Palo Alto Networks Cyber Security Platform for the Software Defined Data center. Zekeriya Eskiocak Security Consultant Palo Alto Networks
|
|
|
- Bathsheba Cummings
- 8 years ago
- Views:
Transcription
1 Palo Alto Networks Cyber Security Platform for the Software Defined Data center Zekeriya Eskiocak Security Consultant Palo Alto Networks
2 Evolution towards a software defined data center Server Virtualiza-on So0ware Defined Data Center A software defined data center is agile, flexible, elastic and simple Fast workload provisioning reduce from weeks to hours Flexible workload placement Simplified data center operations & economics Security is a critical component of the software defined data center , Palo Alto Networks. Confiden9al and Proprietary.
3 Security challenges Physical firewalls may not see the East-West traffic MS-SQL SharePoint Web Front End Firewalls placement is designed around expectation of layer 3 segmentation Network configuration changes required to secure East-West traffic flows are manual, time-consuming and complex Ability to transparently insert security into the traffic flow is needed , Palo Alto Networks. Confiden9al and Proprietary.
4 Security challenges Incomplete security features on existing virtual security solutions MS-SQL SharePoint Web Front End In the cloud, applications of different trust levels now run on a single server VM-VM traffic (East-West) needs to be inspected Port and protocol-based security is not sufficient Virtualized next-generation security is needed to: Safely enable application traffic between VMs Protect against against cyber attacks , Palo Alto Networks. Confiden9al and Proprietary.
5 Security challenges Static policies cannot keep pace with dynamic workload deployments Provisioning of applications can occur in minutes with frequent changes Security approvals and configurations may take weeks/months Dynamic security policies that understand VM context are needed , Palo Alto Networks. Confiden9al and Proprietary.
6 Zero Trust Security Segmentation for Data Center Users / Corp Net / DMZ Applica9on Physical Firewalls Inter- host Segmenta-on Physical security devices will con9nue to be deployed to secure and segment data centers. HA Network Security Orchestra9on systems Virtualized Firewalls Intra- host Segmenta-on VM- Series provides the ability to safely enable east- west communica9on Virtualized servers Physical Servers Orchestra9on Integra9on through API, NSX Integra9on, VM Monitoring and Dynamic Address Groups provide the key to tracking VM movement and automa9ng workflows for deployments and network changes , Palo Alto Networks. Confiden9al and Proprietary.
7 High Speed hardware platforms for the Data Center PA-7050 Safely enable all applications; full next-generation firewall capabilities Ground-breaking and unmatched application layer performance Simple yet flexible chassis architecture Extended parallel processing hardware architecture Enterprise- and service providerspecific hardware features Port density and connection types to fit your existing datacenter environment , Palo Alto Networks. Confiden9al and Proprietary.
8 Scalable, Purpose-built Architecture , Palo Alto Networks. Confiden9al and Proprietary.
9 Dynamic Address Groups Context Awareness using Tags Sta9c Dynamic NSX Security Groups, VM AZributes, API Supports Provisioning and De- provisioning of Guest VMs Groups using Dynamic Tags do not require a policy commit IP Addresses automa9cally register with associated tags , Palo Alto Networks. Confiden9al and Proprietary.
10 VM Monitoring Na9ve integra9on with VMware vcenter and ESXi as VM Informa9on Sources Polls for tags and IP addresses Updates to Dynamic Address Groups with IP address and tags Configured on Firewall or UserID Agent Guest VMs must be running VMware tools Con9nued support for custom informa9on sources using APIs Supported on all hardware and VM- Series pla_orms , Palo Alto Networks. Confiden9al and Proprietary.
11 VM Monitoring ESXi & vcenter Dynamic Tags VM Monitoring Tags Tag Name Format Tag Name Format UUID for VM instance uuid.<uuid sring> VLAN ID vlanid.<vlan ID> VM Instance Name vmname.<name string> VM Info Source vm- info- source.<name string> Gurest OS guestos.<guset OS name> Datacenter Object Name VM State state.<vm power state> Resource Pool Name datacenter.<datacenter object name> resource- pool.<resourcepool object name> Annota-on annota9on.<annota9on string> Cluster Object Name cluster.<cluster object name> VM Version version.<version string> Hostname hostname.<host name> Virtual Switch Name vswitch.<virtual switch name> Host IP Address host- ip.<host IP address> Port Group Name portgroup.<network name> Note: all tags generated by VM monitor are normalized before sending to XMLAPI layer. Special characters which are invalid inside a tag on PAN- OS will be removed. Those special characters include single- quota, double- quota, CR, LF, "(", and ")". Also, mul9ple spaces will be replaced by single space , Palo Alto Networks. Confiden9al and Proprietary.
