When deployed in conjunction with Palo Alto Networks GlobalProtect™ for network security at the endpoint, the VM-Series enables you to extend your corporate security policies to mobile devices and users, regardless of their locations.
Control application access with user-based policies: Integration with a wide range of user repositories-such as Microsoft Exchange, Active Directory®, and LDAP- complements application allow listing with user identity as an added policy element that controls access to applications and data.The VM-Series allows native integration with our clouddelivered subscription services, such as Threat Prevention, DNS Security, and WildFire® to apply application-specific policies that block exploits, prevent malware, and stop previously unknown threats from infecting your cloud.
Prevent advanced attacks within allowed application flows: Attacks, much like many applications, can use any port, rendering traditional prevention mechanisms ineffective.Using segmentation and allow listing policies allows you to control applications communicating across different subnets to block lateral threat movement and achieve regulatory compliance. “Segment/Allow” applications for security and compliance: Today’s cyberthreats commonly compromise an individual workstation or user, and then move laterally across your network, placing your mission-critical applications and data at risk wherever they are.Application visibility for informed security decisions: The VM-Series provides application visibility across all ports, meaning you have far more relevant information about your cloud environment to help you make rapid, informed policy decisions.Prisma Secure Access Service Edge (SASE).Cloud Delivered Networking and Security.
0 kommentar(er)
