Automate Network Security Policy Management for Palo Alto Networks Next-Generation Firewalls Solution Overview

The Challenge: Managing Next-Generation Firewall Policies

Todays network environment is very complex and as network security policies become more granular, based on applications and users, ensuring proper rewall congurations is more important than ever before. Next-Generation Firewalls provide newfound levels of rewall policy granularity and control. However, if not managed and optimized they can also introduce more policy complexity, human error and ultimately more risk.

AlgoSec Security Management Suite: Centralizes and automates policy management across next-generation, traditional and hypervisor-level rewalls Signicantly reduces the time to process change requests by as much as 60% Streamlines rewall operations with complete topologyaware visibility of all rules and changes Identies risky rewall rules that include applications, in addition to ports and services Provides exibility to dene and enforce baseline compliance for custom policies Simplies auditing and compliance using out-ofthe-box reports (PCI DSS, SOX, ISO, and more)

The Solution: AlgoSec Security Management Suite for Palo Alto Networks Firewalls
The AlgoSec Security Management Suite (ASMS) provides IT with visibility and control of complex, multivendor network environments through the intelligent automation of rewall policy management. ASMS combines AlgoSec Firewall Analyzer and AlgoSec FireFlow to automate rewall operations, simplify auditing and compliance, reduce risk and streamline the security change lifecycle across all leading rewalls, routers, VPNs, proxies and related security devices. The AlgoSec Suite seamlessly integrates with Palo Alto Networks rewalls to automate the complete lifecycle of application and user aware security policies and ultimately ensure that Palo Alto Networks devices are properly congured. Only the AlgoSec Security Management Suite enables organizations to efciently integrate policy analysis and change management of Palo Alto Networks rewalls. Key Features: Fully automated and customizable workow for processing change requests Automatic generation of compliance reports for PCI-DSS, SOX, NERC CIP, ISO and more Change monitoring tracks all rewall policy changes in real time and alerts on risky changes Baseline compliance allows for device congurations to be dened and reported against Firewall policy optimization discovers unused rules and objects and recommends reordering of rules to achieve optimal rewall performance

Figure 1: AlgoSec delivers complete topology visibility and analysis through an interactive network map.

Figure 2: AlgoSec Security Management Suite provides recommendations to tighten policies based on application usage.

Figure 3: AlgoSec provides a highly customizable visualization of the change workow that can be tailored to each specic environment.

AlgoSec

AlgoSec is the market leader in network security policy management. AlgoSec enables security and operations teams to intelligently automate the policy management of rewalls, routers, VPNs, proxies and related security devices, improving operational efciency, ensuring compliance and reducing risk. Through the AlgoSec Security Management Suite, network security and operations teams can efciently and effectively manage complex security policies on Palo Alto Networks next-generation rewalls and traditional rewalls from all of the leading vendors.

Palo Alto Networks

Palo Alto Networks next-generation rewalls enable unprecedented visibility and granular policy control of applications and content by user, not just IP address at up to 20 Gbps with no performance degradation. Based on patent-pending App-ID technology, Palo Alto Networks rewalls accurately identify and control applications regardless of port, protocol, evasive tactic or SSL encryption and scan content to stop threats and prevent data leakage. Enterprises can, for the rst time, embrace Web 2.0 and maintain complete visibility and control, while signicantly reducing total cost of ownership through device consolidation.

Next Steps

For more information on how to automate the management of Palo Alto Networks rewalls with AlgoSec, please visit www.algosec.com, evaluate the Suite or contact your local sales representative.

AlgoSec.com
Headquarters 300 Colonial Center Parkway, Suite 100 Roswell, GA 30076 USA +1-888-358-3696 northamerica.sales@algosec.com EMEA Headquarters 1 Liverpool Street London EC2M 7QD United Kingdom +44-203 5516892 emea.sales@algosec.com APAC Headquarters 10 Anson Road, #14-06 International Plaza Singapore 079903 +65-3158-2120 apac.sales@algosec.com

Follow Us On:

Copyright 2012 AlgoSec. Inc. All rights reserved. AlgoSec and FireFlow are registered trademarks of AlgoSec Inc. ActiveChange, Intelligent Policy Tuner, Deep Policy Inspection and the AlgoSec Logo are trademarks of AlgoSec Inc. All other trademarks used herein are the property of their respective owners.