I think that everything you do uses a combination of all your past experiences. I am not sure I can put my finger on specific things I have learnt at NetScreen
i disagree. Signatures are still the only mechanism that can scan traffic at multi gig speeds with acceptable latency. I think that the new network security architecture changes how quickly *relevant* signatures get generated and delivered
I have been noticing that other vendors are starting have a similar feature like wildfire. Is PANW looking to add or enhance current security features?
we have already gotten used to the other fw vendors copying everything we do. luckily we are good at staying ahead of them and increasing the gap with every release
there is no much difference anymore, given that the outsiders favorite attack vector is to take over an internal machine and from there jump to the data center. For the purpose of securing the enterprise they are both the same
@nirzuk We hear much about APT's - how best to mitigate? Analytic security products seem own the headlines but not everyone is ready just yet - Are slow-adopters left to process/technology?
the solution will be a combination of processes and technologies all working together. enterprises are still trying to figure out what to do. a quick advise - if you think you found a killer solution - you are probably wrong
They don't have a choice. End users are not asking them whether it's okay to BYOD. Sensitive coprorate information is making its way to personal mobile devices and something needs to be done to protect it
The best PAN appliance has an throughput of 20Gbps (firewall) and 15(threat), but hauwei has 35Gbps (firewall) and 25(threat). is nice to know that pan as GSP support but In an ISP scneario, witch one will be the best appliance to ensure the security ?
it's not about how fast you run but rather what you do at that speed. ISPs are trying to provide more than basic firewall and are turning to Palo Alto Networks for help. In any case, we have already said a 100Gbps device is in the works
Pires Fábio Thanks for the repply. So PAN can be applied not only in corporative scnearios but in ISP too, right ? And you a 100Gbps appliance to deal with it. is it? Can you tell me more about anti-spam ? i know palo alto do not support that, but in ISP...
Contrary to common sense, I think that the hardest verticals to protect would be those that put a lot of restrictions around their users who have become so smart at bypassing security. I'd count financial services and government
#AskPANW
