Palo Alto Networks Next-Generation firewalls
Automate repetitive detection and triage tasks to lower your total cost of ownership of Palo Alto Networks firewalls.
Put an end to the 2AM wake-up calls.
When deploying Palo Alto Networks firewalls, organizations need to ensure configurations are done correctly and consistently. In addition performance needs to be continuously assessed and optimized. By using LiveAssurance, engineering and operations teams can be notified of misconfigurations and degradations in performance before they result in service downtime.
Let us take a few things off your plate
LiveAssurance takes care of key Palo Alto Networks maintenance needs to keep your firewalls operating properly and frees you up to take on bigger things.
Implement Palo Alto Networks best practices
- Content update schedule not following best practices – Antivirus, Wildfire, Content, GlobalProtect data file, GlobalProtect clientless VPN content
- Ensure update schedule set to download and install
- Debug mode enabled
- WildFire cloud registration is failing
- EDL(s) configured – empty or not used in policy
- High neighbor discovery (ND) cache usage
Automate maintenance tasks
- Device configuration backup
- Panorama certificate about to expire
- License usage limit approaching
- License about to expire
- Contract(s) expiration nearing
- VPN software end of support nearing
- Hardware & software end of support nearing
Increase network visibility
- SSL decryption – memory usage too high, sessions near capacity
- VPN – tunnels down, dropping packets due to authentication errors or decryption errors
- System – CPU, log DB usage, critical processes, packet buffer, packet descriptor
- Network Interfaces – packet drops, errors, link utilization, data plane pool utilization
- Connections – limit nearing, drastic drop, connection to Panorama
- Dynamic content update – WildFire, URL filtering, External Dynamic List
Demonstrate compliance
- Vulnerability profile not following best practices
- Ensure dangerous URL categories are blocked
- Decryption profile not following best practices
- DNS sinkholing not enabled
- Insecure LDAP communication
- Admin lockout time not within the recommended range
- Checks for OS software versions, DNS & NTP servers to ensure compliance
More on LiveAssurance
Stay ahead of network issues with real-time metrics with BlueCat Integrity X
Get real-time DNS, DHCP, and IPAM metrics with BlueCat Integrity X. Detect issues early using native Prometheus telemetry and proactive DDI observability.
Adding business context to DDI with tagging in BlueCat Integrity X
Add business context to DNS, DHCP, and IPAM with tagging in BlueCat Integrity X. Improve visibility, automation, and governance across complex networks.
Security Insights for network security at the edge without complexity
For LiveWire and LiveNX users, analyze flow and packet telemetry for faster threat detection, stronger forensics, and shared visibility.