12 Dynamic address groups and VM monitoring VMware vcenter or ESXi Name IP Guest OS Container web- sjc Ubuntu Web sp- sjc Win 2008 R2 SharePoint web- sjc Ubuntu Web PAN-OS Dynamic Address Groups Name Tags Addresses SharePoint Servers MySQL Servers SharePoint Win 2008 R2 sp MySQL Ubuntu db exch- mia Win 2008 R2 Exchange exch- dfw Win 2008 R2 Exchange Miami DC mia sp- mia Win 2008 R2 SharePoint db- mia Ubuntu MySQL San Jose Linux Web Servers sjc web Ubuntu db- dfw Ubuntu MySQL db- mia Ubuntu MySQL PAN-OS Security Policy Source Des-na-on Ac-on SharePoint Servers MySQL Servers San Jose Linux Web Servers Miami DC! , Palo Alto Networks. Confiden9al and Proprietary.
13 VM-Series Deployment Options VM-Series for VMware vsphere Hypervisor (ESXi) New VM-Series for Citrix NetScaler SDX New VM-Series for VMware NSX VM- 100, VM- 200, VM- 300, and VM HV deployed as Guest VM on VMware ESXi Virtual Networking configured to pass traffic through VM- Series L2, L3, vwire, Tap ESXi 4.1 and 5.0 for PAN- OS 5.0 and ESXi 5.5 for PAN- OS 6.0 VM- 100, VM- 200, VM- 300, and VM HV deployed as guest VMs on Citrix NetScaler SDX Consolidates ADC and security services for mul9- tenant and Citrix XenApp/XenDesktop deployments SR- IOV Virtual Networking configura9on to pass traffic through VM- Series VM HV for NSX deployed as a service with VMware NSX and Panorama Automated deployment, transparent traffic steering, dynamic context- sharing Filter traffic prior to network decisions - Ideal for East- West traffic inspec9on , Palo Alto Networks. Confiden9al and Proprietary.
14 Transforming Network Security for the Data Center Solution components: VMware NSX VM-1000-HV Panorama Challenges FW doesn t see the traffic Incomplete security capabilities Static policies Solu-on Automated, transparent services insertion at workload Virtualized next-generation security supporting PAN-OS TM Dynamic security policies with VM context , Palo Alto Networks. Confiden9al and Proprietary.
15 VMware Requirements ESXi Hosts 5.5 or later vcenter 5.5 Central Management Deployed as a OVA on a ESXi host NSX Manager 6.0 (6.0.2 is current) Networking and Security Platform Deployed as a OVA on a ESXi host Integrates via the NetX API All management is done through the vsphere web client connected to vcenter Supports Virtual Distributed Switches from VMware , Palo Alto Networks. Confiden9al and Proprietary.
16 VM-1000-HV Preview PAN-OS firewall in virtual machine form factor Separation of management and data plane Dynamic Address Groups Centrally managed through Panorama Complete Next-Gen firewall features Applications Users Content , Palo Alto Networks. Confiden9al and Proprietary.
17 Next Generation Firewall Technologies Visibility and Safe Enablement of All Traffic Applications: Safe enablement in the data center begins with application classification by App-ID. Applications classified regardless of ports, protocols, evasive tactic, encryption Classify custom applications and unknowns in the data center Users: Tying users and groups, regardless of location or devices, to applications with User-ID and GlobalProtect. Differentiate access based on user, device and endpoint profile Content: Scanning content and protecting against all threats both known and unknown; with Content-ID and WildFire. Protect any type of traffic from targeted attacks , Palo Alto Networks. Confiden9al and Proprietary.
18 Threats Come from Surprising Places Application Usage and Threat Report (Palo Alto Networks) Aggregates application and threat logs 3,000+ organizations across the globe Application Usage and Threat Report February 95% of all exploit logs came from just 10 applications 9 of 10 are common business apps in data centers MS-SQL MS-RPC SMB MS SQL Monitor MS Office Communicator SIP Active Directory RPC DNS , Palo Alto Networks. Confiden9al and Proprietary.
19 Our Unique Data Center Approach Scans ALL applications (including SSL traffic) to secure all avenues in/out of a network, reduce the attack surface area, and provide context for forensics Prevents attacks across ALL attack vectors (exploit, malware, DNS, command & control, and URL) with content-based signatures Detects zero day malware & exploits using public/private cloud and automatically creates signatures for global customer base , Palo Alto Networks. Confiden9al and Proprietary.
20 Centralized Management and Policy Automation Global, centralized management of your nextgeneration firewalls, regardless if they re physical or virtual platforms Centralized logging and reporting across all managed devices Deploy as VM or via M-100 appliance Scalability Managing up to 1000 Next-Gen Firewalls Delegate administrative access and responsibilities Simplifies firewall deployment; decreasing deployment time and improved operational efficiency , Palo Alto Networks. Confiden9al and Proprietary.
