#AskPANW - CrowdChat

Cybersecurity Chat

For Cybersecurity Awareness Month, Nir Zuk of Palo Alto Networks will be hosting a chat!

#askpanw @nirzuk @paloaltontwks

LeaderBoard

Stream Ended

Establishing a secure connection

The best PAN appliance has an throughput of 20Gbps (firewall) and 15(threat), but hauwei has 35Gbps (firewall) and 25(threat). is nice to know that pan as GSP support but In an ISP scneario, witch one will be the best appliance to ensure the security ?

[+] Show Hidden Comments

it's not about how fast you run but rather what you do at that speed. ISPs are trying to provide more than basic firewall and are turning to Palo Alto Networks for help. In any case, we have already said a 100Gbps device is in the works

Pires Fábio Thanks for the repply. So PAN can be applied not only in corporative scnearios but in ISP too, right ? And you a 100Gbps appliance to deal with it. is it? Can you tell me more about anti-spam ? i know palo alto do not support that, but in ISP...

Pires Fábio ... is impossible to have blacklists and block users.. in your opinion, what is the best solution ?

I believe anti-spam belongs in a dedicated system rather than in an inline firewall

Palo Alto Networks0

#AskPANW @nirzuk Another pre-submitted Q: Of the vertical mkts where PANW has customers, what is hardest 2 protect/why?

[+] Show Hidden Comments

Palo Alto Networks

http://twitter.com/PaloAltoNtwks/status/395602095812128768

Here's @nirzuk video answer #askPANW https://t.co/g67pjbqsyJ

View it on Twitter

Contrary to common sense, I think that the hardest verticals to protect would be those that put a lot of restrictions around their users who have become so smart at bypassing security. I'd count financial services and government

John Casaretto0

@nirzuk Where do DDoS attacks rank on the threat list for enterprise, mid-size, SMB

[+] Show Hidden Comments

Apparently not too high. Less than 5% of Network Security spend goes to DDoS with most of it coming from very large enterprises

Palo Alto Networks0

#AskPANW @nirzuk Everywhere u look, someone claims to have a next-gen security solution? What is the true PANW difference?

[+] Show Hidden Comments

Palo Alto Networks

http://twitter.com/PaloAltoNtwks/status/395602095812128768

Here's @nirzuk video answer #askPANW https://t.co/g67pjbqsyJ

View it on Twitter

what is your take on SDN in security space? Do you think centralized security controller will reduce capex and opex?

[+] Show Hidden Comments

SDN is a big word with very little definition behind it. For me, SDN is providing a software API to the network, security included. Centralized controllers have existed since the mid-90's. APIs to managing security are new.

I think that providing APIs to network security is not about saving money but rather enabling the participation of network security in a virtualized data center where things come, go, and more around all the time

Is there one thing that most companies are forgetting or not realizing about network security, and how do they deal with it?

[+] Show Hidden Comments

I think that many companies forget that network security is not a product but a solution. A single technology, such as IPS, Sandbox, filtering, etc is not going to keep the bad guys out. It's the combination of these technologies that will help

Palo Alto Networks1

#AskPANW @nirzuk New Q sent via DM: What do u see as fundamental difference between PANW approach and UTM boxes?

[+] Show Hidden Comments

(1) UTM vendors have taken existing network security technologies and bolted them together into one physical device. There are still different engines for IPS, AV, URL, DLP, etc. Palo Alto Networks has created a single engine to do all these

(2) UTM vendors deal with the threats of applications by providing a module/blade to block these apps. Palo Alto Networks provides a way to enable the use of these apps while making them as safe to use as email

Most UTM customers never turn on any functionality beyond the basic firewall. Many Palo Alto Networks' customer use all the product's functionality with no performance degradation

Тайгер Оптикс0

@NirZuk - what's next for PANW? Will you enter switching or any adjacent markets?

[+] Show Hidden Comments

I think we still have a lot of work to do in the Network Security space. With <10% market share we need to stayed focused on Network Security. We will continue, however, to do what we do well - change the definition of Network Security

John Casaretto1

@NirZuk - Tell us about the rising threat and challenges of web app security threats #cybersecurity

[+] Show Hidden Comments

I'm actually seeing the threat from web app vulnerabilities declining. The bad guys are putting much more effort into taking of end points as the starting point for getting into the data center

Palo Alto Networks0

#AskPANW @NirZuk If you're giving advice to CIOs on working closely with CSOs next year, where do you start?

[+] Show Hidden Comments

I'd start with having CIOs not take "no can do" from an answer from CSOs. The days of security not letting the business do its business are gone. There are many great technologies that let business operate as it wishes while staying secure