AI

AI

Palo Alto networks

Do you have a state-of-the-art firewall from Palo Alto Networks today?

In this rapidly-evolving technological world, it is crucial to check whether your firewall can still face current and future threats. Our Palo Alto experts have created a checklist with 7 items to help you protect your organization.

Go to the checklist

Is your firewall Artificially Intelligent?

A traditional firewall, even with automated response features, can only act on the bad rating of a threat. Sometimes, individual behaviors may seem non-malicious, but if they are seen over time, they might be part of a multi-step intrusion. They are often used by attackers to perform automatic reconnaissance with the goal of finding valuable resources.

A Next-Generation Firewall with Artificial Intelligence protects you against the following risks:

Silent, stealth usage of compromised endpoints;
Risky behavior leading to intrusions because of human errors;
Malicious insiders having months of low profile damageable activity, after a sudden change of behavior;
Targeted attacks typically multi-staged and looking for valuable data, and the costliest at the end;
Slow investigation, with manual endpoint forensics, takings days or weeks to block threats;
Detection and response solutions just don’t work because they are not based on big data that depend on fast software release cycles and because they are based on manually defined correlation rules, hard to develop and giving high rates of false positives.

Artificial Intelligence automates and orchestrates security analysis by:

Integrating metadata of collected logs of the firewalls and applying attack detection algorithms to them to uncover risky behaviors;
Defining device and user profile in order to have a baseline which is specific enough;
Automating investigation steps by automatically gathering more information, using Wildfire to analyze suspect executables implied and hunting the impacted systems in the customer environment;
Automating response to Palo Alto Networks’ firewalls by blocking compromised devices and restricting access to uncovered malicious sites.

Palo Alto Networks Cortex XDR: Behavioral Analytics based on AI

Palo Alto Networks’ Cortex XDR is an application framework allowing for hunting down and stopping attacks quickly with cloud-delivered analytics and machine learning.

Cortex XDR uncovers malicious actions by identifying anomalies that indicate active attacks. This is done through user and device behavior analytics. The rich data that is collected from the Next-Generation Security Platform, which has attack detection algorithms, allows you to detect post-intrusion activity with precision.

Features of Cortex XDR:

Collect the rich network, endpoint and cloud data needed for behavioral analytics without deploying new network appliances or agents with Palo Alto Networks’ Logging Service.
Accurately identify advanced targeted attacks, malware, malicious insiders and compromised endpoints with supervised and unsupervised machine learning.
Rapidly confirm threats by reviewing actionable alerts with investigative detail and leverage the Next-Generation Firewall to block threats before the damage is done.

As depicted above, once a malware has been installed, the next stages of the attack might consist of allowed operations that look innocent individually.

However, machine learning can help detect those changes in behavior (e.g. more connections to more servers, or much bigger traffic to the same server), and fire an alert while automatically analyzing which elements are used for that attack and remediating it on the firewall level.

Features of Cortex XSOAR:

Cortex XSOAR is the way to automate tasks of threat investigation. Even other tasks could be automated because over 300 products are supported. The automation is done by using the playbooks that can be build to quickly start automation without the need for API integration knowledge. Cortex XSOAR also provides threat collaboration and ticketing follow up natively integrated into XSOAR. This should optimize the efficiency of security analysis and Security/Network engineers that most often need to keep the network up and running and follow up security. By providing them a tool to automate tasks they can spend more time on the security and network tasks that are not repetitive. Cortex XSOAR can provide them also automated context information to perform better and quicker analysis resulting and providing better support for your business.

Is your Palo Alto Networks Firewall still Next Generation?

Is your firewall configured according to current security best practices?

Palo Alto Networks developed a Best Practice Assessment tool to verify this.

Your Next-Generation firewall as Zero-Trust framework enabler?

How do you transfer your security policies to the cloud? Do you have a ‘single pane of glass’ for your entire perimeter?

Does your firewall already have an extension to the cloud?

Palo Alto Networks developed a Best Practice Assessment tool to verify this.

Is your firewall Artificially Intelligent?

Can you automatically detect whether your users or IoT devices have strange behavior? Do you know when your network undergoes a cyberattack?

Are all security functionalities active on your firewall?

Have you activated all software licenses?

Does your firewall support PAN-OS10.0 or higher?

Do you know the latest features for your Palo Alto Networks firewall? Can your Palo Alto Networks firewall support the latest PAN-OS version?

What information does your firewall have for your CISO?

Which questions from your CISO can you easily answer?

Cortex platform as the cornerstone for MicroSOC Managed Threat Detection & Response

Get the most out of your Cortex XDR platform by adding threat analysis and incident response services.

Incident Response Hotline

Facing cyber incidents right now?

Contact our 24/7/365 world wide service incident response hotline.