21 How it works: Components , Palo Alto Networks. Confiden9al and Proprietary.
22 How it works: Registration , Palo Alto Networks. Confiden9al and Proprietary.
23 How it works: Deployment , Palo Alto Networks. Confiden9al and Proprietary.
24 How it works: Licensing and Configuration , Palo Alto Networks. Confiden9al and Proprietary.
25 How it works: Traffic Re-direction Rules , Palo Alto Networks. Confiden9al and Proprietary.
26 How it works: Real-time updates , Palo Alto Networks. Confiden9al and Proprietary.
27 How it works: Dynamic Address Groups: Address Updates , Palo Alto Networks. Confiden9al and Proprietary.
28 Dynamic Security Enforcement Name VMware NSX IP NSX Security Group web- sjc Web sp- sjc SharePoint web- sjc Web exch- mia Exchange PAN-OS Dynamic Address Groups Name Tags Addresses SharePoint Servers MySQL Servers Exchange Servers SharePoint MySQL Exchange exch- dfw Exchange sp- mia SharePoint Web Servers Web db- mia MySQL db- dfw MySQL db- mia MySQL PAN-OS Security Policy Source Des-na-on Ac-on SharePoint Servers MySQL Servers Web Servers Exchange Servers! , Palo Alto Networks. Confiden9al and Proprietary.
29 How it works: Complete Picture , Palo Alto Networks. Confiden9al and Proprietary.
30 Packet Flow NSX Firewall installs a dvfilter on Guest VM vnic VM-Series firewall is deployed and connected to NSX Firewall Rules to re-direct traffic VM- Series are configured in NSX Filter Re-direct NSX FW NetX Agent Packet emerging from Guest VM is redirected to VM-Series VM-Series inspects packet and applies Security Policy Virtual Switch Hypervisor Packet is forwarded to the virtual switch , Palo Alto Networks. Confiden9al and Proprietary.
31 Meeting the Needs of Both Infrastructure and Security Cloud Security Accelerate app deployments and unlock cloud agility Meet expectations of security in new operating model Increase visibility and protection against cyber attacks Maintain consistent security controls for all DC traffic , Palo Alto Networks. Confiden9al and Proprietary.
32 A Comprehensive Approach to the Data Center Safe applica-on enablement Physical Form Factor Virtual Form Factor App- ID, User- ID, Content- ID, GlobalProtect, WildFire Threat protec-on without performance implica-ons Flexible integra-on North South Control Mul9- core hardware Separate management & data plane Single pass sorware architecture Comprehensive networking founda9on (rou9ng, VLAN) Integra9on at layer 1, 2, 3 East- West Control Single pass sorware architecture Separate management & data plane. ESXi VMware NSX Citrix SDX Mul-- tenancy Mul9- tenancy via virtual systems Mul9- tenancy via virtual instances Cloud- readiness Centralized management, one integrated policy Dynamic Address Groups 9es VM movement to policy Cloud Orchestra9on via REST API Panorama with Centralized Provisioning, Policy and Logging , Palo Alto Networks. Confiden9al and Proprietary.
33
Securing the Virtualized Data Center With Next-Generation Firewalls
Securing the Virtualized Data Center With Next-Generation Firewalls Data Center Evolution Page 2 Security Hasn t Kept Up with Rate Of Change Configuration of security policies are manual and slow Weeks
About the VM-Series Firewall
About the VM-Series Firewall Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.0 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA 95054 http://www.paloaltonetworks.com/contact/contact/
Palo Alto Networks. Security Models in the Software Defined Data Center
Palo Alto Networks Security Models in the Software Defined Data Center Christer Swartz Palo Alto Networks CCIE #2894 Network Overlay Boundaries & Security Traditionally, all Network Overlay or Tunneling
VM-Series for VMware. PALO ALTO NETWORKS: VM-Series for VMware
VM-Series for VMware The VM-Series for VMware supports VMware NSX, ESXI stand-alone and vcloud Air, allowing you to deploy next-generation firewall security and advanced threat prevention within your VMware-based
About the VM-Series Firewall
About the VM-Series Firewall Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.1 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA 95054 http://www.paloaltonetworks.com/contact/contact/
The Advanced Attack Challenge. Creating a Government Private Threat Intelligence Cloud
The Advanced Attack Challenge Creating a Government Private Threat Intelligence Cloud The Advanced Attack Challenge One of the most prominent and advanced threats to government networks is advanced delivery
PALO ALTO SAFE APPLICATION ENABLEMENT
PALO ALTO SAFE APPLICATION ENABLEMENT 1 Palo Alto Networks Product Overview James Sherlow SE Manager WEUR & Africa jsherlow@paloaltonetworks.com @jsherlow Palo Alto Networks at a Glance Corporate Highlights
Enterprise Security Platform for Government
Enterprise Security Platform for Government Today s Cybersecurity Challenges in Government Governments are seeking greater efficiency and lower costs, adopting Shared Services models, consolidating data
