Palo Alto Networks SLO WUG NG Silvester Drobnič, CHS d.o.o.

About Palo Alto Networks Palo Alto Networks is the Network Security Company World-class team with strong security and networking experience Founded in 2005, first customer July 2007, top-tier investors Builds next-generation firewalls that identify / control 1,300+ applications Restores the firewall as the core of enterprise network security infrastructure Innovations: App-ID™, User-ID™, Content-ID™ Global momentum: 5,300+ customers August 2011: Annual bookings run rate is over US$200 million*, cash-flow positive last five consecutive quarters

2011 Magic Quadrant for Enterprise Network Firewalls Source: Gartner

Gartner: Firewalls Are Not Commoditized Next-generation firewalls are evolving the enterprise network firewall market Running on general purpose server hardware won’t perform next-generation firewall features well for the enterprise Established vendors are milking their installed base – raising prices without delivering new features UTM is for SMB. SMB ≠ enterprise branch office.

Applications Have Changed – Firewalls Have Not The gateway at the trust border is the right place to enforce policy control - Sees all traffic - Defines trust boundary BUT…Applications Have Changed - Ports ≠ Applications - IP Addresses ≠ Users - Packets ≠ Content Problem: IT Can’t Safely Enable Internet Applications Leaving IT blind to apps, users & content Collaboration / Media SaaS Personal

New generation of addicted Internet users – smarter than you?

the attacker is not a bored geek

nation states and organized crime

New Requirements for the Firewall 1. Identify applications regardless of port, protocol, evasive tactic or SSL 2. Identify users regardless of IP address 3. Scan content in real-time for threats and sensitive data embedded across applications 4. Granular visibility and policy control over applications, users and content 5. Multi-gigabit, in-line deployment with no performance degradation Requirements – The Next Generation Firewall

Unique ID Technologies Transform the Firewall App-ID Identify the application User-ID Identify the user Content-ID Scan the content

Single-Pass Parallel Processing (SP3) Architecture Single Pass Single processes for: - Traffic classification (app identification) - User/group mapping - Content scanning – threats, URLs, confidential data One policy Parallel Processing Function-specific hardware engines Multi-core security processing Separate data/control planes Up to 20Gbps, Low Latency

NSS Labs test – PAN as IPS The highest IPS block rate in recent history (93.4%) 100% resistance to IPS evasion techniques Simple IPS configuration and tuning. Provided all the above while exceeding the datasheet performance metrics

PAN Hardware & Licenses Hardware Enota se izbira glede na zahtevano propustnost Možna je HA postavitev enot v A-P in A-A načinu Licence Support licenca je obvezna Opcijski licenci: - Thread licenca (IPS, AV, AS) - URL filtering Ostale licence: - Virtual Firewall - Global Protect POMEMBNO Ni omejitve na uporabnike Ni dodatnih licenc za VPN PA-500 PA-2020 PA-2050 PA-4020 PA-4050 PA-4060 PA-5060 PA-5050 PA-5020

Kako naprej Zahtevajte test PANa Po testu zahtevajte AVR poročilo V vmesnem času: - PAN AUR poročilo - Gartnerjeva NGF definicija - Gartnerjevo zadnje poročilo o požarnih pregradah - NSS Labs poročilo o PAN IPS zmogljivosti - PAN Research center na WEBu:

DEMO - Flexible Deployment Options Visibility Transparent In-Line Firewall Replacement Application, user and content visibility without inline deployment IPS with app visibility & control Consolidation of IPS & URL filtering Firewall replacement with app visibility & control Firewall + IPS Firewall + IPS + URL filtering

Research Center

Application Visibility and Risk Report Tells the budget holder what we are going to review Presents findings in clear, business oriented manner Introduces business risks associated with the application traffic

Kako naprej Distributer: CHS d.o.o. - Kontaktna oseba: Silvester Drobnič - - gsm: Dokumenti na ftp://ftp2.chs.si/PAN/NG/ V vmesnem času: - PAN AUR poročilo - Gartnerjeva NGF definicija - Gartnerjevo zadnje poročilo o požarnih pregradah - NSS Labs poročilo o PAN IPS zmogljivosti - PAN Research center na WEBu - Ocenite CAPEX in OPEX vaše trenutne opreme - Ali veste kaj spušča vaš obstoječi FW v omrežje