SANTA CLARA, Calif., Jan 14, 2014 /PRNewswire/ -- Palo Alto Networks® (NYSE: PANW), the leader in enterprise security, today announced enhancements to its enterprise security platform that increase advanced threat detection and prevention capabilities for its customers worldwide. Most significantly, this includes enhancements to the Palo Alto Networks WildFire™ service that enable quick discovery and elimination of previously unknown malware, zero-day exploits, and advanced persistent threats (APTs).
Cyber criminals are employing new stealth methods to evade traditional security measures, such as stateful firewalls, intrusion prevention systems and anti-virus (AV) systems. These legacy approaches often address only a single threat vector across a limited range of network traffic, resulting in a higher attack penetration rate and costly human incident response.
To better detect sophisticated attacks, a highly automated and scalable "closed loop" approach is required. One that begins with positive security controls to reduce the attack surface; inspects all traffic, ports, and protocols to block all known threats; rapidly detects unknown threats; then, automatically employs new protections back to the front line to ensure previously unknown threats are known to all and blocked.The Palo Alto Networks enterprise security platform is pioneering this approach; it starts with its next-generation firewall as the core enforcement vehicle within the network, and is extended by the advanced detection and analysis capabilities delivered by the WildFire service, which is now used by more than 2,400 customers worldwide. New advancements include:
- Extended file visibility – all common file types, including PDFs, Office documents, Java, and APKs, operating systems, and applications (encrypted or not) are now detected, sandboxed and filtered.
- Zero-day exploit detection – using behavioral analysis, this signature independent capability in the WildFire cloud quickly identifies exploits in common applications and operating systems and distributes the intelligence to subscribing customers in as little as 30 minutes to prevent future attacks.
- Discovery of malicious domains – blocks the critical command-and-control phase of an advanced attack by building a global database of compromised domains and infrastructure.
- Single "pane of glass" view into incident response data – in a single view, security administrators have access to a wealth of information on malware, its behavior, compromised hosts, and more, so that incident response teams can quickly address threats and build proactive controls.