Next-Generation Datacenter Security Implementation Guidelines
Next-Generation Datacenter Security Implementation Guidelines March 2015 INTRODUCTION 3 DEPLOYMENT OVERVIEW 4 IMPLEMENTATION GUIDELINES 4 PA-7050 Boundary Firewalls to protect north-south traffic 5 Virtual
Securing Traditional and Cloud-Based Datacenters With Next-generation Firewalls
Securing Traditional and Cloud-Based Datacenters With Next-generation Firewalls February 2015 Table of Contents Executive Summary 3 Changing datacenter characteristics 4 Cloud computing depends on virtualization
Set Up a VM-Series NSX Edition Firewall
Set Up a VM-Series NSX Edition Firewall Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.0 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA
Set Up a VM-Series Firewall on an ESXi Server
Set Up a VM-Series Firewall on an ESXi Server Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.0 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara,
What s Next for the Next Generation Firewall Vendor Palo Alto Networks Overview. October 2010 Matias Cuba - Regional Sales Manager Northern Europe
What s Next for the Next Generation Firewall Vendor Palo Alto Networks Overview October 2010 Matias Cuba - Regional Sales Manager Northern Europe About Palo Alto Networks Palo Alto Networks is the Network
Set Up a VM-Series NSX Edition Firewall
Set Up a VM-Series NSX Edition Firewall Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.1 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA
Set Up a VM-Series NSX Edition Firewall
Set Up a VM-Series NSX Edition Firewall Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.1 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara, CA
Using Palo Alto Networks to Protect the Datacenter
Using Palo Alto Networks to Protect the Datacenter July 2009 Palo Alto Networks 232 East Java Dr. Sunnyvale, CA 94089 Sales 866.207.0077 www.paloaltonetworks.com Table of Contents Introduction... 3 Granular
How Network Virtualization can improve your Data Center Security
How Network Virtualization can improve your Data Center Security Gilles Chekroun SDDC, NSX Team EMEA gchekroun@vmware.com 2014 VMware Inc. All rights reserved. Security IT spending Security spending is
Keith Luck, CISSP, CCSK Security & Compliance Specialist, VMware, Inc. kluck@vmware.com
1 Keith Luck, CISSP, CCSK Security & Compliance Specialist, VMware, Inc. kluck@vmware.com Agenda Cloud Computing VMware and Security Network Security Use Case Securing View Deployments Questions 2 IT consumption
Intro to NSX. Network Virtualization. 2014 VMware Inc. All rights reserved.
Intro to NSX Network Virtualization 2014 VMware Inc. All rights reserved. Agenda Introduction NSX Overview Details: Microsegmentation NSX Operations More Information SDDC/Network Virtualization Security
Set Up a VM-Series Firewall on an ESXi Server
Set Up a VM-Series Firewall on an ESXi Server Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.1 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa Clara,
SECURING YOUR MODERN DATA CENTER WITH CHECK POINT
SECURING YOUR MODERN DATA CENTER WITH CHECK POINT Javier Hijas Security Architect Check Point Europe 1 Agenda 1 2 3 4 What Questions is a modern / Answers datacenter Datacenter protection evolution Security
Netzwerkvirtualisierung? Aber mit Sicherheit!
Netzwerkvirtualisierung? Aber mit Sicherheit! Markus Schönberger Advisory Technology Consultant Trend Micro Stephan Bohnengel Sr. Network Virtualization SE VMware Agenda Background and Basic Introduction
Deployment Guide for Microsoft Lync 2010
Deployment Guide for Microsoft Lync 2010 Securing and Accelerating Microsoft Lync with Palo Alto Networks Next-Generation Firewall and Citrix NetScaler Joint Solution Table of Contents 1. Overview...3
Next Generation Security with VMware NSX and Palo Alto Networks VM-Series TECHNICAL WHITE PAPER
Next Generation Security with VMware NSX and Palo Alto Networks VM-Series TECHNICAL WHITE PAPER Summary of Contents Introduction... 3 Intended Audience and purpose of document.... 3 Solution Overview....
Next Generation Security with VMware NSX and Palo Alto Networks VM-Series TECHNICAL WHITE PAPER
Next Generation Security with VMware NSX and Palo Alto Networks VM-Series TECHNICAL WHITE PAPER Summary of Contents Introduction... 3 Intended Audience and purpose of document.... 3 Solution Overview....
SECURITY PLATFORM FOR HEALTHCARE PROVIDERS
SECURITY PLATFORM FOR HEALTHCARE PROVIDERS Our next-generation security platform prevents successful cyberattacks for hundreds of hospitals, clinics and healthcare networks across the globe. Palo Alto
VMware Software Defined Network. Dejan Grubić VMware Systems Engineer for Adriatic
VMware Software Defined Network Dejan Grubić VMware Systems Engineer for Adriatic The Transformation of Infrastructure Infrastructure Servers Clouds Be more responsive to business, change economics of
Content-ID. Content-ID enables customers to apply policies to inspect and control content traversing the network.
