| PaloAlto PA-2000 Series - Next Generation Firewall |
The PA-2000 Series is a next generation firewall that provides innovative visibility and control over applications, users and content over organizations networks. The PA-2000 series contains two high performance platforms, the PA-2020 and the PA-2050, both of which are perfectly matched for high speed Internet gateway implementations within large offices or medium sized enterprises. The PA-2000 Series utilizes dedicated processing and memory to control network traffic flows for networking, security, threat prevention and management. A high speed backplane levels the pathway between processors and the separation of data and control plane guarantees that management access is constantly available, no matter of the traffic load.
The PA-2020 and the PA-2050's interface density is unparalleled with up to 20 traffic interfaces and dedicated out-of-band management interfaces.
Palo Alto Networks is the first and only next generation firewall to provide data leak prevention (DLP) functionality in a network firewall, and its in the whole range of next generation firewall family. This new security capability will be of no extra cost to customers and allows organisations to identify vital parts of personally identifiable information, such as Social Security or credit card numbers, within application traffic. Based on easy to define policies, the firewall can then take instinctive action i.e. altering, blocking etc to stop unintended or deliberate disclosure of delicate information.
PAN-OSTM is a major factor of the PA-2000 Series next generation firewalls. Its a security-specific operating system that firmly incorporates three unique identification technologies: App-IDTM, User-ID and Content-ID, with networking, IPSec VPN connectivity, and management functions.
App-ID is an application identification technology that classifies traffic based on the application - irrespective of port, protocol, SSL encryption, or evasive tactics.
User-ID is a technology that integrates with Microsoft Active Directory to enable the visibility and control of application by users and groups of users – not just by IP addresses.
Content-ID is a high performance content inspection engine that prevents a wide range of threats, blocks file transfers, data leakage and controls web surfing.
http://www.1st-computer-networks.co.uk/paloalto-firewall.php
Article Source: UnArchived Articles
|
|
|
|
