English SUPPORT MENU Home Solutions Threat Prevention Threat Prevention 2 saves 2791 views Threat Prevention In today’s threat landscape, traditional malware has become highly targeted and evasive, and specifically designed to be completely undetectable. The goal is to breach the network perimeter by delivering malware that can move laterally across an organization, extracting valuable data as it spreads — all this while remaining invisible to traditional network defenses. Palo Alto Networks protects your network against these threats by providing multiple layers of prevention, confronting threats at each phase of the attack. Our Threat Prevention subscription protects the network from advanced threats by identifying and scanning all traffic — applications, users, and content across all ports and protocols. Block Threats At The Perimeter Intrusion Prevention Vulnerability-based protections detect and block exploit attempts and evasive techniques on both the network and application layers, including port scans, buffer overflows, protocol fragmentation, and obfuscation. Protections are based on both signature matching and anomaly detection Anomaly detection decodes and analyzes protocols, and uses the information learned to block malicious traffic patterns Stateful pattern matching detects attacks across multiple packets, taking into account arrival order and sequence Check out Intrusion Prevention at a glance SSL Decryption A large portion of today’s network traffic — nearly 35% — is encrypted with SSL, leaving a gaping hole in network defenses if left unchecked. Palo Alto Networks next-generation firewalls have built-in SSL decryption capabilities, eliminating this blind spot. All traffic is inspected and advance security services, all without the need for a separate device — removing the complexities of having to manage separate, non-integrated technology. File Blocking Reduce the likelihood of a malware infection by preventing file types known to hide malware from entering your network. Further narrow your window of exposure by sending allowed file types to WildFire™ for analysis. Shut Down Malware Delivery Network Anti-Malware Palo Alto Networks Threat Prevention security service protects against malware delivery through custom-built signatures that are based on content — not hash — to protect against known malware, including variants that haven’t been seen in the wild yet. Protections against newly discovered malware are delivered daily by WildFire, keeping the latest threats from breaching your network. Prevent Threats From Exploring the Network Because our platform is flexible, highly available, and supports high throughput with its Single-Pass scanning architecture, it can be implemented anywhere in the network: At the perimeter (Next-Generation Firewall) Data center edge (PA-7050) Between virtual machines (VMs) in the data center (VM-Series) Distributed enterprise — remote & mobile users, branch offices and operations plants (GlobalProtect™ & Traps™) All points of segmentation Put a Stop to Data Exfiltration Command-and-Control (Spyware) We know that there’s no silver bullet when it comes to preventing all threats from entering your network. This is why we focus on preventing attackers from leaving with important data. Our CnC signatures flag on both inbound and outbound requests to malicious domains, protecting your data from being stolen. DNS Sinkhole Our exfiltration protection goes a step further by providing sinkhole capabilities for outbound requests to malicious DNS entries. Any outbound request to a malicious domain or IP address can be redirected to an internal IP address set up by an administrator. This feature prevents those requests from ever leaving the network and compiles a report of compromised machines making those requests on which incident response teams can act. Leverage Global Threat Intelligence Detailed logs of all threats aren’t merely housed within the same management interface, but are shared between all prevention mechanisms to provide context. We leverage global threat intelligence through the close integration of Threat Prevention security services, URL filtering, and WildFire to automatically discover unknown malware and deliver protections to our entire customer base, keeping them secured against the latest advanced threats. Palo Alto Networks threat research team, Unit 42, analyzes threat data amassed by our global intelligence community to identify and investigate cutting-edge attack methods and malware, and report on unfolding trends within the black hat space. Related Content Threat Prevention Datasheet Overview of optional threat prevention capabilities supported on all models. VIEW Breaking the Cyber Attack Lifecycle The Cyber Attack Lifecycle is a sequence of events that an attacker goes through to successfully infiltrate a netw… VIEW WildFire WildFire automatically protects your networks from new and customized malware across a wide range of applications, i… VIEW Threat Intelligence Cloud To keep up with attackers, defensive tactics must evolve in parallel with new threats in both detection and preventio… VIEW Selective SSL Decryption for Threat Prevention More and more enterprise traffic is being obscured by SSL, including some of the applications and sites that in… VIEW Single-Pass Architecture Outlines the benefits of intelligently integrating security functions into your firewall, why past approaches have f… VIEW Recommended Resources Tech & Solution Brief Enable High Availability With the emergence of an application-driven economy and the persistent risk of cyberattacks, enterprises large an… March 16, 2016 0 163 White Paper Best Practices User Id As data within your network flows to different users, you need to make sure you know exactly who those users ar… March 14, 2016 1 293 Press Release New Zealand Hospital System Prescribes Palo Alto Networks N… Palo Alto Networks® (NYSE: PANW), the next-generation security company, today announced that Southern Cros… Santa ClaraMarch 11, 2016 0 155 Customer Study Southern Cross Hospitals Southern Cross Hospitals is New Zealand’s largest network of private surgical hospitals. To consistently del… March 11, 2016 0 132 Press Release University of Portsmouth Expands Services to Students and Resea… Palo Alto Networks® (NYSE: PANW), the leader in next-generation security, today announced that the University… Santa ClaraMarch 8, 2016 2 148 Customer Study University of Portsmouth The University of Portsmouth relies heavily on its network to support its academic mission. With the constant… March 8, 2016 1 148 Home Solutions Threat Prevention SUBSCRIBE TO NEWSLETTERS SUBSCRIBE COMPANY Company Careers Sitemap Report a Vulnerability LEGAL NOTICES Privacy Policy Terms of Use ACCOUNT Manage Subscription © 2016 Palo Alto Networks, Inc. All rights reserved. SALES > 866.320.4788 SEE A DEMO TAKE A TEST DRIVE CHAT WITH SALES