Content-ID Content-ID enables customers to apply policies to inspect and control content traversing the network. Malware & Vulnerability Research 0-day Malware and Exploits from WildFire Industry Collaboration
Moving Beyond Proxies
Moving Beyond Proxies A Better Approach to Web Security January 2015 Executive Summary Proxy deployments today have outlived their usefulness and practicality. They have joined a long list of legacy security
Microsegmentation Using NSX Distributed Firewall: Getting Started
Microsegmentation Using NSX Distributed Firewall: VMware NSX for vsphere, release 6.0x REFERENCE PAPER Table of Contents Microsegmentation using NSX Distributed Firewall:...1 Introduction... 3 Use Case
Advanced Security Services with Trend Micro Deep Security and VMware NSX Platforms
A Trend Micro Technical White Paper June 2015 Advanced Security Services with Trend Micro and VMware NSX Platforms >> This document is targeted at virtualization, security, and network architects interested
Palo Alto Networks Next-generation Firewall Overview
PALO PALO ALTO ALTO NETWORKS: NETWORKS: Next-Generation Firewall Firewall Feature Feature Overview Overview Palo Alto Networks Next-generation Firewall Overview Fundamental shifts in application usage,
How To Protect A Data Center From A Hacker Attack
CHECK POINT & VMWARE NSX AUTOMATING ADVANCED SECURITY FOR THE SOFTWARE-DEFINED DATACENTER Micki Boland Virtual and Cloud Cyber Security Architect mboland@checkpoint.com 2015 Check Point Software Technologies
What s Next for Network Security - Visibility is king! Gøran Tømte March 2013
What s Next for Network Security - Visibility is king! Gøran Tømte March 2013 Technology Sprawl and Creep Aren t the Answer More stuff doesn t solve the problem Firewall helpers have limited view of traffic
Simplifying. Single view, single tool virtual machine mobility management in an application fluent data center network
Simplifying Network Administration in an Alcatel- Lucent VMware Virtual Environment Single view, single tool virtual machine mobility management in an application fluent data center network Strategic White
Palo Alto Networks. October 6
Palo Alto Networks October 6 Agenda Malware Trends by the numbers Protect Locally Share Globally Delivery methods 21.5% ~14% OF MALWARE HAS BEEN DELIVERED OVER APPS OTHER THAN WEB AND EMAIL IN 2015 8.2%
Palo Alto Networks Users Group. February 2014
Palo Alto Networks Users Group February 2014 Topics of Discussion Syslog configuration, Integration and supported partners Panachrome App Scope Destination NAT Wildfire decision making Pan OS 6.0 brief
VMware vcloud Networking and Security Overview
VMware vcloud Networking and Security Overview Networks and Security for Virtualized Compute Environments WHITE PAPER Overview Organizations worldwide have gained significant efficiency and flexibility
HAWAII TECH TALK SDN. Paul Deakin Field Systems Engineer
HAWAII TECH TALK SDN Paul Deakin Field Systems Engineer SDN What Is It? SDN stand for Software Defined Networking SDN is a fancy term for: Using a controller to tell switches where to send packets SDN
Integrated Approach to Network Security. Lee Klarich Senior Vice President, Product Management March 2013
Integrated Approach to Network Security Lee Klarich Senior Vice President, Product Management March 2013 Real data from actual networks 2 2012, Palo Alto Networks. Confidential and Proprietary. 2008: HTTP,
Business Values of Network and Security Virtualization
Business Values of Network and Security Virtualization VMware NSX in the context of the Software Defined Data Center Klaus Jansen Virtual Networks Sales Specialist VMware NSBU 2014 VMware Inc. All rights
Breaking the Cyber Attack Lifecycle
Breaking the Cyber Attack Lifecycle Palo Alto Networks: Reinventing Enterprise Operations and Defense March 2015 Palo Alto Networks 4301 Great America Parkway Santa Clara, CA 95054 www.paloaltonetworks.com
Set Up a VM-Series Firewall on the Citrix SDX Server
Set Up a VM-Series Firewall on the Citrix SDX Server Palo Alto Networks VM-Series Deployment Guide PAN-OS 6.1 Contact Information Corporate Headquarters: Palo Alto Networks 4401 Great America Parkway Santa
How To Build A Software Defined Data Center
Delivering the Software Defined Data Center Georgina Schäfer Sr. Product Marketing Manager VMware Calvin Rowland, VP, Business Development F5 Networks 2014 VMware Inc. All rights reserved. F5 & Vmware
Architecting Security for the Private Cloud. Todd Thiemann
Architecting Security for the Private Cloud Todd Thiemann Classification 4/9/2010 Copyright 2009 Trend Micro Inc. 1 The Evolving Datacenter Lowering Costs, Increasing Flexibility Public Cloud Private Cloud
Unlock the full potential of data centre virtualisation with micro-segmentation. Making software-defined security (SDS) work for your data centre
Unlock the full potential of data centre virtualisation with micro-segmentation Making software-defined security (SDS) work for your data centre Contents 1 Making software-defined security (SDS) work for
VM-Series Firewall Deployment Tech Note PAN-OS 5.0
VM-Series Firewall Deployment Tech Note PAN-OS 5.0 Revision A 2012, Palo Alto Networks, Inc. www.paloaltonetworks.com Contents Overview... 3 Supported Topologies... 3 Prerequisites... 4 Licensing... 5
WildFire. Preparing for Modern Network Attacks
WildFire WildFire automatically protects your networks from new and customized malware across a wide range of applications, including malware hidden within SSL-encrypted traffic. WildFire easily extends
Deployment Guide for Citrix XenDesktop
Deployment Guide for Citrix XenDesktop Securing and Accelerating Citrix XenDesktop with Palo Alto Networks Next-Generation Firewall and Citrix NetScaler Joint Solution Table of Contents 1. Overview...
