17 palo alto threat prevention concept
1 like1,173 views
https://www.facebook.com/MostafaElLathyIT mostafa.it@hotmail.com https://www.youtube.com/channel/UCAEiVvBP3DbIKUcoZBcaHvQ
17 palo alto threat prevention concept
- 1. Palo Alto Threat Prevention Concept 1. Threat Prevention Overview 2. Content-ID Flow 3. Anti-virus 4. Anti-spyware 5. DNS Sinkhole 6. Vulnerability Protection (IPS) 7. File Blocking 8. Data Filters 9. DoS Protection 10. Zone Protection DLP ( Data Loss Prevention )
- 2. Threat Prevention (Content-ID) Overview APP-ID Anti-virus Web Filtering Wildfire
- 3. Anti-virus HTTP, FTP, SMB ,SMTP, IMAP, and POP3
- 4. Anti-spyware
- 5. DNS Sinkhole
- 6. File Blocking Prevent Introduction of malicious data Prevent exfiltration of sensitive data Logs to Data filtering log
- 7. Blocking Multi-Level Encoded Files
- 10. Packet-Based (Not Signature-Based) and not linked to security policy Two types: Zone Protection profile protects ingress zone DOS policy plus DoS profile protects destination zone or specific hosts
- 12. Security Policy with Security Profiles Security Profiles implement additional security checks on allowed traffic
- 13. Content-ID Flow