Palo Alto PA-5220 Advanced Threat Lizenz für HA-Geräte

IPS (Intrusion Prevention Systems) and IDS (Intrusion Detection Systems) are considered basic network security systems for detecting and stopping known threats. Unfortunately, cybercriminals are using innovative tools and techniques that allow them to bypass even the most advanced next-generation IPS solutions. With most IPS or IDS solutions, traffic is only inspected for specific ports. While additional monofunctional devices can mitigate certain issues, this usually has a negative impact on performance and prevents a comprehensive view of the entire infrastructure. In addition, these systems and devices do not cover all basic functions, which means that already understaffed security teams have to find and patch vulnerabilities to prevent data leaks. The biggest problem, however, is that even modern IPS solutions are unable to defend against unknown threats in real time during the critical stages of the attack process.

First-in-class IPS with industry-first defense against unknown C2 activity

Advanced Threat Prevention from Palo Alto Networks builds on the industry-leading Threat Prevention security service to protect your network with layered defenses that stop both known and unknown threats. In addition to cutting-edge IPS capabilities, Advanced Threat Prevention provides the unique ability to block well-camouflaged and unknown command-and-control (C2) channels using deep-learning and ML models. This is done completely inline and is an organization's last chance to stop an active attack before C2 communications are initiated. While other solutions invoke signatures on a limited number of predetermined ports, Advanced Threat Prevention detects and blocks threats on all ports, providing the best visibility an IPS can give. By sharing threat intelligence, our global customer community is making a significant contribution to stopping even the most complex attacks in real time and making it increasingly rare for malicious actors to succeed.

Advanced Threat Prevention also receives daily updates from our other cloud-delivered security subscriptions to defend against exploits, malware, malicious URLs, C2 communications, spyware and other threats. These include WildFire® (our malware protection service for unknown file-based threats), Advanced URL Filtering for protection against web-based attacks, DNS Security for defense against DNS-based cyberattacks, and IoT Security for more visibility and context around unmanaged devices. Combined with these subscription services, Advanced Threat Prevention can stop unknown threats in near real-time, making it a must-have for any NGFW.

Advantages of Palo Alto Advanced Threat Prevention

Advanced Threat Prevention is a security service that offers the following benefits:

• Reduce business risk with inline blocking of unknown C2 communications: Block up to 48 percent more unknown C2 connections with Advanced Threat Prevention than with other industry-leading threat prevention solutions.
• No cost or management overhead for separate IPS solutions: Use Snort and other powerful IPS capabilities integrated with our NGFW as a centralized data repository for security-related policy rules
• Better visibility into attack attempts for confidence that your organization is protected: Scan all traffic for threats, regardless of port, protocol, or encryption
• Reduced resource requirements for vulnerability and patch management: known malware, exploits, and C2 communications are automatically defended against with 100 percent effectiveness
• Comprehensive threat detection and defense enforcement without sacrificing performance