VMware NSX A Perspective for Service Providers part 2
VMware NSX A Perspective for Service Providers part 2 Using Software Defined Networking to harden DC security controls Trevor Gerdes Strategic Architect Security and Networks NSX for SPs Part 2 - Agenda
Content-ID. Content-ID URLS THREATS DATA
Content-ID DATA CC # SSN Files THREATS Vulnerability Exploits Viruses Spyware Content-ID URLS Web Filtering Content-ID combines a real-time threat prevention engine with a comprehensive URL database and
How To Protect Virtualized Data From Security Threats
S24 Virtualiza.on Security from the Auditor Perspec.ve Rob Clyde, CEO, Adap.ve Compu.ng; former CTO, Symantec David Lu, Senior Product Manager, Trend Micro Hemma Prafullchandra, CTO/SVP Products, HyTrust
Architecting and Building a Secure and Compliant Virtual Infrastructure and Private Cloud
Architecting and Building a Secure and Compliant Virtual Infrastructure and Private Cloud Rob Randell, CISSP Principal Systems Engineer Security Specialist Agenda What is the Cloud? Virtualization Basics
Palo Alto Networks Next-Generation Firewall Overview
PALO PALO ALTO ALTO NETWORKS: NETWORKS: Next-Generation Firewall Firewall Feature Feature Overview Overview Palo Alto Networks Next-Generation Firewall Overview Fundamental shifts in application usage,
Meeting the Challenges of Virtualization Security
Meeting the Challenges of Virtualization Security Coordinate Security. Server Defense for Virtual Machines A Trend Micro White Paper August 2009 I. INTRODUCTION Virtualization enables your organization
Firewall Feature Overview
Networking P A L O A LT O N E T W O R K S : F i r e w a l l F e a t u r e O v e r v i e w Firewall Feature Overview A next-generation firewall restores application visibility and control for today s enterprises
Agenda. 3 2012, Palo Alto Networks. Confidential and Proprietary.
Agenda Evolution of the cyber threat How the cyber threat develops Why traditional systems are failing Need move to application controls Need for automation 3 2012, Palo Alto Networks. Confidential and
REMOVING THE BARRIERS FOR DATA CENTRE AUTOMATION
REMOVING THE BARRIERS FOR DATA CENTRE AUTOMATION The modern data centre has ever-increasing demands for throughput and performance, and the security infrastructure required to protect and segment the network
_Firewall. Palo Alto. How Logtrust works with Palo Alto Networks
_Firewall Palo Alto Networks is the next-generation firewalls that enhance your network security and enable any enterprises to look beyond IP addresses and packets. These innovative firewalls let you see
Next Generation Enterprise Network Security Platform
Next Generation Enterprise Network Security Platform November 2014 Lyndon Clough - Territory Sales Manager Derran Guinan Systems Engineer Agenda The Palo Alto Networks story Today s Threat Landscape The
CASE STUDY. AUSTRIAN AIRLINES Modernizes Network Security for First Class Performance
CASE STUDY AUSTRIAN AIRLINES PAGE 1 PA-5020 (2) Austrian Airlines is Austria s largest carrier and operates a global network of routes to around 130 destinations. The company s hub at Vienna International
How to Dramatically Reduce the Cost and Complexity of PCI Compliance
How to Dramatically Reduce the Cost and Complexity of PCI Compliance Using Network Segmentation and Policy-Based Control Over Applications, Users And Content to Protect Cardholder Data December 2008 Palo
A Modern Framework for Network Security in Government
A Modern Framework for Network Security in Government 3 A MODERN FRAMEWORK FOR NETWORK SECURITY IN THE FEDERAL GOVERNMENT Government: Securing Your Data, However and Wherever Accessed Governments around
Next-Generation Firewall Overview
Next-Generation Firewall Overview Business and technology advancements have steadily eroded the protection that the traditional firewall provided. Users have come to expect to be able to work from any
VMware vcloud Networking and Security
VMware vcloud Networking and Security Efficient, Agile and Extensible Software-Defined Networks and Security BROCHURE Overview Organizations worldwide have gained significant efficiency and flexibility
Next-Generation Firewall Overview
Next-Generation Firewall Overview Recent changes in application behavior and usage patterns have steadily eroded the protection that the traditional firewall once provided. Users are accessing any application,
SDN Security for VMware Data Center Environments
SOLUTION BRIEF SDN SECURITY FOR VMWARE DATA CENTER ENVIRONMENTS Purpose-built virtual security appliances will be increasingly used alongside hardware appliances to secure enterprise data centers, which
Panorama. Panorama provides network security management beyond other central management solutions.
