at a glance

Challenge

Improve firewall protection to combat new threats, reduce manual intervention and provide better visibility.

Solution

Palo Alto Networks Next-Generation Firewall allows the safe enablement of applications, classification of traffic, ease of management, fewer rules, lower TCO and increased security.

Results

  • Increased protection against new malware threats.
  • Improved performance thanks to total network visibility.
  • Reduced manual intervention, saving time and money.
  • Enhanced management of application permissions.
  • Maximized availability with elimination of all issues/incidents since deployment.

MyTV Super successfully launched on April 18, 2016, delivered via a TVB™-branded set-top box and mobile application. It provides unrivaled picture quality, seamless catch-up and a rich content offering consisting of TVB’s terrestrial and thematic channels, as well as other international brand channels, a vast selection of video-on-demand content from TVB’s archive and third-party providers, and exclusive first-run local dramas and variety programs. For convenient viewing, MyTV Super incorporates a three-hour instant rewind capability into TVB-branded linear TV channels.

TVB New Media Group’s existing firewall technology was becoming outdated, and the company was struggling to handle the sophisticated threats and technologies that were appearing. The company wanted to find a next-generation firewall that could provide Layer 7 application control, cope with the latest malware and ensure compliance with auditor requirements.

"The nature of malware has changed in the past year with the emergence of new threats, such as ransomware. Put simply, a traditional firewall cannot protect us anymore," explains Rex Ching, head of Technical Engineering for TVB New Media Group. "Our old system had been in place for five years and was reaching end-of-life, so we needed to find a new solution that would keep our users in China and Hong Kong safe."

Rex and his team undertook a comprehensive evaluation of the market, looking at three key criteria: technical requirements, performance and price. Following benchmarking and proof-of-concept exercises, TVB New Media Group found that Palo Alto Networks® scored the highest in both performance and protection.

"Palo Alto Networks Next-Generation Firewall was the obvious choice. And once we had tested certain security rules, it was simple to deploy," adds Rex. "It is essentially plug-and-play that requires only a minimal time to complete migration. Working with local partner B & Data made the requisite configuration easy, too."

The company deployed a Palo Alto Networks Next-Generation Firewall – one far superior to traditional firewalls. Not based on traditional port-and-protocol filtering, the next-generation firewall allows the safe enablement of applications, simplified traffic classification, easier management, fewer rules, lower TCO and, of course, enhanced security.

The Palo Alto Networks Next-Generation Firewall is a component of the Palo Alto Networks Next-Generation Security Platform which includes the Next-Generation Firewall, Threat Intelligence Cloud, and Advanced Endpoint Protection.

Palo Alto Networks Next-Generation Firewall classifies all traffic, including encrypted traffic, based on application, application function, user and content. This enables TVB New Media Group to create comprehensive, precise security policies to safely enable its applications. Only authorized users may run sanctioned applications, greatly reducing the surface area for cyberattacks across the organization.

"Previously, we had to manage IP access ourselves and had no visibility of upper layers, such as URL addresses," says Rex. "Now, we don’t need to depend on the destination IPs, with Palo Alto Networks enabling us to easily permit or deny any action or attempt to access."

More Powerful Technology

One of the most immediate benefits of Palo Alto Networks Next-Generation Firewall is reduced manual intervention. Automating a significant swath of processes saves Rex and his team hours of work each week, freeing them up to spend that time on more strategic objectives.

More important, however, is the enhanced security the company now enjoys, helping keep it safe from ever-evolving threats, maintain optimal uptime and minimize costs.

"If network attacks were successful, it would cost us more than actually deploying the Palo Alto Networks Next-Generation Firewall. There is too much at stake, so having that peace of mind is essential," continues Rex. "We regularly see suspicious DNS requests and viruses in the network traffic, but the new firewall easily filters them out."

Palo Alto Networks also provides better network visibility via an intuitive graphical user interface. A single, granular view of traffic helps Rex and his team track performance and understand application usage, facilitating better performance and smarter decision-making.


 

How to Secure Your Business in a Multi-Cloud World

This paper highlights an innovative security approach that eliminates the wide range of cloud risks that can cause breaches, while enabling organizations to achieve consistent and frictionless cloud protections for multi-cloud environments.
  • 2
  • 1715

3 Requirements to Safely Enable Microsoft Office 365

This brief describes three key security requirements to safely enable Microsoft Office 365 and other SaaS applications for your business.
  • 2
  • 1790

2017 Cybersecurity Predictions: The Price of Ransomware continues to increase in Asia-Pacific

2016 was a challenging year for organisations particularly as cyber adversaries achieved high-profile success, mainly with ransomware. Organisations in Asia-Pacific are no exception. The year also taught a valuable lesson that no industry vertical is safe; if there is a hole in your security, a determined adversary will find it.
  • 0
  • 3892

Are third party VPN gateways on their way out

In recent years, cybersecurity has emerged as one of the top concerns for business and government leaders around the world. A troubling number of high-profile attacks targeting large companies including banks, telecommunications firms and airlines, to name but a few, has led many IT security managers to question if adequate measures are in place within their own networks. Sophisticated attackers are employing new techniques to penetrate networks and using advanced methodologies to avoid detection.
  • 0
  • 1750

HealthPartners

Healthcare Provider Cures Persistent Cyberthreats with Advanced Endpoint Protection and Dynamic, Integrated Threat Intelligence
  • 3
  • 1250

University of Arkansas

University cut through complexity to strengthen security while enabling open network access for unrestricted learning
  • 0
  • 1094