Know your gear
Palo Alto Networks offers an effective approach to threat prevention that begins by proactively reducing the vulnerability of the network, and then fully inspecting all allowed traffic for threats. Palo Alto Networks lets organizations instantly and dramatically reduce the attack surface of their networks by preventing or limiting risky or unnecessary applications or features. This includes a variety of applications and technologies that are regularly used by attackers to hide their attacks such as proxies, encryption and encrypted tunnels. Next, Palo Alto Networks takes the unique step of fully inspecting all allowed traffic irrespective of port or evasion attempt. This enables Palo Alto Networks to catch all threats even if they are transmitted over non-standard ports or tunneled within other applications or protocols. A single unified threat engine performs IPS, stream-based anti-virus prevention, and blocking of unapproved file types and data. This gives organizations the ability to reduce their exposure, ensure visibility into evasive traffic and protect from all types of threats in a single pass of traffic.