Unique visibility and threat prevention architecture
Palo Alto Networks threat prevention is built on the unique ability to inspect all traffic on all ports regardless of evasion. The solution decodes more than 100 applications and protocols decoders to look for threats hidden within streams of application data. Your IT team can selectively decrypt SSL by policy to ensure threats are not allowed to hide inside the encrypted stream, and can control the use of proxies, circumventors and encrypted tunnels which attackers use to hide. Additionally, Palo Alto Networks designed a unique approach that performs all threat analysis in a single unified engine and leverages a common signature format. This means that content is processed only once, and performance remains steady even as additional protections are enabled.
Advanced URL Filtering, and DNS Security subscriptions only
Commit any pending changes. If you do not have pending changes, which prevents you from committing any configuration updates, you can: issue a commit force command through the CLI or make an update that writes to the candidate configuration, which enables the commit option.
WildFire: protection from targeted and unknown threats
Modern attackers have increasingly turned to targeted and unknown variants of malware in order sneak past traditional security solutions. To meet this challenge, Palo Alto Networks has developed WildFire, which provides the ability to identify malicious behaviors in executable files by running them in a virtual environment and observing their behaviors. This enables Palo Alto Networks to identify malware quickly and accurately, even if the particular sample of malware has never been seen in the wild before.
Palo Alto Firewall
|Palo Alto Networks Products|
|PA-220 Series Hardware|
|Palo Alto Networks PA-220||#PAN-PA-220|
|Partner enabled premium support|
|Partner enabled premium support year 1, PA-220||#PAN-SVC-BKLN-220|
|Partner enabled premium support renewal, PA-220||#PAN-SVC-BKLN-220-R|
|Partner enabled premium support 3-year prepaid, PA-220||#PAN-SVC-BKLN-220-3YR|
|Partner enabled premium support 3-year prepaid renewal, PA-220||#PAN-SVC-BKLN-220-3YR-R|
|Threat prevention subscription year 1, PA-220||#PAN-PA-220-TP|
|Threat prevention subscription renewal, PA-220||#PAN-PA-220-TP-R|
|Threat prevention subscription 3-year term, PA-220||#PAN-PA-220-TP-3YR|
|Threat prevention subscription 3-year term renewal, PA-220||#PAN-PA-220-TP-3YR-R|
|Threat prevention subscription for device in an HA pair year 1, PA-220||#PAN-PA-220-TP-HA2|
|Threat prevention subscription 3 year term for device in an HA pair, PA-220||#PAN-PA-220-TP-3YR-HA2|
|WildFire subscription year 1, PA-220||#PAN-PA-220-WF|
|WildFire subscription renewal, PA-220||#PAN-PA-220-WF-R|
|WildFire subscription 3-year term, PA-220||#PAN-PA-220-WF-3YR|
|WildFire subscription 3-year term renewal, PA-220||#PAN-PA-220-WF-3YR-R|
|WildFire subscription year 1 for device in HA pair, PA-220||#PAN-PA-220-WF-HA2|
|WildFire subscription renewal for device in HA pair, PA-220||#PAN-PA-220-WF-HA2-R|
WildFire subscription 3-year term for device in an HA pair, PA-220
WildFire subscription 3-year term renewal for device in HA pair, PA-220
Advanced URL Filtering
Advanced URL Filtering Subscription, 1-year, PA-220
Subscription Advanced URL Filtering, 1-year, Renewal, PA-220
|Advanced URL Filtering Subscription, 3-year, PA-220||#PAN-PA-220-ADVURL-3YR|
|Subscription Advanced URL FIltering, 3-year, Renewal, PA-220||#PAN-PA-220-ADVURL-3YR-R|
|Advanced URL Filtering Subscription, 1-year, PA-220 HA Pair||#PAN-PA-220-ADVURL-HA2|
|Subscription Advanced URL Filtering, 1-year, PA-220, HA Pair Renewa||#PAN-PA-220-ADVURL-HA2-R
|Advanced URL Filtering Subscription, 3-year, PA-220 HA Pair||#PAN-PA-220-ADVURL-3YR-HA2|
|Subscription Advanced URL FIltering, 3-year, PA-220, HA Pair Renewal||#PAN-PA-220-ADVURL-3YR-HA2-R|
Vulnerability-based protection detects and blocks exploit attempts and evasive techniques on both the network and application layers, including port scans, buffer overflows, protocol fragmentation, and obfuscation.
Reduce the likelihood of a malware infection by preventing file types known to hide malware from entering your network.
Shut down malware delivery
Palo Alto Networks Threat Prevention security service protects against malware delivery through custom-built signatures that are based on content to protect against known malware, including variants that haven’t been seen in the wild yet.