Aperture for SaaS - Palo Alto Networks

Sanctioned isn’t the same as secure

Fill the SaaS security gaps that put your data at risk

The appeal of SaaS applications, such as Office 365^®, G Suite, Box and Salesforce^® is growing, but so are the hidden threats in SaaS offerings: accidental data exposure, malicious outsiders, promiscuous sharing and so on. Even sanctioned SaaS adoption can increase the risk of breaches and non-compliance. Aperture™ SaaS security service helps eradicate the risks. It lets you connect directly to SaaS applications to provide data classification, data leakage prevention and threat detection – so you can secure your sanctioned applications.

Interested in learning more about SaaS Security?

Tune in to our educational SaaS Podcast Series.

Safely enabling SaaS adoption

Risk discovery and deep visibility

Aperture provides complete visibility across all user and data activity, along with detailed analysis that helps you transition from speculation to certainty about what’s happening at any given point in time.

Data leak prevention and compliance

Data within enterprise-enabled cloud applications may not be visible to an organization’s network perimeter. Aperture can connect directly to enterprise SaaS applications to provide:

Data classification and monitoring
Data Loss Prevention (DLP) capabilities
User activity tracking for anomalies
Known and unknown malware prevention
Detailed risk and usage reporting

This unparalleled visibility lets you inspect content for data risk violations and control access to shared data via a contextual policy. Read the white paper

Advanced threat prevention

Our WildFire™ threat analysis service integrates with Aperture to provide advanced threat prevention to block known malware, and we are the only CASB to identify and block unknown malware. You can keep threats from spreading through the sanctioned SaaS applications, preventing a new insertion point for malware.

New malware discovered by Aperture is shared with the rest of the Security Operating Platform, strengthening your overall security posture.

CASB capabilities, cloud delivered

Meet your cloud application security broker needs with the Security Operating Platform, including our next-generation firewalls, which inspect all traffic – including applications, threats and content – and tie it to the user, regardless of location or device type. Aperture extends these capabilities by connecting directly to cloud applications via API to gain deep visibility into your data or applications, and can apply granular policy and consistent control. You now have complete visibility and reporting, instant classification, and fine-grained enforcement across users, folders and file activities – so you can protect your data in the cloud.