Palo Alto Networks Next-Generation firewalls
Automate repetitive detection and triage tasks to lower your total cost of ownership of Palo Alto Networks firewalls.
Put an end to the 2AM wake-up calls.
When deploying Palo Alto Networks firewalls, organizations need to ensure configurations are done correctly and consistently. In addition performance needs to be continuously assessed and optimized. By using LiveAssurance, engineering and operations teams can be notified of misconfigurations and degradations in performance before they result in service downtime.
Let us take a few things off your plate
LiveAssurance takes care of key Palo Alto Networks maintenance needs to keep your firewalls operating properly and frees you up to take on bigger things.
Implement Palo Alto Networks best practices
- Content update schedule not following best practices – Antivirus, Wildfire, Content, GlobalProtect data file, GlobalProtect clientless VPN content
- Ensure update schedule set to download and install
- Debug mode enabled
- WildFire cloud registration is failing
- EDL(s) configured – empty or not used in policy
- High neighbor discovery (ND) cache usage
Automate maintenance tasks
- Device configuration backup
- Panorama certificate about to expire
- License usage limit approaching
- License about to expire
- Contract(s) expiration nearing
- VPN software end of support nearing
- Hardware & software end of support nearing
Increase network visibility
- SSL decryption – memory usage too high, sessions near capacity
- VPN – tunnels down, dropping packets due to authentication errors or decryption errors
- System – CPU, log DB usage, critical processes, packet buffer, packet descriptor
- Network Interfaces – packet drops, errors, link utilization, data plane pool utilization
- Connections – limit nearing, drastic drop, connection to Panorama
- Dynamic content update – WildFire, URL filtering, External Dynamic List
Demonstrate compliance
- Vulnerability profile not following best practices
- Ensure dangerous URL categories are blocked
- Decryption profile not following best practices
- DNS sinkholing not enabled
- Insecure LDAP communication
- Admin lockout time not within the recommended range
- Checks for OS software versions, DNS & NTP servers to ensure compliance
More on LiveAssurance
Security Insights for smarter, simplified network security without complexity
For LiveNX and LiveWire, get faster, cost-efficient threat detection and forensics without added complexity.
Network observability maturity stuck? Learn how to pull ahead
In EMA and BlueCat’s new report, learn about the five-stage Network Observability Maturity Model and how your enterprise can move along it.
