your existing security workflows with prioritization and context for the most critical threats.

DATA ANALYTICS – PALO ALTO NETWORKS MAGNIFIER

Palo Alto Networks Magnifier behavioural analytics empowers organizations to quickly find and stop the stealthiest network threats. By analysing rich network, endpoint and cloud data with machine learning, Magnifier accurately identifies targeted attacks, malicious insiders and compromised endpoints. Security analysts can rapidly confirm threats by reviewing actionable alerts with investigative detail, and then leverage Palo Alto Networks Next-Generation Firewall to block threats before the damage is done.

Magnifier automatically pinpoints active attacks, allowing security analysts to focus on the threats that matter.

NEXT GENERATION FIREWALLS & WEB USER CONTROLS

Fundamental shifts in application usage, user behaviour, and complex, convoluted network infrastructure create a threat landscape that exposes weaknesses in traditional port-based network security. Historically, you were left with two basic choices – either block everything in the interest of network security or enable everything in the interest of your business. These choices left little room for compromise. The Palo Alto Networks Next-Generation Security Platform provides you with a way to safely enable the applications your users need by allowing access while preventing cybersecurity threats.

Its Next-Generation Firewall is the core of the NextGeneration Security Platform, designed from the ground up to address the most sophisticated threats. The Next-Generation Firewall inspects all traffic – inclusive of applications, threats and content – and ties it to the user, regardless of location or device type. The application, content and user – the elements that run your business – become integral components of your enterprise security policy. The result is the ability to align security with your key business initiatives. With our Next-Generation Security Platform, you reduce response times to incidents, discover unknown threats, and streamline security network deployment.

WEB USER CONTROLS & CLOUD SECURITY – PALO ALTO APERTURE

Aperture SaaS security service provides cloud-based security within SaaS applications (e.g., Box, Google Drive, Salesforce). Aperture scans the files stored in the SaaS applications, in accordance with rules and policies determined by the customer and monitors them for unauthorized or inappropriate disclosure or handling of information as well as for malware activity. Customers configure Aperture to access the SaaS services they want to monitor. Customers’ systems administrators determine which users can be authorized to view data and reports in the Aperture interface.

CLOUD SECURITY – PALO ALTO EVIDENT.IO

Evident enables organizations of all sizes to proactively manage cloud security risk — minimizing attack surface and improving overall security posture, all from a single dashboard. The Evident Security Platform is the first and only cloud-native infrastructure security solution providing full coverage of all AWS accounts, services, and regions, in addition to all Azure subscriptions, services and standard regions.

ESP combines the detection and analysis of misconfigurations, vulnerabilities, and risk – with guided remediation and audit capabilities to meet compliance requirements – all in one solution. ESP was designed specifically to help modern IT, DevOps and Risk/Compliance teams implement and maintain security within the cloud shared responsibility model. ESP enables IT, Security, Engineering, and Operations with a continuous global view of security risk and compliance, with the actionable intelligence needed to rapidly remediate and secure their entire AWS and Azure Infrastructure.

AI – PALO ALTO WILDFIRE

Palo Alto Networks WildFire cloud-based threat analysis service is the industry’s most advanced analysis and prevention engine for highly evasive zero-day exploits and malware. The service employs a unique multi-technique approach, combining dynamic and static analysis, innovative machine learning techniques, and a ground-breaking bare metal analysis environment to detect

and prevent even the most evasive threats. WildFire changes the equation for adversaries, turning every Palo Alto Networks platform deployment into a distributed sensor and enforcement point to stop zero-day malware and exploits before they can spread and become successful. Within the WildFire environment, threats are detonated, intelligence is extracted, and preventions are automatically orchestrated across Palo Alto Networks Next-Generation Security Platform in as few as five minutes of first discovery anywhere in the world.

ENDPOINT SECURITY – PALO ALTO TRAPS

Traps advanced endpoint protection from Palo Alto Networks stops threats on the endpoint and coordinates enforcement with cloud and network security to prevent successful cyberattacks. By combining multiple methods of prevention, Traps stands apart in its ability to protect endpoints. It blocks security breaches and successful ransomware attacks that leverage malware (file-based or fileless) and exploits, known or unknown, before they can compromise endpoints. Traps minimizes endpoint infections by blocking malware, exploits and ransomware. Integration with your security platform delivers additional threat analysis, shared intelligence and automated containment.

NETWORK SECURITY – PALO ALTO NGFW

Fundamental shifts in application usage, user behaviour, and complex, convoluted network infrastructure create a threat landscape that exposes weaknesses in traditional port-based network security. Historically, you were left with two basic choices – either block everything in the interest of network security or enable everything in the interest of your business. These choices left little room for compromise. The Palo Alto Networks Next-Generation Security Platform provides you with a way to safely enable the applications your users need by allowing access while preventing cybersecurity threats.

Its Next-Generation Firewall is the core of the NextGeneration Security Platform, designed from the ground up to address the most sophisticated threats. The Next-Generation Firewall inspects all traffic – inclusive of applications, threats and content – and ties it to the user, regardless of location or device type. The application, content and user – the elements that run your business – become integral components of your enterprise security policy. The result is the ability to align security with your key business initiatives. With our Next-Generation Security Platform, you reduce response times to incidents, discover unknown threats, and streamline security network deployment.

REMOTE ACCESS – PALO ALTO GLOBAL PROTECT

Your networks and users have moved far beyond the protections afforded by traditional network perimeter security. The distributed nature of your organization creates security policy inconsistencies and introduces operational burdens. GlobalProtect solves the problem by extending the protections afforded by Palo Alto’s next-generation security platform to your remote networks and mobile users with two deployment options. To extend consistent security policies to remote networks and mobile users in an operationally efficient manner, you can consume GlobalProtect cloud service, a cloud-based security infrastructure that is based on our entire suite of next-generation security features. To protect your mobile users, regardless of their location or device in use, GlobalProtect subscription can be deployed on the next-generation firewalls owned and managed by your organization.

ICS AND SCADA SECURITY – PA-220R

The PA-220R is a next-generation firewall appliance in a ruggedized form factor, providing rock-solid network security for severe environments, such as utility substations, power plants, manufacturing plants, oil and gas facilities, building management systems and healthcare networks. The ruggedized PA-220R next-generation firewall brings you the same PAN-OS features that protect your largest data centres, offers an extended temperature range and is certified to IEEE 1613 and IEC 61850-3 standards for vibration, temperature and immunity to electromagnetic interference. It provides interactive visibility and control of industrial protocols and applications such as Modbus, DNP3, IEC 60870-5-104, Siemens S7, OSIsoft PI and more. The PA-220R provides dual DC power inputs and high availability configuration for increased reliability, a fanless design and solid-state storage for quiet operation, and no moving parts for increased reliability. It simplifies the deployment of large numbers of firewalls through its bootstrapping feature and USB port.