Panorama Panorama provides network security management beyond other central management solutions. Headquarters PANORAMA Simplified Powerful Policy Enterprise Class Management Unmatched Visibility Data
Limiting the Spread of Threats: A Data Center for Every User
SESSION ID: SPO1-R03 Limiting the Spread of Threats: A Data Center for Every User Geoff Huang Director Product Marketing VMware Tony Paikeday Senior Product Marketing Manager VMware Why do breaches still
Itex VMware NSX Network Virtualization Presentation
Itex VMware NSX Network Virtualization Presentation Gabriel Maciel VCP3, VCP4/5-DCV, Security+, Project+ Sr. Systems Engineer Canadian Federal Government @gmaciel_ca 2014 VMware Inc. All rights reserved.
Secure Cloud-Ready Data Centers Juniper Networks
Secure Cloud-Ready Data Centers Juniper Networks JUNIPER SECURITY LEADERSHIP A $1B BUSINESS Market Leadership Data Center with High- End Firewall #1 at 42% Secure Mobility with SSL VPN #1 at 25% Security
Virtualization, SDN and NFV
Virtualization, SDN and NFV HOW DO THEY FIT TOGETHER? Traditional networks lack the flexibility to keep pace with dynamic computing and storage needs of today s data centers. In order to implement changes,
App-ID. PALO ALTO NETWORKS: App-ID Technology Brief
App-ID Application Protocol Detection / Decryption Application Protocol Decoding Application Signature Heuristics App-ID uses as many as four identification techniques to determine the exact identity of
Unleash the power of Cisco ACI and F5 Synthesis for Accelerated Application deployments. Ravi Balakrishnan Senior Marketing Manager, Cisco Systems
Unleash the power of Cisco ACI and F5 Synthesis for Accelerated Application deployments Ravi Balakrishnan Senior Marketing Manager, Cisco Systems Cisco F5 Solutions Outline Cisco and F5 Areas of Partnership
May 2010. Palo Alto Networks 232 E. Java Drive Sunnyvale, CA 94089 408-738-7700 www.paloaltonetworks.com
Application Visibility and Control: In the Firewall vs. Next to the Firewall How Next-Generation Firewalls are Different From UTM and IPS-based Products May 2010 Palo Alto Networks 232 E. Java Drive Sunnyvale,
White Paper. Juniper Networks. Enabling Businesses to Deploy Virtualized Data Center Environments. Copyright 2013, Juniper Networks, Inc.
White Paper Juniper Networks Solutions for VMware NSX Enabling Businesses to Deploy Virtualized Data Center Environments Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3
REPORT & ENFORCE POLICY
App-ID KNOWN PROTOCOL DECODER Start Decryption (SSL or SSH) Decode Signatures Policy IP/Port Policy Application Signatures Policy IDENTIFIED TRAFFIC (NO DECODING) UNKNOWN PROTOCOL DECODER Apply Heuristics
Preventing Data Leaks At The Firewall A Simple, Cost-Effective Way To Stop Social Security and Credit Card Numbers From Leaving Your Network
Preventing Data Leaks At The Firewall A Simple, Cost-Effective Way To Stop Social Security and Credit Card Numbers From Leaving Your Network December 2008 Palo Alto Networks 232 E. Java Dr. Sunnyvale,
How Attackers are Targeting Your Mobile Devices. Wade Williamson
How Attackers are Targeting Your Mobile Devices Wade Williamson Today s Agenda Brief overview of mobile computing today Understanding the risks Analysis of recently discovered malware Protections and best
How Palo Alto Networks Can Help With ASD's Top Cyber Intrusion Mitigation Strategies
How Palo Alto Networks Can Help With ASD's Top Cyber Intrusion Mitigation Strategies Table of Contents Introduction 3 Executive Summary 3 A Systematic Approach to Network Application Whitelisting 4 Positive
Secure Clouds - Secure Services Trend Micro best-in-class solutions enable data center to deliver trusted and secure infrastructures and services
Secure Clouds - Secure Services Trend Micro best-in-class solutions enable data center to deliver trusted and secure infrastructures and services Udo Schneider Trend Micro Udo_Schneider@trendmicro.de 26.03.2013
Supporting Palo Alto Networks Firewalls in CloudStack. April 10, 2014
Supporting Palo Alto Networks Firewalls in CloudStack April 10, 2014 Introductions Syed Ahmed Developer @ CloudOps CloudOps builds and operates clouds of all shapes and sizes Develops cloud infrastructure
Security and Billing for Azure Pack. Presented by 5nine Software and Cloud Cruiser
Security and Billing for Azure Pack Presented by 5nine Software and Cloud Cruiser Meet our Speakers Symon Perriman VP of Business Development 5nine Software symon@5nine.com @SymonPerriman Paul Zinn Senior
FIREWALL OVERVIEW. Palo Alto Networks Next-Generation Firewall
