Regain Application Visibility & Control
Applications that are capable of evading existing security solutions are pervasive throughout most enterprise networks, introducing a wide range of productivity, security and compliance issues. For customers to regain visibility into, and control over, the applications traversing the network, they need a solution with the following set of capabilities:
- Identifies all applications traversing the network, not a select few that are deemed “bad”.
- Applies application identification techniques across all ports as opposed to the most commonly used.
- Facilitates visibility into application details such as risk level, who is using it, how much traffic it is generating and what are its source and destination.
- Utilizes the application identity as the basis of all policy decisions.
- Enables positive control of all applications based on a wide ranging set of criteria from a single, centralized policy table.
User-based Application Visibility and Control Policies
Palo Alto Networks is bringing application visibility and control back to the IT department with the innovative PA-4000 Series firewall solution that looks at all traffic on all ports with an application centric traffic classification engine, resulting in the accurate identification of more than 500 applications regardless of port, protocol, SSL encryption or evasive tactic used. The application identity is then used to enable all security policy decisions based on criteria such as Active Directory user or group identities, application, IP address, time schedule and more. With a Palo Alto Networks solution, customers are implementing granular application usage control policies to take back control of their network.
Customer Examples
Customers that have deployed the PA-4000 Series are finding applications that they were unaware of running rampant on their network. Nearly 100% of our customers felt that there were non-work related applications such as streaming media, P2P, instant messaging and gaming traversing the network, however they were somewhat surprised that there were so many instances.
- Mercy Medical Center has implemented blocking policies to stop the use of P2P applications, internet gaming, Skype and Joost traversing their network.
- Constellation Energy is using Palo Alto Networks to control the use of instant messaging, video and other streaming media applications.
- State of Pennsylvania-Bipartisan Committee is controlling applications and web browsing to reduce network congestion.
Datasheet Download
"Ensuring business applications are available, and that customer and operational data is protected, are sometimes competing demands we must meet. The PA-4000 Series helps us achieve this goal by enabling us to extend appropriate control over users and applications."
Jon Biskner
Chief Information Security Officer
Nicolet National Bank