Threats do not discriminate between application delivery vectors, requiring an approach, that has full visibility into all application traffic, including SSL encrypted content, with full user context. Threat Prevention leverages the visibility of the firewall to inspect all traffic, automatically preventing known threats, regardless of port, protocol or SSL encryption. The majority of attacks and exposure to malicious content occurs during the normal course of web browsing activities, which requires the ability to allow safe, secure web access for all users. URL Filtering with PAN-DB automatically prevents attacks, that leverage the web as an attack vector, including phishing links in emails, phishing sites, HTTP-based command and control, malicious sites and pages that carry exploit kits. The GlobalProtect Portal provides the management functions for your GlobalProtect infrastructure. Every endpoint, that participates in the GlobalProtect network receives configuration information from the portal, including information about available gateways as well as any client certificates, that may be required to connect to the gateways. In addition, the portal controls the behavior and distribution of the GlobalProtect agent software to both Mac and Windows laptops. Palo Alto Networks WildFire cloud-based threat analysis service is the advanced analysis and prevention engine for highly evasive zero-day exploits and malware. The service employs a unique multi-technique approach, combining dynamic and static analysis, innovative machine learning techniques, and a groundbreaking bare metal analysis environment to detect and prevent even the evasive threats.
Palo Lab Unit Bundle Subscription Threat prevention, PANDB URL filtering, GlobalProtect Portal & Gateway, WildFire - Subscription license (1 year) + Standard Support - for P/N: PAN-PA-200-LAB
General
Category:
- Online & appliance based services - content filtering, appliance software, intrusion detection, adware & malware removal tools
Product Type:
- Subscription license - 1 year
Licensing
Service & Support
Type:
- Phone consulting - 1 year - response time: 1 business hour (7:00 AM - 6:00 PM) / Monday-Friday - severity critical
- Phone consulting - 1 year - response time: 2 business hours (7:00 AM - 6:00 PM) / Monday-Friday - severity high
- Phone consulting - 1 year - response time: 4 business hours (7:00 AM - 6:00 PM) / Monday-Friday - severity medium
- Phone consulting - 1 year - response time: 8 business hours (7:00 AM - 6:00 PM) / Monday-Friday - severity low
- Web support - 1 year
- New releases update - 1 year
Compatibility Information
- Flexible, policy-based control
As a complement to the application visibility and control enabled by App-ID, URL categories can be used as a match criteria for policies. Instead of creating policies that are limited to either allowing all or blocking all behavior, URL category as a match criteria allows for exception based behavior, resulting in increased flexibility, yet more granular policy enforcement. - Customizable end-user notification
Each organization has different requirements regarding how to inform end users that they are attempting to visit a web page that is blocked according to the corporate policy and associated URL filtering profile. To accomplish this goal, administrators can use a custom block page to notify end users of the policy violation. The page can include references to the username, IP address, the URL they are attempting to access and the URL category. - Customizable URL database and categories
To accommodate the rapidly expanding number of URLs, as well as regional and industry-specification URLs, the 20 million URL database can be augmented to suit the traffic patterns of the local user community. If a URL is detected that is not categorized by the local URL database, the firewall can request the category from a hosted 180 million URL database. The URL is then cached locally in a separate 1 million URL capacity database. In addition to database customization, administrators can create custom URL categories to further tailor the URL controls to suit their specific needs. - Deployment flexibility
The unlimited user license behind each URL filtering subscription and the high performance nature of the Palo Alto networks firewall means that customers can deploy a single appliance to control web activity for an entire user community without worrying about cost variations associated with user-based licensing.