FIREWALL OVERVIEW Palo Alto Networks Next-Generation Firewall Fundamental shifts in application usage, user behavior, and complex, convoluted network infrastructure create a threat landscape that exposes
Network Virtualization Solutions - A Practical Solution
SOLUTION GUIDE Deploying Advanced Firewalls in Dynamic Virtual Networks Enterprise-Ready Security for Network Virtualization 1 This solution guide describes how to simplify deploying virtualization security
Data Center Automation with the VM-Series
Data Center Automation with the VM-Series Tech Note PAN-OS 5.0 Revision A 2012, Palo Alto Networks, Inc. www.paloaltonetworks.com Contents Overview... 3 Process... 3 Creating the Gold Standard... 3 Initial
Softverski definirani data centri - 2. dio
Softverski definirani data centri - 2. dio Vmware NSX To Deliver a Software Defined Data Center Implementation Automated Operational Model Programmatically Create, Snapshot, Store, Move, Delete, Restore
MEETING CSIP OBJECTIVES WITH AN AUTOMATED AND PREVENTIVE SECURITY APPROACH
MEETING CSIP OBJECTIVES WITH AN AUTOMATED AND PREVENTIVE SECURITY APPROACH A Palo Alto Networks and Channel Partner Case Study Every day, the U.S. federal government experiences increasingly sophisticated
Secure Multi Tenancy In the Cloud. Boris Strongin VP Engineering and Co-founder, Hytrust Inc. bstrongin@hytrust.com
Secure Multi Tenancy In the Cloud Boris Strongin VP Engineering and Co-founder, Hytrust Inc. bstrongin@hytrust.com At-a-Glance Trends Do MORE with LESS Increased Insider Threat Increasing IT spend on cloud
Securing Virtualization with Check Point and Consolidation with Virtualized Security
Securing Virtualization with Check Point and Consolidation with Virtualized Security consolidate security gateways with full power of Software Blades with Check Point Virtual Systems (VSX) secure virtualized
1518 Best Practices in Virtualization & Cloud Security with Symantec
1518 Best Practices in Virtualization & Cloud Security with Symantec Tues May 6, 11:00 Kevin Stultz Symantec Product Management Chip Epps Symantec Product Marketing 1 Agenda 1 2 Trends in Virtualization
How To Protect Your Virtual Infrastructure From Attack From A Cyber Threat
VMware Integrated Partner Solutions for Networking and Security VMware Integrated Partner Solutions for Security and Compliance VMware vcloud Networking and Security is the leading networking and security
Securing FlexPod Deployments with Next-Generation Firewalls
Securing FlexPod Deployments with Next-Generation Firewalls CHALLENGE The VMware on FlexPod platform is being widely deployed to accelerate the process of delivering virtualized application workloads in
Palo Alto Networks Certified Network Security Engineer (PCNSE6) Study Guide
Palo Alto Networks Certified Network Security Engineer (PCNSE6) Study Guide Welcome to the wonderful world of Palo Alto Networks Certification! We are very excited you have decided to embark upon such
Software Defined Data Centers Network Virtualization & Security. Jeremy van Doorn Director of Systems Engineering EMEA, Network & Security
Software Defined Data Centers Network Virtualization & Security Jeremy van Doorn Director of Systems Engineering EMEA, Network & Security 1 My business and its IT organization are being engulfed by a torrent
End to End Security do Endpoint ao Datacenter
do Endpoint ao Datacenter Piero DePaoli & Leandro Vicente Security Product Marketing & Systems Engineering 1 Agenda 1 Today s Threat Landscape 2 From Endpoint: Symantec Endpoint Protection 3 To Datacenter:
Installation Guide Avi Networks Cloud Application Delivery Platform Integration with Cisco Application Policy Infrastructure
Installation Guide Avi Networks Cloud Application Delivery Platform Integration with Cisco Application Policy Infrastructure August 2015 Table of Contents 1 Introduction... 3 Purpose... 3 Products... 3
Next-Generation Firewall Overview
Next-Generation Firewall Overview Fundamental shifts in the application and threat landscape, user behavior, and network infrastructure have steadily eroded the security that traditional port-based firewalls
Network Access Control in Virtual Environments. Technical Note
Contents Security Considerations in.... 3 Addressing Virtualization Security Challenges using NAC and Endpoint Compliance... 3 Visibility and Profiling of VMs.... 4 Identification of Rogue or Unapproved
Securing the private cloud
Securing the private cloud Gary Gardiner Security Engineer 2011 Check Point Software Technologies Ltd. [Unrestricted] For everyone Top Trends of 2011 1 2 3 4 5 6 7 8 9 Virtualization & Cloud Computing