PA-400 Series
The Palo Alto Networks PA-400 Series Next-Generation Firewalls (NGFWs) comprise the PA-410, PA-415, PA-415- 5G, PA-440, PA-445, PA-450, PA-455, PA-455-5G, and PA-460. They bring ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsized businesses.
The world's first ML-Powered NGFW enables you to prevent unknown threats, see and secure everything- including the internet of things (IoT)-and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applications, threats, and content, and then ties that traffic to the user regardless of location or device type. The applications, content, and users-the elements that run your business-serve as the basis of your security policies, resulting in an improved security posture and reduced incident response times
Key Security and Connectivity Features | ML-Powered Next-Generation Firewall
- Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file-based attacks while identifying and immediately stopping never-before-seen phishing attempts.
- Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
- Uses behavioral analysis to detect internet of things (IoT) devices and make policy recommendations; is a cloud-delivered and natively integrated service on the NGFW.
- Automates policy recommendations that save time and reduce the chance of human error.
Identifies and categorizes all applications, on all ports, all the time, with full Layer 7 inspection
- Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (SSL/TLS). In addition, it automatically discovers and controls new applications to keep pace with the SaaS explosion with SaaS Security subscription.
- Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.
- Offers the ability to create custom App-ID™ tags for proprietary applications or request App-ID development for new applications from Palo Alto Networks.
- Identifies all payload data within the application (e.g., files and data patterns) to block malicious files and thwart data exfiltration attempts.
- Creates standard and customized application usage reports, including software-as-a-service (SaaS) reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.
- Enables safe migration of legacy Layer 4 rule sets to rules based on App-ID with Policy Optimizer built in, giving you a rule set that is more secure and easier to manage.
