Palo Alto Networks the next-generation security company,announced new hardware and updates to its PAN-OS® operating systemthatfurther enable organizations to easily implement and automate best practices for application-based controls that strengthen security.With today’s announcement, Palo Alto Networks introduces PAN-OS version 8.1, the PA-3200 Series, the PA-5280, the ruggedized PA-220R and two new models in the M-Series management appliances.
Every organization requires visibility into network traffic in order to prevent successful cyberattacks, but the proliferation of encryption has obstructed the view security teams once had into the data traversing their networks. Gartner predicts that,“Through 2019, more than 80 percent of enterprises’ web traffic will be encrypted.”1Gartner also predicts that, “During 2019, more than fifty percent of new malware campaignswill use various forms of encryption and obfuscation to conceal delivery, and to conceal ongoing communications, including data exfiltration.”1
According to Palo Alto Networks, many organizations have not yet addressed the lack of visibility associated with encrypted traffic due to the complexity and performance impact of decryption, leaving those that do not decrypt network traffic without the ability to find and preventover half of malware campaigns.
The new Palo Alto Networks PAN-OS operating system, version 8.1, reduces the complexity surrounding theimplementationof cybersecurity best practices, including those associated with SSL-decryption within multi-vendor environments. New next-generation firewall models improve overall performance and enable customers to decrypt traffic at high speeds.Enhanced application logging adds additional richness to log data to improve the precision of Magnifier’s behavioral analytics with which customers rapidly hunt down and stopadvanced threats.
Key benefits of the capabilities announced today include:
Easier adoption of SSL-decryption in multi-vendor environments: Streamlined SSL decryption provides high-throughput decryption on the next-generation firewall and enablessharing of cleartext traffic with chains of devices for additional enforcement, such as DLP. This further eliminates the need for dedicated SSL offloaders, simplifying deployment, network architectureand operations.
20X decryption sessionscapacity boost at internet edge: With 20 times more SSL-decryption sessions capacity compared to its predecessor, the new PA-3200 Series appliances deliver high-performance decryption at the internet edge. The new PA-5280 appliance brings higher performance and doubles the session capacity for securing large data centers and mobile network operators, or MNO, infrastructures.
Efficient adoption of best practices:App-ID™technology-based securitycan now be achieved with even simpler workflows and policy review tools, allowing administrators to more effectively and confidently enforce best practices for application controls. Further, administrators can maintain a tight and effective app-based security policywith enhanced rule usage tracking.
Management at scale: New capabilities simplifythe management and operational complexities of large, distributed deployments.The proactive device monitoring feature in Panorama™management alerts the administrator if device behavior is deviating from the norm. With little manual effort, the featurecan be integrated into an automated workflow to enable operations teamsto quickly perform remediation actions. New M-600 and M-200 management appliances deliver high-performance,with log ingestion rates upto two times compared to their predecessors, anddouble the log storage capacities.
Advanced threat detection and prevention: Updates to the WildFire® cloud-based threat analysis serviceenable customers todetect zero-day malwareusingevasive packing techniques,spot malware targeting Linux servers and IoT devices, and find malicious files hiding in less common file archive formats, such as7-Zip and RAR.
Quick detection of targeted attacks: The next-generation firewall evolvesto become an advanced network sensor that collects rich data for analytics, which can be easily expanded with content-based updates. As part of the Application Framework, Magnifier uses this data to enable customers to identify advanced attacks, insider threats and malware, with precision.