Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

6/22/2010
04:23 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Palo Alto Networks Introduces GlobalProtect for Remote Enterprise Security

Private cloud-based approach extends next-generation firewall visibility and control to remote endpoints

SUNNYVALE, Calif., June 22 /PRNewswire/ -- Palo Alto Networks(TM), the network security company, today announced GlobalProtect(TM), a solution that helps enterprises secure remote endpoints with faster performance and easier management. Utilizing a unique approach, the solution extends the same visibility and control of applications, users, and content that Palo Alto Networks customers typically enjoy inside the enterprise network to endpoints outside the network.

Unlike traditional approaches to endpoint security, Palo Alto Networks GlobalProtect ties application-, user-, and content-based policies to roaming users through a persistent thin client that can be pre-installed or installed on demand. Similar to a VPN, remote traffic is sent over a secure tunnel. However, unlike typical VPN deployments, which direct traffic to a few geographically centralized gateways, the GlobalProtect client automatically connects to the nearest corporately-managed Palo Alto Networks next-generation firewall deployed at a hub, branch, or in a private cloud. This results in faster throughput, easier management, and better protection.

"The three traditional approaches to endpoint security - client-side software suites, proxies, or full tunnel VPNs - typically have resulted in significant performance impacts, management headaches, or bad user experiences," said Rene Bonvanie, vice president of worldwide marketing at Palo Alto Networks. "Just as we pioneered the next-generation firewall three years ago, we are once again leading the market with GlobalProtect and introducing a new approach to managing and securing remote endpoints while offering security and performance that other firewall vendors cannot match."

More and more applications are moving into the cloud and more and more users are moving off-premise. According to well-known analyst John Pescatore, "The Next Generation Firewall will follow the same pattern - extending to NGFW as a service (or what we used to call 'In the Cloud Firewalling' before the cloud term got ripped away from the Internet carriers) to inject the same firewall policy between the users and the Internet and in between the cloud-based services we consume that used to be inside the data center."(1)

Palo Alto Networks is widely recognized as the only network security vendor with true application visibility and control in the firewall, enabling enterprise IT managers to make informed policy decisions that improve their overall security posture. GlobalProtect reinforces the company's history of innovation by offering enterprise customers solutions that meet their changing security needs.

Pricing and Availability

GlobalProtect will be available in the fourth quarter of 2010 and will initially support Windows-based PCs and laptops. For more information about GlobalProtect, contact your local reseller or visit http://www.paloaltonetworks.com.

About Palo Alto Networks

Palo Alto Networks(TM) is the network security company. Its next-generation firewalls enable unprecedented visibility and granular policy control of applications and content - by user, not just IP address - at up to 10Gbps with no performance degradation. Based on patent-pending App-ID(TM) technology, Palo Alto Networks firewalls accurately identify and control applications - regardless of port, protocol, evasive tactic or SSL encryption - and scan content to stop threats and prevent data leakage. Enterprises can for the first time embrace Web 2.0 and maintain complete visibility and control, while significantly reducing total cost of ownership through device consolidation. For more information, please visit http://www.paloaltonetworks.com.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Edge-DRsplash-10-edge-articles
7 Old IT Things Every New InfoSec Pro Should Know
Joan Goodchild, Staff Editor,  4/20/2021
News
Cloud-Native Businesses Struggle With Security
Robert Lemos, Contributing Writer,  5/6/2021
Commentary
Defending Against Web Scraping Attacks
Rob Simon, Principal Security Consultant at TrustedSec,  5/7/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-31922
PUBLISHED: 2021-05-14
An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.
CVE-2021-32051
PUBLISHED: 2021-05-14
Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter.
CVE-2021-32615
PUBLISHED: 2021-05-13
Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.
CVE-2021-33026
PUBLISHED: 2021-05-13
The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can construct a crafted payload, poison the ca...
CVE-2021-31876
PUBLISHED: 2021-05-13
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction with ...